Skip to content

Greenlight-Driver-Training/secure-actions-webhook

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

13 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

secure-actions-webhook

Securely call CD servers / notification services after your Action finishes

Usage

Sending a string:

- name: Webhook
  uses: Greenlight-Driver-Training/[email protected]
  env:
    REQUEST_URI: ${{ secrets.REQUEST_URI }}
    REQUEST_DATA: "something_interesting"
    HMAC_SECRET: ${{ secrets.HMAC_SECRET }}

Sending a json string:

- name: Webhook
  uses: Greenlight-Driver-Training/[email protected]
  env:
    REQUEST_URI: ${{ secrets.REQUEST_URI }}
    REQUEST_DATA: '{ "something": "interesting" }'
    HMAC_SECRET: "secret_used_to_generate_signature"

The request will include the header X-Request-Signature, which is the HMAC signature of the raw body (SHA256, Base64). Verify it on your endpoint for integrity.

About

Securely call CD servers / notification services after your Action finishes

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • JavaScript 66.6%
  • Dockerfile 31.7%
  • Shell 1.7%