{"level":"info","ts":"2026-10-02T02:46:52.946Z","logger":"pipelinesascode","caller":"v2/configurator_configmap.go:106","msg":"Adding Watcher on ConfigMap pac-config-logging for logs","commit":"7f1e477780fce126880b07821d10088441dcf8d3"} {"level":"info","ts":"2026-10-02T02:46:52.958Z","logger":"pipelinesascode","caller":"v2/configurator_configmap.go:220","msg":"Adding Watcher on ConfigMap pipelines-as-code-config-observability for CE client status reporter","commit":"7f1e477780fce126880b07821d10088441dcf8d3"} {"level":"info","ts":"2026-10-02T02:46:52.958Z","logger":"pipelinesascode","caller":"v2/main.go:196","msg":"ConfigMap watcher is enabled","commit":"7f1e477780fce126880b07821d10088441dcf8d3"} {"level":"info","ts":"2026-10-02T02:46:53.156Z","logger":"pipelinesascode","caller":"tracing/provider.go:42","msg":"OpenTelemetry not configured (OTLP endpoint missing)","commit":"7f1e477780fce126880b07821d10088441dcf8d3"} {"level":"info","ts":"2026-10-02T02:46:53.156Z","logger":"pipelinesascode","caller":"adapter/adapter.go:100","msg":"Starting Pipelines as Code version: v0.50.0","commit":"7f1e477780fce126880b07821d10088441dcf8d3"} {"level":"info","ts":"2026-10-02T02:46:53.156Z","logger":"pipelinesascode","caller":"injection/health_check.go:43","msg":"Probes server listening on port 8080","commit":"7f1e477780fce126880b07821d10088441dcf8d3"} {"level":"warn","ts":"2026-10-02T02:52:48.640Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"599e1882-be0c-11f1-84d2-243d4176d5e5","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:36780"} {"level":"error","ts":"2026-10-02T02:52:48.640Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"599e1882-be0c-11f1-84d2-243d4176d5e5","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:52:48.640Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"599e1882-be0c-11f1-84d2-243d4176d5e5","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:52:49.596Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"59a5f750-be0c-11f1-96ac-e36d7868ffa7","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:51752"} {"level":"error","ts":"2026-10-02T02:52:49.596Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"59a5f750-be0c-11f1-96ac-e36d7868ffa7","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:52:49.596Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"59a5f750-be0c-11f1-96ac-e36d7868ffa7","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:52:58.239Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"5f522ff2-be0c-11f1-838c-71fdb0b16ed5","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:51760"} {"level":"error","ts":"2026-10-02T02:52:58.239Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"5f522ff2-be0c-11f1-838c-71fdb0b16ed5","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:52:58.239Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"5f522ff2-be0c-11f1-838c-71fdb0b16ed5","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:00.139Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"6059face-be0c-11f1-9db8-a537e4b4a471","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:60676"} {"level":"error","ts":"2026-10-02T02:53:00.139Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"6059face-be0c-11f1-9db8-a537e4b4a471","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:00.139Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"6059face-be0c-11f1-9db8-a537e4b4a471","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:02.023Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"61146e90-be0c-11f1-8fbd-83b4eb1456cd","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:60706"} {"level":"error","ts":"2026-10-02T02:53:02.023Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"61146e90-be0c-11f1-8fbd-83b4eb1456cd","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:02.023Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"61146e90-be0c-11f1-8fbd-83b4eb1456cd","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:04.120Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62d6ab76-be0c-11f1-89c6-f429cbb05272","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:60716"} {"level":"error","ts":"2026-10-02T02:53:04.120Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62d6ab76-be0c-11f1-89c6-f429cbb05272","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:04.120Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62d6ab76-be0c-11f1-89c6-f429cbb05272","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:04.325Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62ccdda8-be0c-11f1-9926-ef0c698a48cb","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:60730"} {"level":"error","ts":"2026-10-02T02:53:04.325Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62ccdda8-be0c-11f1-9926-ef0c698a48cb","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:04.325Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62ccdda8-be0c-11f1-9926-ef0c698a48cb","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:05.051Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62ffc3d0-be0c-11f1-941a-e84ed29cb2cc","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:60742"} {"level":"error","ts":"2026-10-02T02:53:05.052Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62ffc3d0-be0c-11f1-941a-e84ed29cb2cc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:05.052Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"62ffc3d0-be0c-11f1-941a-e84ed29cb2cc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:12.271Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"678c11c4-be0c-11f1-949f-f29d88befb35","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:49628"} {"level":"error","ts":"2026-10-02T02:53:12.271Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"678c11c4-be0c-11f1-949f-f29d88befb35","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:12.271Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"678c11c4-be0c-11f1-949f-f29d88befb35","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:13.671Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"686ee486-be0c-11f1-9587-9d246dea7edc","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:49630"} {"level":"error","ts":"2026-10-02T02:53:13.671Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"686ee486-be0c-11f1-9587-9d246dea7edc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:13.671Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"686ee486-be0c-11f1-9587-9d246dea7edc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:15.239Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"68fd1ee0-be0c-11f1-9007-2a13367e6452","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:49636"} {"level":"error","ts":"2026-10-02T02:53:15.239Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"68fd1ee0-be0c-11f1-9007-2a13367e6452","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:15.239Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"68fd1ee0-be0c-11f1-9007-2a13367e6452","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:18.300Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"6aef1302-be0c-11f1-97f5-afcccb1f3a87","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:49640"} {"level":"error","ts":"2026-10-02T02:53:18.300Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"6aef1302-be0c-11f1-97f5-afcccb1f3a87","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:18.300Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"6aef1302-be0c-11f1-97f5-afcccb1f3a87","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:27.354Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"708787b8-be0c-11f1-805b-98b2dd0d0c0c","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:51370"} {"level":"error","ts":"2026-10-02T02:53:27.355Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"708787b8-be0c-11f1-805b-98b2dd0d0c0c","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:27.355Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"708787b8-be0c-11f1-805b-98b2dd0d0c0c","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:28.661Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"71602e9c-be0c-11f1-9fdb-b9bd26d05d40","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:51376"} {"level":"error","ts":"2026-10-02T02:53:28.661Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"71602e9c-be0c-11f1-9fdb-b9bd26d05d40","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:28.661Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"71602e9c-be0c-11f1-9fdb-b9bd26d05d40","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:30.989Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"726b36b0-be0c-11f1-88eb-530f9e79b693","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:57774"} {"level":"error","ts":"2026-10-02T02:53:30.989Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"726b36b0-be0c-11f1-88eb-530f9e79b693","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:30.989Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"726b36b0-be0c-11f1-88eb-530f9e79b693","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:53:59.976Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"83ec7278-be0c-11f1-9deb-22cb418afb4d","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:34484"} {"level":"error","ts":"2026-10-02T02:53:59.976Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"83ec7278-be0c-11f1-9deb-22cb418afb4d","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:53:59.976Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"83ec7278-be0c-11f1-9deb-22cb418afb4d","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:01.156Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"843f6c30-be0c-11f1-9e49-88f2f013e6a2","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:34496"} {"level":"error","ts":"2026-10-02T02:54:01.156Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"843f6c30-be0c-11f1-9e49-88f2f013e6a2","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:01.156Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"843f6c30-be0c-11f1-9e49-88f2f013e6a2","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:17.342Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"8d71b722-be0c-11f1-9a4a-e017bd18bb18","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:34160"} {"level":"error","ts":"2026-10-02T02:54:17.342Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"8d71b722-be0c-11f1-9a4a-e017bd18bb18","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:17.342Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"8d71b722-be0c-11f1-9a4a-e017bd18bb18","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:33.378Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"97ce2f48-be0c-11f1-900c-6054b7ac9bcc","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:48720"} {"level":"error","ts":"2026-10-02T02:54:33.378Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"97ce2f48-be0c-11f1-900c-6054b7ac9bcc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:33.378Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"97ce2f48-be0c-11f1-900c-6054b7ac9bcc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:34.917Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"98c1c84c-be0c-11f1-91df-b235438b1f4b","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:48724"} {"level":"error","ts":"2026-10-02T02:54:34.917Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"98c1c84c-be0c-11f1-91df-b235438b1f4b","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:34.917Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"98c1c84c-be0c-11f1-91df-b235438b1f4b","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:36.220Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"99740ac0-be0c-11f1-9022-84913cdba063","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:48728"} {"level":"error","ts":"2026-10-02T02:54:36.220Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"99740ac0-be0c-11f1-9022-84913cdba063","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:36.220Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"99740ac0-be0c-11f1-9022-84913cdba063","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:53.920Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a4104a98-be0c-11f1-965d-8e532094dce7","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:50438"} {"level":"error","ts":"2026-10-02T02:54:53.920Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a4104a98-be0c-11f1-965d-8e532094dce7","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:53.920Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a4104a98-be0c-11f1-965d-8e532094dce7","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:55.695Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a5294e02-be0c-11f1-883e-9d9f113cfb3b","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:50440"} {"level":"error","ts":"2026-10-02T02:54:55.695Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a5294e02-be0c-11f1-883e-9d9f113cfb3b","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:55.695Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a5294e02-be0c-11f1-883e-9d9f113cfb3b","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:54:57.542Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a60cae90-be0c-11f1-9f68-e85c3499c50f","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:50458"} {"level":"error","ts":"2026-10-02T02:54:57.542Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a60cae90-be0c-11f1-9f68-e85c3499c50f","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:54:57.542Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"a60cae90-be0c-11f1-9f68-e85c3499c50f","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:57:20.553Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"fb858914-be0c-11f1-9198-e82a24211abf","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:46678"} {"level":"error","ts":"2026-10-02T02:57:20.553Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"fb858914-be0c-11f1-9198-e82a24211abf","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:57:20.553Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"fb858914-be0c-11f1-9198-e82a24211abf","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:57:33.371Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"0323c94c-be0d-11f1-9f37-48ad4456a519","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:33206"} {"level":"error","ts":"2026-10-02T02:57:33.371Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"0323c94c-be0d-11f1-9f37-48ad4456a519","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:57:33.371Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"0323c94c-be0d-11f1-9f37-48ad4456a519","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:57:43.005Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"08f5c672-be0d-11f1-89d8-d30d098ecf84","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:48086"} {"level":"error","ts":"2026-10-02T02:57:43.005Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"08f5c672-be0d-11f1-89d8-d30d098ecf84","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:57:43.005Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"08f5c672-be0d-11f1-89d8-d30d098ecf84","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:57:44.597Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"09d919cc-be0d-11f1-87dc-77ae9c9c21fa","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:48102"} {"level":"error","ts":"2026-10-02T02:57:44.597Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"09d919cc-be0d-11f1-87dc-77ae9c9c21fa","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:57:44.597Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"09d919cc-be0d-11f1-87dc-77ae9c9c21fa","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:57:46.640Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"0abe6c20-be0d-11f1-8b4e-aebd2378007d","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:48114"} {"level":"error","ts":"2026-10-02T02:57:46.640Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"0abe6c20-be0d-11f1-8b4e-aebd2378007d","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:57:46.640Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"0abe6c20-be0d-11f1-8b4e-aebd2378007d","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:04.825Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"39b88c90-be0d-11f1-9684-934bb0867417","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:33234"} {"level":"error","ts":"2026-10-02T02:59:04.825Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"39b88c90-be0d-11f1-9684-934bb0867417","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:04.825Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"39b88c90-be0d-11f1-9684-934bb0867417","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:11.175Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3d7d1fa8-be0d-11f1-9110-cef56ed8ae4d","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:39748"} {"level":"error","ts":"2026-10-02T02:59:11.175Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3d7d1fa8-be0d-11f1-9110-cef56ed8ae4d","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:11.175Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3d7d1fa8-be0d-11f1-9110-cef56ed8ae4d","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:12.830Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3e53696e-be0d-11f1-92e3-a626f796d90b","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:39754"} {"level":"error","ts":"2026-10-02T02:59:12.830Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3e53696e-be0d-11f1-92e3-a626f796d90b","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:12.830Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3e53696e-be0d-11f1-92e3-a626f796d90b","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:14.776Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3f58ea00-be0d-11f1-8629-9d3ee62f4e4f","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:39774"} {"level":"error","ts":"2026-10-02T02:59:14.776Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3f58ea00-be0d-11f1-8629-9d3ee62f4e4f","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:14.776Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"3f58ea00-be0d-11f1-8629-9d3ee62f4e4f","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:17.732Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"418a23d4-be0d-11f1-89c7-981f9a2720dc","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:39788"} {"level":"error","ts":"2026-10-02T02:59:17.732Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"418a23d4-be0d-11f1-89c7-981f9a2720dc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:17.732Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"418a23d4-be0d-11f1-89c7-981f9a2720dc","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:21.225Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"43207950-be0d-11f1-9dd3-6fe3da6f7f31","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:60364"} {"level":"error","ts":"2026-10-02T02:59:21.225Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"43207950-be0d-11f1-9dd3-6fe3da6f7f31","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:21.225Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"43207950-be0d-11f1-9dd3-6fe3da6f7f31","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:21.268Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"437432ac-be0d-11f1-8d13-fe40a272bdf1","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:60368"} {"level":"error","ts":"2026-10-02T02:59:21.268Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"437432ac-be0d-11f1-8d13-fe40a272bdf1","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:21.268Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"437432ac-be0d-11f1-8d13-fe40a272bdf1","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:29.894Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"489f38b2-be0d-11f1-8071-dbcaa2bc1378","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.128.0.13:60876"} {"level":"error","ts":"2026-10-02T02:59:29.894Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"489f38b2-be0d-11f1-8071-dbcaa2bc1378","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:29.894Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"489f38b2-be0d-11f1-8071-dbcaa2bc1378","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:53.585Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"56a85448-be0d-11f1-802d-53f53098cb97","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"push","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:48550"} {"level":"error","ts":"2026-10-02T02:59:53.585Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"56a85448-be0d-11f1-802d-53f53098cb97","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:53.585Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"56a85448-be0d-11f1-802d-53f53098cb97","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"warn","ts":"2026-10-02T02:59:54.630Z","logger":"pipelinesascode","caller":"github/parse_payload.go:234","msg":"[SECURITY] Blocked GitHub App token minting before webhook signature validation completed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"573c7bf0-be0d-11f1-9f76-1a1e7628f3a3","severity":"warning","security-impact":"github-app-token-mint-blocked","reason":"webhook-signature-validation-failed","error":"payload signature check failed","event-type":"pull_request","installation-id":133111758,"github-enterprise-host-present":false,"remote-addr":"10.130.0.9:48562"} {"level":"error","ts":"2026-10-02T02:59:54.630Z","logger":"pipelinesascode","caller":"adapter/sinker.go:43","msg":"failed to parse event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"573c7bf0-be0d-11f1-9f76-1a1e7628f3a3","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEventPayload\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:43\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).processEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:87\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:78\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"} {"level":"error","ts":"2026-10-02T02:59:54.630Z","logger":"pipelinesascode","caller":"adapter/sinker.go:80","msg":"error handling event: payload signature check failed","commit":"7f1e477780fce126880b07821d10088441dcf8d3","provider":"github","event-id":"573c7bf0-be0d-11f1-9f76-1a1e7628f3a3","stacktrace":"github.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*sinker).handleEvent\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/sinker.go:80\ngithub.com/openshift-pipelines/pipelines-as-code/pkg/adapter.(*listener).Start.listener.handleEvent.func4.1\n\t/go/src/github.com/openshift-pipelines/pipelines-as-code/pkg/adapter/adapter.go:274"}