feat: implement bearer token verification for GitHub webhook to enhance security

This commit is contained in:
Ben Allfree
2025-11-26 09:25:13 -08:00
parent afd14dadd4
commit 9cc36dae59
2 changed files with 20 additions and 2 deletions
+2
View File
@@ -33,6 +33,7 @@ jobs:
env:
CONVEX_URL: ${{ inputs.convex_url }}
BUILD_ID: ${{ inputs.build_id }}
CONVEX_BUILD_TOKEN: ${{ secrets.CONVEX_BUILD_TOKEN }}
steps:
- name: Setup status update helper
shell: bash
@@ -47,6 +48,7 @@ jobs:
fi
curl -sSf -X POST "$CONVEX_URL/github-webhook" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer $CONVEX_BUILD_TOKEN" \
-d "$payload" || true
}
EOF