A github webhook receiver for Benthos. SECRET_KEY=BLAH benthos -c benthos.yaml

wehbook.yaml

http:
  enabled: true
  address: 0.0.0.0:8095
  root_path: /api
  debug_endpoints: false

input:
  label: webhook_server
  http_server:
    path: "/webhook/github"
    rate_limit: flood_protect

rate_limit_resources:
  - label: flood_protect
    local:
      count: 100
      interval: 1s

pipeline:
  processors:
    - bloblang: |
        root = this
        root.signature_valid = if meta("X-Hub-Signature-256") ==  content().string().hash("hmac_sha256","${SECRET_KEY}").encode("hex") {
          true
        } else {
          false
        }
       
output:
  switch:
    cases:
      - check: 'this.signature_valid == true'
        output:
          stdout: {}
      - output:
          reject: "Invalid signature"