When the automated ingestion script crashes, tarballs can be reported as non-signed, because the signature is not verified again during the next run (and self.sig_verified is by default set to False). The script should redo this right before opening the staging PR to make sure that it prints the correct message.