in Fedora we have "pkgset_koji_inherit = False" set in the pungi config, we had composes failing requiring all packages be signed. this was due to some package that were only available via inheritance being included and them not being signed with the fedora-24 key. On inspection we figured out they were coming in only via inheritance.
I see two options to fix this:
Which one would you prefer?
Wait, I misread this. You want the inheritance turned off completely.
Fix in PR #210.
This issue has been migrated to Fedora Forge: https://forge.fedoraproject.org/pungi/pungi/issues/209
Please continue any further discussion there.