Cloudflare blocks Login via GitHub Actions, HTTP 403 / error code: 1010 #2502
Description
In one of our CI jobs, GitHub Actions logs into Docker Hub - originally via the /v2/users/login endpoint and now also via /v2/auth/token. This has worked in the past, but today, the CI failed with an HTTP 403 error code instead of the documented 401 error code. Further inspection points towards a Cloudflare error.
The body just says error code: 1010 and the response headers are as follows.
Date: Mon, 17 Nov 2025 09:26:05 GMT
Content-Type: text/plain; charset=UTF-8
Content-Length: 16
Connection: close
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Set-Cookie: __cf_bm=41R5lj.n5XTQb3r4y6HDNdIz0Qm6oIp5rNGW8iTr3kA-1763371565-1.0.1.1-6xBLVrJnspZFclJRczJeLlX7FPSw37bRyMgNQSd2u9ml2SrBTT.YJEwX2xPjO9EjXgdOUf25k1Z1e0u0nC2dH3ip0c02AA9BImxMzIRSGLk; path=/; expires=Mon, 17-Nov-25 09:56:05 GMT; domain=.hub.docker.com; HttpOnly; Secure; SameSite=None
Set-Cookie: _cfuvid=HxHbI249cSNvpxxpbe5ThIZwMfQMFq_05xp8WlyDX8c-1763371565464-0.0.1.1-604800000; path=/; domain=.hub.docker.com; HttpOnly; Secure; SameSite=None
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 99fe2f3c1a5e2fd6-IAD