Error evaluating hook: invalid payload signatures (SHA256)

[igmrlm]

Hi, I'm receiving webbooks from shopify with X-Shopify-Hmac-Sha256 base64 (not web) encoded signatures.
I've manually calculated the signature using the redacted secret, the payload and signature and they match so I'm not sure what I'm doing wrong

webhook version 2.8.0 (snap)

My hook is as follows:

[
	{
    "id": "shopify",
    "execute-command": "~/k/script.sh",
    "command-working-directory": "~/shopify/",
    "pass-environment-to-command":
    [
      {
        "source": "entire-payload",
        "name": "payload.data",
                "envname": "WEBHOOK_PAYLOAD"
      },
    ],
	"trigger-rule":
{
  "match":
  {
    "type": "payload-hmac-sha256",
    "secret": "REDACTED",
    "parameter":
    {
      "source": "header",
      "name": "X-Shopify-Hmac-SHA256"
    }
  }
}
}
]

[moorereason]

Can you share the debug output?