Skip to content

Troubleshooting

  • Header must be access-token, not Authorization.
  • Token deleted or past expires_at.
  • OIDC exchange: wrong issuer, audience, or subject. Compare JWT claims to the trust rule.
  • Password must be the access token.
  • Token needs GIT_HTTP_READ (clone) and GIT_HTTP_WRITE (push).
  • Confirm the path: /r/<username>/<repo>.git on host amendable.io.
  • Wrong username or repo name.
  • Token scope is SELECTED_REPO and this repo is not on the list.
  • Active quota (free: 5) or total quota (free: 25).
  • storage_bucket_id is not ACTIVE or not yours.

Name already used by you.

  • Events list does not include push (or create / delete).
  • URL is HTTP, localhost, or a private IP. Production rejects those.
  • Check deliveries: amendable webhook deliveries ID --json.

You hashed parsed JSON instead of the raw body, or you expected a sha256= prefix. Amendable sends hex only.

Trust policy sub / aud / issuer host mismatch. Copy from GET /v1/storage-buckets/oidc-setup. sub is account:<uuid>.

BYO Git 500, error log empty, bucket still ACTIVE

Section titled “BYO Git 500, error log empty, bucket still ACTIVE”

Layer object missing or unreadable. Verify only probes the canary key. Do not delete {prefix}layers/*.tar.gz. A warm node may still clone from cache.

The API has no /v1/me. The CLI infers username from GET /v1/repositories. Create a repo, or set username in the config file / AMENDABLE_USERNAME.