ReferenceAPI referenceGithub
Receive a signed GitHub App webhook
The raw body is verified with X-Hub-Signature-256 before durable ingestion.
POST
/github/webhooksThe raw body is verified with X-Hub-Signature-256 before durable ingestion.
Header Parameters
X-GitHub-Delivery*string
X-GitHub-Event*string
X-Hub-Signature-256*string
Match
^sha256=[0-9a-f]{64}$Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
application/json
curl -X POST "https://example.com/github/webhooks" \ -H "X-GitHub-Delivery: string" \ -H "X-GitHub-Event: string" \ -H "X-Hub-Signature-256: string" \ -H "Content-Type: application/json" \ -d '{}'{ "data": { "accepted": true, "duplicate": true }}Prepare a GitHub App manifest for explicit browser submission GET
Returns manifest data only. The React client submits it to GitHub after explicit user confirmation.
Redirect legacy manifest links to the React onboarding flow GET
Bootstrap token access is accepted only before the first user signs up. Reconfiguration requires SUPER_USER.