Same exact webhook sent 4 times?


#1

We’ve received the same webhook 4 times in the same second—all 4 requests show in “Recent Deliveries” in GitHub, and all of them contained exactly the same data for the same event (it was a user who forked a single repo).

2017-01-20 10:11:16
X-GitHub-Delivery: d5897a00-df3b-11e6-9d76-e059ac5577f2
X-GitHub-Event: integration_installation_repositories
[... same data, same repo...]

2017-01-20 10:11:16
X-GitHub-Delivery: d5897a00-df3b-11e6-9683-77b0112f97fa
X-GitHub-Event: integration_installation_repositories
[... same data, same repo...]

2017-01-20 10:11:16
X-GitHub-Delivery: d5897a00-df3b-11e6-8adb-77bc94abcfdf
X-GitHub-Event: integration_installation_repositories
[... same data, same repo...]

2017-01-20 10:11:16
X-GitHub-Delivery: d5897a00-df3b-11e6-8313-49771ebee221
X-GitHub-Event: integration_installation_repositories
[... same data, same repo...]

This seems to happen occasionally, a few times over the past week. Mostly just sending this as an FYI, I assume that this is behavior we have to safely handle as the receiver, but wanted to send this over in case you can trace a root cause.


#2

Thanks for reporting this @fotinakis.

We’ll look into it and let you know once we know more or if we have any follow-ups.


#3

@fotinakis can you confirm if you’re still experiencing this within the last day or so? It’s possible it may related to something that was recently fixed.


#4

@jmilas still seeing it in the last 24 hours (actually it looks like most/all of the deliveries we received in the last 24 hours came in duplicates of 4). If it helps, here are some recent delivery IDs:

2017-01-24 12:39:53
4222b280-e275-11e6-9b47-4fe35e731c23
4222b280-e275-11e6-99f2-677c315e5c11
4222b280-e275-11e6-924b-4eaefca4c484
4222b280-e275-11e6-87b0-9e561c37fcb8

2017-01-24 05:32:39
9314b580-e239-11e6-9535-eb56b7ba64dd
9314b580-e239-11e6-8b7b-ba7fc34c946f
9314b580-e239-11e6-8a96-985d4b73ee0f
9314b580-e239-11e6-810f-5e03a29e2908


#5

I noticed a couple of duplicated webhooks that happened to our integration (we publicize it yesterday). We got duplicated integration_installation events for two different installations, a few seconds apart from each other, and each pair has the same X-Hub-Signature SHA1 (so the Integration was installed only once, but fired two webhooks).

These are the timestamps and delivery IDs from the recent deliveries list:

2017-01-30 21:39:41 - 5ec35c80-e745-11e6-9c4c-a7e6ad069576
2017-01-30 21:39:50 - 6420a700-e745-11e6-934f-553f62e60f1a

2017-01-30 19:52:29 - 64fe0c80-e736-11e6-99cc-71cb27c98295
2017-01-30 19:51:29 - 413ac680-e736-11e6-9e44-8628f7cea65f