There seems to be 3 bug reports about checking upstream release tag signatures:
Bug#839866 import-orig: please make --upstream-vcs-tag=... verify tag signatures Bug#871806: uscan: (dpkg, git-buildpackage) accept/mangle/store signed git tags in cases where upstream does not publish detached sigs on tarballs Bug#980927 import-ref: Check tag signatures
