The fuckery involved to get the git tag for the commit hash in an AWS CodePipeline deploy step with secondary sources is mindboggling.

CODEBUILD_RESOLVED_SOURCE_VERSION points to primary source CODEBUILD_SOURCE_REPO_URL is not set

Response: 1174280392200937474