I had long thought that 'gbp import-orig --uscan' did not import the
upstream PGP signature until I read this bug report:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010205

I hadn't set 'upstream-signatures = on' for my packages, and I suspect I
at some point also tried 'upstream-signatures = yes' that didn't do
anything useful so ignored this problem and resolved to manually fixing
the 'pristine-tar' branch to include the PGP signature.

I believe it would be nice if 'gbp import-orig --uscan' had a more
sensible default here.  If pristine-tar is used (possibly automatic if
there is a pristine-tar branch) it should also import the upstream PGP
signature into the pristine-tar branch if uscan downloaded PGP
signature.  Without any need to set 'upstream-signatures = on' in
debian/gbp.conf.

Sorry if this is already reported via some other bug, I did search
through open bug reports but did not find this particular request in
relevant subject lines (but could have missed it).

/Simon