diff --git a/appview/db/pulls.go b/appview/db/pulls.go
--- a/appview/db/pulls.go
+++ b/appview/db/pulls.go
@@ -246,7 +246,7 @@
 	// collect pull source for all pulls that need it
 	var sourceAts []syntax.ATURI
 	for _, p := range pulls {
-		if p.PullSource.RepoAt != nil {
+		if p.PullSource != nil && p.PullSource.RepoAt != nil {
 			sourceAts = append(sourceAts, *p.PullSource.RepoAt)
 		}
 	}
@@ -259,7 +259,7 @@
 		sourceRepoMap[r.RepoAt()] = &r
 	}
 	for _, p := range pulls {
-		if p.PullSource.RepoAt != nil {
+		if p.PullSource != nil && p.PullSource.RepoAt != nil {
 			if sourceRepo, ok := sourceRepoMap[*p.PullSource.RepoAt]; ok {
 				p.PullSource.Repo = sourceRepo
 			}
diff --git a/appview/signup/signup.go b/appview/signup/signup.go
--- a/appview/signup/signup.go
+++ b/appview/signup/signup.go
@@ -133,7 +133,7 @@
 		noticeId := "signup-msg"
 
 		if err := s.validateCaptcha(cfToken, r); err != nil {
-			s.l.Warn("turnstile validation failed", "error", err)
+			s.l.Warn("turnstile validation failed", "error", err, "email", emailId)
 			s.pages.Notice(w, noticeId, "Captcha validation failed.")
 			return
 		}