A tiny Go service with a deliberately flawed pull request showing how DiffPal reviews code inside GitHub Actions.
View the live demo review · DiffPal documentation · DiffPal source repository
The open demo pull request shows normal tests passing alongside a DiffPal review summary, actionable inline findings, repository-owned review instructions, an optional merge gate, and machine-readable artifacts.
go test ./...
go run ./cmd/serverCreate an order:
curl -X POST http://localhost:8080/orders \
-H 'Content-Type: application/json' -H 'X-User-ID: user-123' \
-d '{"product_id":"keyboard","quantity":2}'Retrieve it:
curl http://localhost:8080/orders/ord-000001 -H 'X-User-ID: user-123'- Create a repository from this template.
- Add an
OPENAI_API_KEYrepository secret. - Open a same-repository pull request.
- Inspect the DiffPal review.
The configured provider receives review context. Keep secrets out of workflows that execute untrusted fork pull request code.
The red DiffPal check is intentional. The permanent demo PR contains high-severity regressions so the repository can demonstrate merge gating.
main is the clean baseline. The canonical demo PR remains open and should not
be merged.