AI导哈

测试与安全

github-webhooks

hookdeck/webhook-skills

Receive and verify GitHub webhooks. Use when setting up GitHub webhook handlers, debugging signature verification, or handling repository events like push, pull_request, issues, or release.

  • 491 次安装
  • 95 星标
  • 收录于

安装命令

npx skills add https://github.com/hookdeck/webhook-skills --skill github-webhooks

SKILL.md

GitHub Webhooks

When to Use This Skill

  • Setting up GitHub webhook handlers
  • Debugging signature verification failures
  • Understanding GitHub event types and payloads
  • Handling push, pull request, or issue events

Verification (core)

GitHub signs the raw body with HMAC-SHA256 keyed on your webhook secret and sends the digest in X-Hub-Signature-256 formatted as sha256=<hex>. Use X-Hub-Signature-256 (not the legacy SHA-1 X-Hub-Signature), pass the raw body, and compare timing-safe.

Node:

const crypto = require('crypto');

相关 Skills

stripe-webhookshookdeck/webhook-skillsReceive and verify Stripe webhooks. Use when setting up Stripe webhook handlers, debugging signature verification, or handling payment events like payment_intent.succeeded, customer.subscription.created, or invoice.paid.文档办公597