#8 Support GitHub secret signing

ocd-scm · Jan 2, 2019 · 0785e46 · 0785e46
1 parent 83a3947
commit 0785e46
Show file tree

Hide file tree

Showing 2 changed files with 52 additions and 16 deletions.
diff --git a/hooks-push.json b/hooks-push.json
@@ -15,16 +15,34 @@
       "and":
       [
         {
-          "match":
-          {
-            "type": "value",
-            "value": "{{ getenv "WEBHOOK_SECRET" | js }}",
-            "parameter":
+          "or": 
+          [
             {
-              "source": "payload",
-              "name": "secret"
+              "match":
+              {
+                "type": "value",
+                "value": "{{ getenv "WEBHOOK_SECRET" | js }}",
+                "parameter":
+                {
+                  "source": "payload",
+                  "name": "secret"
+                }
+              }
             }
-          }
+            ,
+            {
+              "match":
+              {
+                "type": "payload-hash-sha1",
+                "value": "{{ getenv "WEBHOOK_SECRET" | js }}",
+                "parameter":
+                {
+                  "source": "header",
+                  "name": "X-Hub-Signature"
+                }
+              }
+            }
+          ]
         },
         {
           "match":

diff --git a/hooks-release.json b/hooks-release.json
@@ -15,16 +15,34 @@
       "and":
       [
         {
-          "match":
-          {
-            "type": "value",
-            "value": "{{ getenv "WEBHOOK_SECRET" | js }}",
-            "parameter":
+          "or": 
+          [
             {
-              "source": "payload",
-              "name": "secret"
+              "match":
+              {
+                "type": "value",
+                "value": "{{ getenv "WEBHOOK_SECRET" | js }}",
+                "parameter":
+                {
+                  "source": "payload",
+                  "name": "secret"
+                }
+              }
             }
-          }
+            ,
+            {
+              "match":
+              {
+                "type": "payload-hash-sha1",
+                "value": "{{ getenv "WEBHOOK_SECRET" | js }}",
+                "parameter":
+                {
+                  "source": "header",
+                  "name": "X-Hub-Signature"
+                }
+              }
+            }
+          ]
         },
         {
           "match":