How is [x-hub-signature] header built for issue_updated events?

I’ve found out recently that sending comment_created events with secure admin webhooks, I can validate the HMAC signature correctly.

However, when receiving issue_updated events, the HMAC validation fails.

For both, I’m taking into account Request.Body. What could be the issue?

I am following this documentation: