See also related: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=931314 gbp: Doesn't check if the vcs is current before importing
https://salsa.debian.org/salsa-ci-team/pipeline/-/issues/439 Check for upstream tarball checksum mismatch https://salsa.debian.org/debian/debcraft/-/issues/19 Can debcraft/gbp detect I forgot to pull from Salsa?
