Koji will get support for repositories with signed packages. Use this feature in pungi.
There is another issue opened about this #290, so I'm closing this one.
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/pungi/pungi/issues/70
Please continue any further discussion there.