Comment by wmanley

On a related note: I think that deterministic generating something based on a git commit and then later diffing the results across commits is in general a very useful technique. Our builds work similarly. We build our software into (several) container/disk images, then we show the diff between these build artefacts on PRs.

It can help you spot when something changes that you didn’t expect, and vice-versa.

For this to work we store all our builds indexed by git commit sha.