Then you use these URLs in Github webhook
And you set the secret field to: YOUR-GITHUB-SECRET
This will ensure that strangers cannot trigger these hooks unless they know both the secret for github and the url token
| [ | |
| { | |
| "id": "mirror-anarchy", | |
| "execute-command": "/home/gitmirror/sync-anarchy.sh", | |
| "command-working-directory": "/home/gitmirror", | |
| "trigger-rule": { | |
| "and": [ | |
| { | |
| "match": { | |
| "type": "payload-hash-sha1", | |
| "secret": "YOUR-GITHUB-SECRET", | |
| "parameter": { "source": "header", "name": "X-Hub-Signature" } | |
| } | |
| }, | |
| { | |
| "match": { | |
| "type": "value", | |
| "value": "SOME-SECRET-TOKEN", | |
| "parameter": { "source": "url", "name": "token" } | |
| } | |
| } | |
| ] | |
| } | |
| }, | |
| { | |
| "id":"status-anarchy", | |
| "execute-command":"/home/gitmirror/status-anarchy.sh", | |
| "command-working-directory": "/home/gitmirror", | |
| "pass-arguments-to-command": [ | |
| {"source": "payload", "name": "build_status"}, | |
| {"source": "payload", "name": "build_id"}, | |
| {"source": "payload", "name": "sha"}, | |
| {"source": "payload", "name": "build_name"} | |
| ], | |
| "trigger-rule": { | |
| "and": [ | |
| { | |
| "match": { | |
| "type": "payload-hash-sha1", | |
| "secret": "YOUR-GITHUB-SECRET", | |
| "parameter": { "source": "header", "name": "X-Hub-Signature" } | |
| } | |
| }, | |
| { | |
| "match": { | |
| "type": "value", | |
| "value": "SOME-SECRET-TOKEN", | |
| "parameter": { "source": "url", "name": "token" } | |
| } | |
| } | |
| ] | |
| } | |
| } | |
| ] |