Error map

shallow update not allowed ! [remote rejected] main -> main (shallow update not allowed)

Git · layer 7, Build & delivery

Open the full error page →

Centre: this error. First ring: errors it is linked with (12). Outer ring: what those are linked with. Colours show the layer of a request each error belongs to. Click any dot to re-centre the map on it; hover to follow its connections. The centre dot opens the error page.

shallow update not allowed — ! [remote rejected] main -> main (shallow update not allowed) (Git)shallow upd…denied — denied: requested access to the resource is denied (docker push) (Docker)deniedgithub-actions[bot] 403 — remote: Permission to owner/repo.git denied to github-actions[bot]. fatal: unable to access … The requested URL returned error: 403 (Git)github-actions[bot]…protected branch — remote: error: GH006: Protected branch update failed / pre-receive hook declined (Git)protected branchNo updates are to be performed — CloudFormation: No updates are to be performed (AWS)No updates are to b…non-fast-forward — Git: ! [rejected] … (fetch first) — error: failed to push some refs (Git)non-fast-forwardnon-bare push — ! [remote rejected] main -> main (branch is currently checked out) (Git)non-bare pushno upstream branch — fatal: The current branch x has no upstream branch. (Git)no upstream branchthe input device is not a TTY — the input device is not a TTY (Docker)the input device is…Failed to find target with hash string — Failed to find target with hash string 'android-34' / Failed to install the following Android SDK packages as some licences have not been accepted (Android)Failed to find targ…RPC failed — error: RPC failed; HTTP 400 curl 22 / curl 92 HTTP/2 stream was not closed cleanly — the remote end hung up unexpectedly (Git)RPC failedGH001 large files — remote: error: GH001: Large files detected. File x is 120 MB; this exceeds GitHub's file size limit of 100.00 MB (Git)GH001 large filesAADSTS70021 — AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity) (Azure)AADSTS70021AADSTS700016 — Azure AD (Entra ID): AADSTS700016 Application not found in the directory (Azure)AADSTS700016401 — HTTP 401 Unauthorized (HTTP)401TokenExpiredError — JWT Expired / Invalid Token (Authentication)TokenExpiredError403 — HTTP 403 Forbidden (HTTP)403workflow scope — ! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope) (Git)workflow scopenpm ci out of sync — npm ERR! `npm ci` can only install packages when your package.json and package-lock.json are in sync (npm)npm ci out of syncsrc refspec — error: src refspec main does not match any (Git)src refspecnpm ci no lockfile — npm ERR! The `npm ci` command can only install with an existing package-lock.json or npm-shrinkwrap.json (npm)npm ci no lockfileERR_PNPM_OUTDATED_LOCKFILE — ERR_PNPM_OUTDATED_LOCKFILE Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with package.json (npm)ERR_PNPM_OUTDATED_L…YN0028 — YN0028: The lockfile would have been modified by this install, which is explicitly forbidden. (npm)YN0028CONFLICT — Git: CONFLICT (content): Merge conflict in file — Automatic merge failed (Git)CONFLICTpublickey — Git: Permission denied (publickey). fatal: Could not read from remote repository. (Git)publickeyunrelated histories — Git: fatal: refusing to merge unrelated histories (Git)unrelated historiesremote origin exists — error: remote origin already exists. (Git)remote origin existscannot lock ref — error: cannot lock ref 'refs/remotes/origin/x': is at … but expected … / unable to update local ref (Git)cannot lock reforigin not a repository — fatal: 'origin' does not appear to be a git repository (Git)origin not a reposi…detached HEAD — You are in 'detached HEAD' state. (Git)detached HEADpathspec did not match — error: pathspec 'x' did not match any file(s) known to git (Git)pathspec did not ma…couldn't find remote ref — fatal: couldn't find remote ref main (Git)couldn't find remot…toomanyrequests — toomanyrequests: You have reached your pull rate limit (Docker Hub) (Docker)toomanyrequestsinvalid reference format — docker: invalid reference format (repository name must be lowercase) (Docker)invalid reference f…No such container — Error response from daemon: No such container (Docker)No such containerCould not resolve — Gradle: Could not resolve all files for configuration / Could not resolve dependency (Android)Could not resolveanother operation is in progress — Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress (Kubernetes)another operation i…DefaultAzureCredential failed — DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable (Azure)DefaultAzureCredent…Could not resolve host — fatal: unable to access 'https://github.com/…': Could not resolve host: github.com (Git)Could not resolve h…port 22 timed out — ssh: connect to host github.com port 22: Connection timed out (Git)port 22 timed outkex_exchange_identification — kex_exchange_identification: Connection closed by remote host (Git)kex_exchange_identi…LFS smudge error — Error downloading object: x: Smudge error / This repository is over its data quota (Git)LFS smudge errorsts:AssumeRole denied — is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::...:role/... (AWS)sts:AssumeRole deni…AADSTS50020 — AADSTS50020: User account from identity provider does not exist in tenant and cannot access the application (Azure)AADSTS50020AADSTS50034 — AADSTS50034: The user account does not exist in the directory (Azure)AADSTS50034

Directly related (12)

deniedDocker

denied: requested access to the resource is denied (docker push)

You’re logged in, but not allowed to push to that repository — usually the image isn’t tagged with your own username/organisation.

github-actions[bot] 403Git

remote: Permission to owner/repo.git denied to github-actions[bot]. fatal: unable to access … The requested URL returned error: 403

A GitHub Actions workflow tried to push but the GITHUB_TOKEN doesn’t have write permission.

protected branchGit

remote: error: GH006: Protected branch update failed / pre-receive hook declined

The server rejected your push because of branch protection rules or a server-side hook.

No updates are to be performedAWS

CloudFormation: No updates are to be performed

You ran an update/deploy with a template and parameters identical to what’s deployed, so there’s nothing to change.

non-fast-forwardGit

Git: ! [rejected] … (fetch first) — error: failed to push some refs

The remote branch has commits you don’t have locally, so Git refuses to overwrite them. Pull (merge or rebase) first, then push.

non-bare pushGit

! [remote rejected] main -> main (branch is currently checked out)

You pushed to a non-bare repository whose working tree has that branch checked out.

no upstream branchGit

fatal: The current branch x has no upstream branch.

The local branch isn’t linked to a remote branch yet, so a bare git push doesn’t know where to go.

the input device is not a TTYDocker

the input device is not a TTY

docker run/exec was called with -t (allocate a terminal) in a context with no terminal — CI, cron, a pipe or a script.

Failed to find target with hash stringAndroid

Failed to find target with hash string 'android-34' / Failed to install the following Android SDK packages as some licences have not been accepted

Gradle needs an SDK platform/build-tools that isn’t installed, or the licences haven’t been accepted on this machine.

RPC failedGit

error: RPC failed; HTTP 400 curl 22 / curl 92 HTTP/2 stream was not closed cleanly — the remote end hung up unexpectedly

A large HTTPS push/clone broke mid-transfer — size limits, proxies or flaky HTTP/2.

GH001 large filesGit

remote: error: GH001: Large files detected. File x is 120 MB; this exceeds GitHub's file size limit of 100.00 MB

GitHub rejected the push because a file over 100 MB is in your commits — even if you deleted it later.

AADSTS70021Azure

AADSTS70021: No matching federated identity record found for presented assertion (GitHub Actions / workload identity)

The OIDC token from GitHub Actions/Kubernetes/another IdP doesn’t match any federated credential on the app — issuer, subject or…

Two steps away (32)

AADSTS700016Azure

Azure AD (Entra ID): AADSTS700016 Application not found in the directory

The client ID in your sign-in request doesn’t exist in the tenant you’re authenticating against.

401HTTP

HTTP 401 Unauthorized

The request has no valid authentication credentials — you need to log in or send a valid token.

TokenExpiredErrorAuthentication

JWT Expired / Invalid Token

The JSON Web Token sent with the request is expired, malformed or signed with a different key, so the API rejects it (usually wit…

403HTTP

HTTP 403 Forbidden

The server understood the request but refuses to authorize it — you (or the server process) are not allowed to access this resour…

workflow scopeGit

! [remote rejected] … (refusing to allow a Personal Access Token to create or update workflow `.github/workflows/x.yml` without `workflow` scope)

Your token can’t modify GitHub Actions workflow files without the workflow scope.

npm ci out of syncnpm

npm ERR! `npm ci` can only install packages when your package.json and package-lock.json are in sync

package-lock.json doesn’t match package.json, so npm ci refuses to install.

src refspecGit

error: src refspec main does not match any

You pushed a branch name that doesn’t exist locally — usually no commits yet, or the branch is called master not main.

npm ci no lockfilenpm

npm ERR! The `npm ci` command can only install with an existing package-lock.json or npm-shrinkwrap.json

npm ci needs a committed lockfile and didn’t find one.

ERR_PNPM_OUTDATED_LOCKFILEnpm

ERR_PNPM_OUTDATED_LOCKFILE Cannot install with "frozen-lockfile" because pnpm-lock.yaml is not up to date with package.json

pnpm’s lockfile doesn’t match package.json, and CI installs with a frozen lockfile.

YN0028npm

YN0028: The lockfile would have been modified by this install, which is explicitly forbidden.

Yarn Berry’s immutable install in CI found the lockfile needs changes.

CONFLICTGit

Git: CONFLICT (content): Merge conflict in file — Automatic merge failed

Both branches changed the same lines; Git needs you to choose the final content before completing the merge/rebase.

publickeyGit

Git: Permission denied (publickey). fatal: Could not read from remote repository.

SSH authentication to GitHub/GitLab/Bitbucket failed — no key, wrong key, or the key isn’t added to your account.

unrelated historiesGit

Git: fatal: refusing to merge unrelated histories

The two branches have no common ancestor — typically a local repo and a remote that were both initialized separately.

remote origin existsGit

error: remote origin already exists.

A remote named origin is already configured.

cannot lock refGit

error: cannot lock ref 'refs/remotes/origin/x': is at … but expected … / unable to update local ref

Git couldn’t update a reference — stale remote-tracking refs, case-only branch name clashes, or a leftover lock file.

origin not a repositoryGit

fatal: 'origin' does not appear to be a git repository

No remote named origin is configured (or it points nowhere valid).

detached HEADGit

You are in 'detached HEAD' state.

HEAD points at a commit instead of a branch, so new commits won’t belong to any branch.

pathspec did not matchGit

error: pathspec 'x' did not match any file(s) known to git

Git couldn’t find the file or branch name you referenced.

couldn't find remote refGit

fatal: couldn't find remote ref main

The branch you tried to pull/fetch doesn’t exist on the remote.

toomanyrequestsDocker

toomanyrequests: You have reached your pull rate limit (Docker Hub)

Docker Hub limits anonymous and free pulls; your IP or account has used its quota for the current window.

invalid reference formatDocker

docker: invalid reference format (repository name must be lowercase)

Docker couldn’t parse the image name — uppercase letters, spaces, an empty variable, or a misplaced option.

No such containerDocker

Error response from daemon: No such container

The container name or ID you used doesn’t exist on this Docker host — it was removed, has another name, or you’re talking to a di…

Could not resolveAndroid

Gradle: Could not resolve all files for configuration / Could not resolve dependency

Gradle couldn’t download a dependency — wrong coordinates/version, missing repository, offline mode, or network/proxy issues.

another operation is in progressKubernetes

Error: UPGRADE FAILED: another operation (install/upgrade/rollback) is in progress

A previous Helm operation on this release was interrupted and left it in a pending-install/pending-upgrade state, so Helm refuses…

DefaultAzureCredential failedAzure

DefaultAzureCredential failed to retrieve a token from the included credentials / ManagedIdentityCredential authentication unavailable

The Azure SDK tried every credential source (env vars, workload identity, managed identity, CLI…) and none worked.

Could not resolve hostGit

fatal: unable to access 'https://github.com/…': Could not resolve host: github.com

DNS lookup for the Git host failed from this machine.

port 22 timed outGit

ssh: connect to host github.com port 22: Connection timed out

Outbound SSH on port 22 is blocked (firewall, corporate or public Wi-Fi).

kex_exchange_identificationGit

kex_exchange_identification: Connection closed by remote host

The SSH connection was closed before the handshake — server overload, rate limiting, or a proxy/firewall interfering.

LFS smudge errorGit

Error downloading object: x: Smudge error / This repository is over its data quota

Git LFS couldn’t download a large file — missing LFS install, auth problems, or the LFS bandwidth/storage quota is exhausted.

sts:AssumeRole deniedAWS

is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::...:role/...

The caller can’t assume the role — either its own policy doesn’t allow sts:AssumeRole, or the role’s trust policy doesn’t trust t…

AADSTS50020Azure

AADSTS50020: User account from identity provider does not exist in tenant and cannot access the application

The signed-in user belongs to another tenant (or is a personal Microsoft account) and isn’t a guest in the app’s tenant.

AADSTS50034Azure

AADSTS50034: The user account does not exist in the directory

There’s no user with that sign-in name in the tenant.