Infra: dgit-repos-server-debian: Run check_package on push

diff --git a/infra/dgit-repos-policy-debian b/infra/dgit-repos-policy-debian
index 75b4737a84ed49035505eb4ebc64f15109e831ee..e665a636566242c95b844c518a3eebaad93870ce 100755 (executable)
--- a/infra/dgit-repos-policy-debian
+++ b/infra/dgit-repos-policy-debian
@@ -221,6 +221,7 @@ sub check_package () {
 
     if (good_suite_has_vsn_in_our_history) {
        chmod $publicmode, "." or die $!;
+       $pkg_secret = 0;
        return 0;
     }
 
@@ -260,6 +261,8 @@ sub action_push () {
     getpackage();
     getpushinfo();
 
+    check_package(); # might make package public, or might add taints
+
     return 0 unless $pkg_exists;
     return 0 unless $pkg_secret;