Documentation Menu

GitHub webhook validation

Configure a GitHub validation endpoint when you want Hookmetry to evaluate a captured GitHub signature header against the webhook secret.

Before you begin

  • A GitHub webhook secret.
  • A Hookmetry endpoint configured with GitHub validation.

Configure validation

  1. Create or edit an endpoint with validation type GitHub.
  2. Enter the GitHub webhook secret.
  3. Configure the GitHub webhook payload URL with the Hookmetry capture URL.
  4. Use a GitHub delivery or test event and inspect the validation result.

Supported headers

The validator checks X-Hub-Signature-256 first and falls back to X-Hub-Signature. SHA-256 and legacy SHA-1 prefixes are understood by the current validator.

Was this page helpful?

Your feedback helps us improve the docs.