Michael A. Aurora12

Solution

A way to solve this in a non-interactive way:

# Optional but helpful: remember conflict resolutions
git config rerere.enabled true
git config rerere.autoupdate true
git config rerere.autoreuse true

# don't auto-open editor on merges

Rationale

Signing commits with GPG adds another layer of security to GitHub flow.

While access to the repos is secured by your SSH key, this is only a transport authentication. Signing commits with GPG provides a proof of your identity as well as commit contents integrity.

While SOC 2 doesn't explicitly state "you must sign your commits," it provides auditors with strong, automated evidence that we are adhering to our own policies. Compliance tools have built-in tests to enforce signed commits. Branch protection rules in GitHub can require commit signing.

Actions to Take

Avoid using any product under AGPL v3 as a part of your software

And, while AGPL v2 may be passable under certain conditions, we'd better avoid it altogether.

Examples and articles

Google internally forbids using AGPL-licensed products for its projects and has a nice explanation of the reasoning.

Here is a good overview of the problem.

{"level":"info","#":0,"id":"f4fdb10f-4448-48a8-b55e-1862fed3d15b_e1733967-57d1-4ad3-a754-52c62e5347ae","content_type":"application/pdf","chunk_length":162,"chunk":"

King Lear Shakespeare homepage | King Lear | Act 1, Scene 1 Next scene SCENE I. King Lear's palace. Enter KENT, GLOUCESTER, and EDMUND KENT I thought the king had

","time":"2025-08-12T13:03:14Z","caller":"/app/internal/llmworker/embed.go:96","message":"0 embedding content chunk"} {"level":"info","#":1,"id":"f4fdb10f-4448-48a8-b55e-1862fed3d15b_e1733967-57d1-4ad3-a754-52c62e5347ae","content_type":"application/pdf","chunk_length":160,"chunk":"

KENT, GLOUCESTER, and EDMUND KENT I thought the king had more affected the Duke of Albany than Cornwall. GLOUCESTER It did always seem so to us: but now, in the

","time":"2025-08-12T13:03:14Z","caller":"/app/internal/llmworker/embed.go:96","message":"1 embedding content chunk"}

[Playground](https://www.typescriptlang.org/play/?jsx=0#code/PTAEEkFFtB2BWALKAcgQxQLgFAlACwBdCAHAZ0xAFMA7AOgHcBLAayZKoBMm06B7AE4BzYMzbB0KAMSQaAYz7caQ7LgBU2ACr4qoPgDcqAtABsToE2gCefAK6E9AM1CEdoAGyIAtACMmDzjsfEyovEgEqOSYyJj4aUEcTPjRCJmUwvjSHGlsAWx8jHFBQNVAAZSYheL9CTFAARlAa0AAKXL4yBxiqpkcmOTQaB2a+Z1ddWlSIj29mhkFOAEpsYtLIAA8SOMm6+saaslbHPjM+ZmUXN27q-wAaUHbO0Gve-sGHPoFO5dXyyppXgMaJxWgAxYxyVJxRZ1eAAJia-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

go mod edit -replace github.com/repo=github.com/repo@commit-hash
go mod tidy
go mod vendor

	// https://go.dev/play/p/zMefNMTZCOo

	package main

	import "fmt"

	type A interface {
	Test(value int) string
	}

	# Errors similar to this:

	# Err:4 http://archive.ubuntu.com/ubuntu bionic-backports InRelease
	# At least one invalid signature was encountered.

	# Probably mean Docker ran out of space (and the error is completely unhelpful).

	docker builder prune -f # This may be enough

	# If that didn't help

	#!/usr/bin/env bash

	script_path="$(realpath "$0")"
	script_folder="$(dirname "$script_path")"