Skip to content

GitHub: use X-Hub-Signature-Sha-256 header to validate webhook payloads #361

Closed
@dregad

Description

@dregad

In late 2020, GitHub introduced a new X-Hub-Signature-Sha-256 header to sign Webhook payloads with the more secure sha256 hash.

The legacy, sha1-based X-Hub-Signature header we're currently using is still around for backwards compatibility, but we should update the precommit() method to use the new one.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions