Signed commits, worth it or theatre

Back to list2025-08-20
You

Does commit signing matter for a solo public project?

ChatGPT

It proves commits came from a key you control, which matters mostly for released tags and for actions others automate against. For everyday commits on a one-person project it is largely ceremony, and an expired key causes more confusion than it prevents.

Tool steps: 3 (reasoning summary, call to python, execution output)
reasoning summary
Checked the query plan, then compared index options.
call to python
rows = run_sql("EXPLAIN (ANALYZE) SELECT ...")
print(rows[:3])
execution output
Seq Scan on events  (cost=0.00..812431.00 rows=41203122 width=16)
  Rows Removed by Filter: 38996878
Planning Time: 0.214 ms
Execution Time: 11842.663 ms
You

I pushed a bad commit to a shared branch. Reset or revert?

ChatGPT

Revert. It creates a new commit that undoes the change and leaves everyone else's history intact. Reset plus force push rewrites what others have already pulled, which turns your small mistake into everyone's afternoon.

You

Does rebasing actually help with two people?

ChatGPT

Marginally. The real value of rebase is a readable history when many branches land per day. With two people the cost of the occasional botched rebase usually exceeds the benefit, so merge and squash on the way in is a calmer default.