do not verify pgp on bitbucket - no releases signed there
add signatures on bitbucket