Error map

github-actions[bot] 403 remote: Permission to owner/repo.git denied to github-actions[bot]. fatal: unable to access … The requested URL returned error: 403

Git · layer 7, Build & delivery

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

github-actions[bot] 403 — remote: Permission to owner/repo.git denied to github-actions[bot]. fatal: unable to access … The requested URL returned error: 403 (Git)github-acti…403 — HTTP 403 Forbidden (HTTP)403npm ci out of sync — npm ERR! `npm ci` can only install packages when your package.json and package-lock.json are in sync (npm)npm ci out of syncprotected branch — remote: error: GH006: Protected branch update failed / pre-receive hook declined (Git)protected branchworkflow scope — ! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope) (Git)workflow scopeanother operation is in progress — Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress (Kubernetes)another operation i…No updates are to be performed — CloudFormation: No updates are to be performed (AWS)No updates are to b…shallow update not allowed — ! [remote rejected] main -> main (shallow update not allowed) (Git)shallow update not …the input device is not a TTY — the input device is not a TTY (Docker)the input device is…Failed to find target with hash string — Failed to find target with hash string 'android-34' / Failed to install the following Android SDK packages as some licences have not been accepted (Android)Failed to find targ…npm ci no lockfile — npm ERR! The `npm ci` command can only install with an existing package-lock.json or npm-shrinkwrap.json (npm)npm ci no lockfiletoomanyrequests — toomanyrequests: You have reached your pull rate limit (Docker Hub) (Docker)toomanyrequestsAADSTS70021 — AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity) (Azure)AADSTS70021publickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyAccessDenied — AWS S3: AccessDenied (403) when calling GetObject / PutObject (AWS)AccessDeniedEACCES — Linux: Permission denied (Linux)EACCESEINTEGRITY — npm ERR! code EINTEGRITY — sha512 integrity checksum failed (npm)EINTEGRITYold lockfile — npm WARN old lockfile — The package-lock.json file was created with an old version of npm, so supplemental metadata must be fetched (npm)old lockfilerollup native module — Error: Cannot find module @rollup/rollup-linux-x64-gnu. npm has a bug related to optional dependencies (npm)rollup native modulenon-fast-forward — Git: ! [rejected] … (fetch first) — error: failed to push some refs (Git)non-fast-forwardsrc refspec — error: src refspec main does not match any (Git)src refspecRPC failed — error: RPC failed; HTTP 400 curl 22 / curl 92 HTTP/2 stream was not closed cleanly — the remote end hung up unexpectedly (Git)RPC failedAADSTS700016 — Azure AD (Entra ID): AADSTS700016 Application not found in the directory (Azure)AADSTS700016401 — HTTP 401 Unauthorized (HTTP)401TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredErrorcannot re-use a name that is still in use — Error: INSTALLATION FAILED: cannot re-use a name that is still in use (Kubernetes)cannot re-use a nam…invalid ownership metadata — rendered manifests contain a resource that already exists. Unable to continue with install: ... invalid ownership metadata (Kubernetes)invalid ownership m…ProgressDeadlineExceeded — deployment "x" exceeded its progress deadline (ProgressDeadlineExceeded) (Kubernetes)ProgressDeadlineExc…ERR_PNPM_OUTDATED_LOCKFILE — ERR_PNPM_OUTDATED_LOCKFILE Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with package.json (npm)ERR_PNPM_OUTDATED_L…YN0028 — YN0028: The lockfile would have been modified by this install, which is explicitly forbidden. (npm)YN0028ROLLBACK_COMPLETE — Stack is in ROLLBACK_COMPLETE state and can not be updated (AWS)ROLLBACK_COMPLETEGH001 large files — remote: error: GH001: Large files detected. File x is 120 MB; this exceeds GitHub's file size limit of 100.00 MB (Git)GH001 large filesnon-bare push — ! [remote rejected] main -> main (branch is currently checked out) (Git)non-bare pushno upstream branch — fatal: The current branch x has no upstream branch. (Git)no upstream branchinvalid reference format — docker: invalid reference format (repository name must be lowercase) (Docker)invalid reference f…No such container — Error response from daemon: No such container (Docker)No such containeris not running — Error response from daemon: Container X is not running (Docker)is not runningCould not resolve — Gradle: Could not resolve all files for configuration / Could not resolve dependency (Android)Could not resolveDefaultAzureCredential failed — DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable (Azure)DefaultAzureCredent…No hosted parallelism — Azure Pipelines: No hosted parallelism has been purchased or granted (Azure)No hosted paralleli…Invalid Version — npm ERR! Invalid Version: (semver parse error) (npm)Invalid Versionservice connection could not be found — Azure Pipelines: There was a resource authorization issue: The pipeline is not valid. Could not find a service connection with identifier x (Azure)service connection …Gradle Java heap space — Gradle: Expiring Daemon because JVM heap space is exhausted / java.lang.OutOfMemoryError: Java heap space during build (Android)Gradle Java heap sp…ImagePullBackOff — Kubernetes: ImagePullBackOff / ErrImagePull (Kubernetes)ImagePullBackOff429 — HTTP 429 Too Many Requests (HTTP)429ProvisionedThroughputExceededException — ProvisionedThroughputExceededException: The level of configured provisioned throughput for the table was exceeded (AWS)ProvisionedThroughp…sts:AssumeRole denied — is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::...:role/... (AWS)sts:AssumeRole deni…AADSTS50020 — AADSTS50020: User account from identity provider does not exist in tenant and cannot access the application (Azure)AADSTS50020AADSTS50034 — AADSTS50034: The user account does not exist in the directory (Azure)AADSTS50034

Directly related (12)

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

npm ci out of syncnpm

npm ERR! `npm ci` can only install packages when your package.json and package-lock.json are in sync

package-lock.json doesn’t match package.json, so npm ci refuses to install.

protected branchGit

remote: error: GH006: Protected branch update failed / pre-receive hook declined

The server rejected your push because of branch protection rules or a server-side hook.

workflow scopeGit

! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope)

Your token can’t modify GitHub Actions workflow files without the workflow scope.

another operation is in progressKubernetes

Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress

A previous Helm operation on this release was interrupted and left it in a pending-install/pending-upgrade state, so Helm refuses…

No updates are to be performedAWS

CloudFormation: No updates are to be performed

You ran an update/deploy with a template and parameters identical to what’s deployed, so there’s nothing to change.

shallow update not allowedGit

! [remote rejected] main -> main (shallow update not allowed)

You pushed from a shallow clone to a remote that doesn’t accept shallow history.

the input device is not a TTYDocker

the input device is not a TTY

docker run/exec was called with -t (allocate a terminal) in a context with no terminal — CI, cron, a pipe or a script.

Failed to find target with hash stringAndroid

Failed to find target with hash string 'android-34' / Failed to install the following Android SDK packages as some licences have not been accepted

Gradle needs an SDK platform/build-tools that isn’t installed, or the licences haven’t been accepted on this machine.

npm ci no lockfilenpm

npm ERR! The `npm ci` command can only install with an existing package-lock.json or npm-shrinkwrap.json

npm ci needs a committed lockfile and didn’t find one.

toomanyrequestsDocker

toomanyrequests: You have reached your pull rate limit (Docker Hub)

Docker Hub limits anonymous and free pulls; your IP or account has used its quota for the current window.

AADSTS70021Azure

AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity)

The OIDC token from GitHub Actions/Kubernetes/another IdP doesn’t match any federated credential on the app — issuer, subject or…

Two steps away (36)

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

AccessDeniedAWS

AWS S3: AccessDenied (403) when calling GetObject / PutObject

An IAM policy, bucket policy, ACL/ownership setting, Block Public Access or KMS key policy denied the S3 request.

EACCESLinux

Linux: Permission denied

Your user (or the service user) lacks read/write/execute permission on a file, directory or one of its parents.

EINTEGRITYnpm

npm ERR! code EINTEGRITY — sha512 integrity checksum failed

A downloaded package’s hash doesn’t match the integrity value in package-lock.json — a corrupted cache, a changed tarball, or a l…

old lockfilenpm

npm WARN old lockfile — The package-lock.json file was created with an old version of npm, so supplemental metadata must be fetched

The lockfile is lockfileVersion 1 (npm 6) and npm 7+ is upgrading it.

rollup native modulenpm

Error: Cannot find module @rollup/rollup-linux-x64-gnu. npm has a bug related to optional dependencies

Rollup’s (and Vite’s) platform-specific optional dependency wasn’t installed — an npm optional-dependency bug with lockfiles from…

non-fast-forwardGit

Git: ! [rejected] … (fetch first) — error: failed to push some refs

The remote branch has commits you don’t have locally, so Git refuses to overwrite them. Pull (merge or rebase) first, then push.

src refspecGit

error: src refspec main does not match any

You pushed a branch name that doesn’t exist locally — usually no commits yet, or the branch is called master not main.

RPC failedGit

error: RPC failed; HTTP 400 curl 22 / curl 92 HTTP/2 stream was not closed cleanly — the remote end hung up unexpectedly

A large HTTPS push/clone broke mid-transfer — size limits, proxies or flaky HTTP/2.

AADSTS700016Azure

Azure AD (Entra ID): AADSTS700016 Application not found in the directory

The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

cannot re-use a name that is still in useKubernetes

Error: INSTALLATION FAILED: cannot re-use a name that is still in use

helm install was run with a release name that already exists in the namespace (even a failed one).

invalid ownership metadataKubernetes

rendered manifests contain a resource that already exists. Unable to continue with install: ... invalid ownership metadata

Helm wants to create an object that already exists but isn’t labelled as belonging to this release.

ProgressDeadlineExceededKubernetes

deployment "x" exceeded its progress deadline (ProgressDeadlineExceeded)

A rollout didn’t make progress within progressDeadlineSeconds (default 600) — new pods never became ready.

ERR_PNPM_OUTDATED_LOCKFILEnpm

ERR_PNPM_OUTDATED_LOCKFILE Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with package.json

pnpm’s lockfile doesn’t match package.json, and CI installs with a frozen lockfile.

YN0028npm

YN0028: The lockfile would have been modified by this install, which is explicitly forbidden.

Yarn Berry’s immutable install in CI found the lockfile needs changes.

ROLLBACK_COMPLETEAWS

Stack is in ROLLBACK_COMPLETE state and can not be updated

The stack’s first creation failed and rolled back; a stack in ROLLBACK_COMPLETE can only be deleted, not updated.

GH001 large filesGit

remote: error: GH001: Large files detected. File x is 120 MB; this exceeds GitHub's file size limit of 100.00 MB

GitHub rejected the push because a file over 100 MB is in your commits — even if you deleted it later.

non-bare pushGit

! [remote rejected] main -> main (branch is currently checked out)

You pushed to a non-bare repository whose working tree has that branch checked out.

no upstream branchGit

fatal: The current branch x has no upstream branch.

The local branch isn’t linked to a remote branch yet, so a bare git push doesn’t know where to go.

invalid reference formatDocker

docker: invalid reference format (repository name must be lowercase)

Docker couldn’t parse the image name — uppercase letters, spaces, an empty variable, or a misplaced option.

No such containerDocker

Error response from daemon: No such container

The container name or ID you used doesn’t exist on this Docker host — it was removed, has another name, or you’re talking to a di…

is not runningDocker

Error response from daemon: Container X is not running

You tried to exec into or interact with a container that has stopped.

Could not resolveAndroid

Gradle: Could not resolve all files for configuration / Could not resolve dependency

Gradle couldn’t download a dependency — wrong coordinates/version, missing repository, offline mode, or network/proxy issues.

DefaultAzureCredential failedAzure

DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable

The Azure SDK tried every credential source (env vars, workload identity, managed identity, CLI…) and none worked.

No hosted parallelismAzure

Azure Pipelines: No hosted parallelism has been purchased or granted

The Azure DevOps organization has no Microsoft-hosted parallel jobs, so pipelines can’t run on hosted agents.

Invalid Versionnpm

npm ERR! Invalid Version: (semver parse error)

A package.json or lockfile contains a version string that isn’t valid semver.

service connection could not be foundAzure

Azure Pipelines: There was a resource authorization issue: The pipeline is not valid. Could not find a service connection with identifier x

The pipeline references a service connection that doesn’t exist in the project or isn’t authorized for this pipeline.

Gradle Java heap spaceAndroid

Gradle: Expiring Daemon because JVM heap space is exhausted / java.lang.OutOfMemoryError: Java heap space during build

The Gradle daemon (or Kotlin daemon) ran out of memory compiling or dexing the project.

ImagePullBackOffKubernetes

Kubernetes: ImagePullBackOff / ErrImagePull

The node can’t pull the container image — wrong name/tag, missing registry credentials, or registry unreachable.

429HTTP

HTTP 429 Too Many Requests

You’ve hit a rate limit — too many requests in a given time window. Slow down and retry later.

ProvisionedThroughputExceededExceptionAWS

ProvisionedThroughputExceededException: The level of configured provisioned throughput for the table was exceeded

Requests exceed the table’s (or index’s) provisioned read/write capacity, or one partition is hot.

sts:AssumeRole deniedAWS

is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::...:role/...

The caller can’t assume the role — either its own policy doesn’t allow sts:AssumeRole, or the role’s trust policy doesn’t trust t…

AADSTS50020Azure

AADSTS50020: User account from identity provider does not exist in tenant and cannot access the application

The signed-in user belongs to another tenant (or is a personal Microsoft account) and isn’t a guest in the app’s tenant.

AADSTS50034Azure

AADSTS50034: The user account does not exist in the directory

There’s no user with that sign-in name in the tenant.