Notice: Webhook Signature Verification

Incident Report for amazee.io

Investigating

Lagoon is enforcing signature verification on all incoming webhooks to ensure that only authenticated requests from your Git provider trigger automatic actions.

* What is affected: Automatic actions triggered via Git webhooks will be paused for repositories until the webhook token secret is configured.
* What is unaffected: Live environments, cron jobs, backups, and site data are completely unaffected (no downtime). Manual deployments via the Lagoon UI and Lagoon-cli remain functional.

Required action: visit https://updates.amazee.io/posts/lagoon-secure-webhook-tokens/ for instructions on how to update your webhook configuration.

Posted Nov 02, 2026 - 23:16 UTC