This almost always comes down to which Git credential the push is actually using, or that credential lacking write permission. The GitHub App's repo permissions on the GitHub side aren't the problem. Installing the app on the repo doesn't authenticate you; the credential stored in Databricks does.
What I'd check, in order
1. Look at your credentials under Settings โ Linked accounts
Go to your username โ Settings โ Linked accounts. Each Git provider has one default credential per user, and Databricks uses it for Git folder operations unless the folder specifies a different one [1]. Because you've tried several things, you likely have more than one GitHub credential, and the default may be a stale or read-only one. Note that the Databricks GitHub App allows only one linked credential [1]. Delete anything stale and keep a single credential you know is good.
2. Pin the credential on the Git folder
Open the Git folder โ Git settings tab โ under Git credential, pick the credential explicitly and Save [1]. This removes any ambiguity about the default.
3. Re-link or recreate the credential
If you used the GitHub app/OAuth link, approve the required permissions or re-link your GitHub account [1]. The cleanest way is to remove the credential, then Add Git credential โ GitHub, and complete the OAuth flow again.
4. If you use a PAT, make sure it has write access
You can clone public repos with no credentials, but pushing needs a credential with Write permissions [1]. For a PAT:
- Classic token: the
repo scope.
- Fine-grained token: Repository Contents: Read and write, and the token must be granted access to this specific repo.
- If the repo is in an org with SAML SSO, authorize the token for SSO [1].
5. Set a real Git provider email
Enter your actual email in the Git provider email field. If it's blank, Databricks falls back to your username as the email, which breaks commit attribution [1]. Update it if the credential was created before that field existed.
6. Rule out workspace-side role and GitHub-side branch rules
- If your workspace uses RBAC and you're acting as a group/role, the push uses the role's credential. A read-only group token can clone but can't push [1].
- On GitHub, check branch protection on the branch you're pushing to. As a quick test, create a new branch in the Git folder and commit/push there. If that works, your credential is fine and a rule on
main is blocking you.
Next step
In most cases, steps 1โ3 fix this: one clean, default, write-capable credential, explicitly selected on the folder. If it still fails after that, switch to a PAT with the scopes above as a diagnostic. If the PAT pushes successfully, the problem is in the OAuth/app link rather than your repo or workspace. Also run through the Git folders errors and troubleshooting page [2], since the "Resolver error" message itself gives you very little to go on.
References
[1] Configure Git integration for Git folders | Databricks on AWS โ https://docs.databricks.com/aws/en/repos/repos-setup
[2] Databricks Git folders | Databricks on AWS โ https://docs.databricks.com/aws/en/repos