Can't fetch remote repo changes: dubious ownership

[regisin]

I have a repo that builds static files and pushes to gh-pages (using hugo, not that it matters).

I have my script.sh like this:

#!/usr/bin/env sh

GIT_DIR=${1}
GIT_BRANCH=${2}
USER=${3}
EMAIL=${4}
HOME=${5}

# log date
echo "[redeploy] $(date):${USER}(${EMAIL})"

echo "git config --global --add safe.directory ${GIT_DIR}"
git config --global --add safe.directory ${GIT_DIR}

echo "git checkout ${GIT_BRANCH}"
git checkout ${GIT_BRANCH}

echo "git fetch origin"
git fetch origin

echo "git pull origin ${GIT_BRANCH}"
git pull origin ${GIT_BRANCH}

echo "git reset --hard origin/${GIT_BRANCH}"
git reset --hard origin/${GIT_BRANCH}

If I run webhook manually, all is good. However, when I try with the debian service, I get:

webhook[17990]: [webhook] 2025/02/03 02:48:51 [7d310f] executing /home/ubuntu/script.sh (/home/ubuntu/script.sh) with arguments ["/home/ubuntu/script.sh" "/home/ubuntu/static/reponame" "gh-pages" "" "" "/home/ubuntu"] and environment [] using /home/ubuntu/static/reponame as cwd
webhook[17990]: [webhook] 2025/02/03 02:48:51 [7d310f] command output: [redeploy] Mon Feb  3 02:48:51 UTC 2025:()
webhook[17990]: git config --global --add safe.directory /home/ubuntu/static/reponame
webhook[17990]: git checkout gh-pages
webhook[17990]: fatal: detected dubious ownership in repository at '/home/ubuntu/static/reponame'
webhook[17990]: To add an exception for this directory, call:
webhook[17990]:         git config --global --add safe.directory /home/ubuntu/static/reponame
webhook[17990]: git fetch origin
webhook[17990]: fatal: detected dubious ownership in repository at '/home/ubuntu/static/reponame'
webhook[17990]: To add an exception for this directory, call:
webhook[17990]:         git config --global --add safe.directory /home/ubuntu/static/reponame
webhook[17990]: git pull origin gh-pages
webhook[17990]: fatal: detected dubious ownership in repository at '/home/ubuntu/static/reponame'
webhook[17990]: To add an exception for this directory, call:
webhook[17990]:         git config --global --add safe.directory /home/ubuntu/static/reponame
webhook[17990]: git reset --hard origin/gh-pages
webhook[17990]: fatal: detected dubious ownership in repository at '/home/ubuntu/static/reponame'
webhook[17990]: To add an exception for this directory, call:
webhook[17990]:         git config --global --add safe.directory /home/ubuntu/static/reponame
webhook[17990]: [webhook] 2025/02/03 02:48:51 [7d310f] error occurred: exit status 128
webhook[17990]: [webhook] 2025/02/03 02:48:51 [7d310f] finished handling static-webhook

I have added user webhook to group ubuntu already to no avail (ubuntu owns "reponame" dir)
I'm confident it's a permission thing... I just can't seem to figure it out...

Would anyone help me?

Any help is appreciated!