Resolved
Firewall rules blocked GitHub webhooks
19:54–20:07 UTC · 13 minutes
What happened
A change that tightened our web application firewall began rejecting webhook deliveries from GitHub. Two of the newly enforced rules mistook ordinary webhook payloads for attacks.
Impact
Between 19:54 and 20:07 UTC, 109 GitHub webhook deliveries to Arvion were refused, so the GitHub events they carried did not reach us in that window. No other legitimate traffic was blocked.
Timeline (UTC)
- 19:52A stricter set of firewall rules is switched from monitoring to blocking.
- 19:54The first GitHub webhook delivery is refused.
- 20:07The last delivery is refused. Webhooks are accepted again from here on.