If you're testing from a feature branch, replace main in the URL (URL-encoding the branch name if it contains /) and pass the branch name as the ref: Security note: Tagged releases (v*) require SHA256 ...