If the following holds true

• you're trying to push (e.g: a tag) from your CI pipeline
• and you're using a Project Access Token or a Job Token to authenticate the push

you might run into the issue of #361993 Bot users don't have access to internal projects.

If that's the case, the solution is obvious: you'll need to use a Group Access Token for that push