summaryrefslogtreecommitdiffstats
path: root/tags/d/debian-watch-could-verify-download.tag
diff options
context:
space:
mode:
Diffstat (limited to 'tags/d/debian-watch-could-verify-download.tag')
-rw-r--r--tags/d/debian-watch-could-verify-download.tag9
1 files changed, 9 insertions, 0 deletions
diff --git a/tags/d/debian-watch-could-verify-download.tag b/tags/d/debian-watch-could-verify-download.tag
new file mode 100644
index 0000000..a48cd57
--- /dev/null
+++ b/tags/d/debian-watch-could-verify-download.tag
@@ -0,0 +1,9 @@
+Tag: debian-watch-could-verify-download
+Severity: warning
+Check: debian/watch
+See-Also: uscan(1)
+Explanation: One or more upstream signing keys are present in the Debian package
+ but are not being used.
+ .
+ Please enable the cryptographic verification of downloads with the
+ "pgpsigurlmangle" option in your watch file or remove the key.