Lintian ReportsBETA

orig-tarball-missing-upstream-signature

The packaging includes an upstream signing key but the corresponding .asc signature for one or more source tarballs are not included in your .changes file.

Please ensure a <package>_<version>.orig.tar.<ext>.asc file exists in the same directory as your <package>_<version>.orig.tar.<ext> tarball prior to dpkg-source --build being called.

If you are repackaging your source tarballs for Debian Free Software Guidelines compliance reasons, ensure that your package version includes dfsg or similar.

Sometimes, an upstream signature must be added for an orig.tar.gz that is already present in the archive. Please include the upstream sources again with dpkg-genchanges -sa while the signature is also present. Your upload will be accepted as long as the new orig.tar.gz file is identical to the old one.

For more information please consult:

The tag is present in Lintian version 2.114.163. That is the most recent version we know about.

We use semantic versions. The patch number is a commit step indicator relative to the 2.108.0 release tag in our Git repository.

You can find the detection logic for this version at commit a1e47cb. For merge requests, please use the latest version in the Lintian check upstream-signature.

Visibility: warning

The following 661 source packages in the archive triggered the tag 666 times (in any Lintian version).

We found 16 overrides. The tag performed 98% of the time.