# Upstream does not publish detached signatures for release tarballs or
# signed git tags.
qdl source: debian-watch-does-not-check-openpgp-signature
