workers.dev returns HTTP 403 / Error 1010 for GitHub Actions GET request

Developers Cloudflare Workers
,
1

For Workers & Pages, what is the name of the domain?

kilavuz-ceo-masasi-preview.ugurraltinn.workers.dev

What is the error number?

1010 (HTTP 403)

What is the error message?

Error 1010: Access denied error_name: browser_signature_banned detail: The site owner has blocked access based on your browser’s signature.

What is the issue or error you’re encountering

I own this Worker. A read-only GET request from GitHub Actions to /api/ai/status received a Cloudflare-generated HTTP 403 / Error 1010 response. Ray ID: a46df42be817431c Timestamp: 2026-10-07T15:31:36Z Deployment completed successfully. The workers.dev address is enabled. This Worker has no custom domain or route, and Cloudflare Access / Zero Trust is not configured. Where can I inspect the security setting or event responsible for this block on a workers.dev address? The documentation refers to zone-level Browser Integrity Check settings, but I cannot find an equivalent control for this Worker.

What steps have you taken to resolve the issue?

Checked Worker Settings, Domains and Access. Confirmed the workers.dev address is enabled and no Access configuration exists. Reviewed the Error 1010 documentation.

Stopped requests after identifying the block. No security settings, credentials, domains or request signatures were changed.

What are the steps to reproduce the issue?

The failure occurred during a post-deployment verification in GitHub Actions: a GET request to https://kilavuz-ceo-masasi-preview.ugurraltinn.workers.dev/api/ai/status returned the Cloudflare error described above.

No further reproduction attempts have been made since the response identified the signature block.

2

Following up with a dashboard check on October 9:

The workers.dev URL is enabled. No custom domains or routes are configured, and the Access tab asks me to set up Zero Trust. I could not find a Browser Integrity Check control in this Worker’s settings.

The original blocked request was:
GET /api/ai/status
HTTP 403 / Error 1010 — browser_signature_banned
Ray ID: a46df42be817431c
Timestamp: 2026-10-07T15:31:36Z

No further automated requests have been made since that block.

For a workers.dev hostname, where can the account owner identify the rule responsible and authorize a legitimate read-only GitHub Actions check? If this requires Cloudflare assistance, which support channel should I use?

Thank you.