diff --git a/src/main/java/hudson/plugins/repo/RepoScm.java b/src/main/java/hudson/plugins/repo/RepoScm.java
index dd63a38..200116f 100644
--- a/src/main/java/hudson/plugins/repo/RepoScm.java
+++ b/src/main/java/hudson/plugins/repo/RepoScm.java
@@ -1030,6 +1030,12 @@ private int doSync(final Launcher launcher, @Nonnull final FilePath workspace,
 		if (fetchSubmodules) {
 			commands.add("--fetch-submodules");
 		}
+		if (repoUrl != null) {
+			// When repoUrl is set, we allow for unsigned repo tool
+			// versions; so --no-repo-verify must be set both in init
+			// and sync.
+			commands.add("--no-repo-verify");
+		}
 		return launcher.launch().stdout(logger).pwd(workspace)
                 .cmds(commands).envs(env).join();
 	}