# upstream does not always sign the releases
dq source: orig-tarball-missing-upstream-signature dq_20230101.orig.tar.gz
