I finally got to the bottom of this, I had, occasionally, used an Ngrok tunnel as an endpoint for the webhook but mostly I was using localhost I didn’t realize that when you ran the Stripe CLI locally it gave you a specific signing_secret when the session started:
> Ready! You are using Stripe API Version [2020-08-27]. Your webhook signing secret is whsec_..... (^C to quit)
I was using the signing secret from another endpoint I had setup for Ngrok.
