delete uploading files right away after the reject.
Today I've seen this in the log:
2018-12-24 +0000 09:38:30,465 DEBUG [debexpo.worker] Run job importuploads
2018-12-24 +0000 09:38:30,467 INFO [debexpo.worker] Import upload: /var/cache/debexpo/incoming/pub/pub/UploadQueue/blueman_2.0.7-1_amd64.changes
2018-12-24 +0000 09:38:30,467 DEBUG [debexpo.worker] Executing: /var/www/debexpo/bin/debexpo_importer.py -i /var/www/debexpo/live.ini -c blueman_2.0.7-1_amd64.changes
2018-12-24 +0000 09:38:31,334 CRITI [debexpo.worker] Importer failed to import package /var/cache/debexpo/incoming/pub/pub/UploadQueue/blueman_2.0.7-1_amd64.changes [err=1].
2018-12-24 +0000 09:38:31,335 DEBUG [debexpo.worker] Output was
2018-12-24 +0000 09:38:30,980 INFO [debexpo.importer.6794] Changing dir to /var/cache/debexpo/incoming/
2018-12-24 +0000 09:38:30,990 DEBUG [debexpo.importer.6794] Determining user from 'Changed-By:' field: Christopher Schramm <debian@cschramm.eu>
2018-12-24 +0000 09:38:30,990 DEBUG [debexpo.importer.6794] Changed-By's email address is: debian@cschramm.eu
2018-12-24 +0000 09:38:31,250 DEBUG [debexpo.importer.6794] GPG signature matches user debian@cschramm.eu <None>
2018-12-24 +0000 09:38:31,256 DEBUG [debexpo.importer.6794] GPG signature matches user Christopher Schramm <cschramm@cschramm.eu>
2018-12-24 +0000 09:38:31,260 DEBUG [debexpo.importer.6794] GPG signature matches user Christopher Schramm <cschramm@shakaweb.org>
2018-12-24 +0000 09:38:31,266 DEBUG [debexpo.importer.6794] GPG signature matches user Christopher Schramm <debian@shakaweb.org>
2018-12-24 +0000 09:38:31,271 ERROR [debexpo.importer.6794] Rejected: Rejecting your upload. Your GPG key does not match the email used to register
2018-12-24 +0000 09:38:31,335 DEBUG [debexpo.worker] Remove stale file /var/cache/debexpo/incoming/blueman_2.0.7-1.dsc - the importer probably crashed
2018-12-24 +0000 09:38:31,335 DEBUG [debexpo.worker] Remove stale file /var/cache/debexpo/incoming/blueman_2.0.7.orig.tar.xz - the importer probably crashed
2018-12-24 +0000 09:38:31,336 DEBUG [debexpo.worker] Remove stale file /var/cache/debexpo/incoming/blueman_2.0.7-1.debian.tar.xz - the importer probably crashed
2018-12-24 +0000 09:38:31,336 DEBUG [debexpo.worker] Remove stale file /var/cache/debexpo/incoming/blueman-dbgsym_2.0.7-1_amd64.deb - the importer probably crashed
2018-12-24 +0000 09:38:31,336 DEBUG [debexpo.worker] Remove stale file /var/cache/debexpo/incoming/blueman_2.0.7-1_amd64.buildinfo - the importer probably crashed
2018-12-24 +0000 09:38:31,336 DEBUG [debexpo.worker] Remove stale file /var/cache/debexpo/incoming/blueman_2.0.7-1_amd64.deb - the importer probably crashed
2018-12-24 +0000 09:38:31,339 DEBUG [debexpo.worker] Source file /var/cache/debexpo/incoming/pub/pub/UploadQueue/dm-zoned-tools_1.0.1-7.dsc does not exist - putting upload on hold
2018-12-24 +0000 09:38:31,339 DEBUG [debexpo.worker] Job importuploads complete
I think the importer job should take care of deleting the uploaded files before exiting, even if the worker would take care of it anyway.