# upstream does not sign releases
source: debian-watch-may-check-gpg-signature
