API change event

A pipeline delivery. Delivery is at least once and in no fixed order.

postWebhookapi-change

Headers

user-agent'SKMTC-Hub-Webhooks/1' required

Hub's webhook client; the 1 matches the v1 of the event types.

skmtc-signaturestring required

t=<unix seconds>,v1=<hex HMAC-SHA256>. The HMAC key is the webhook's whole secret as UTF-8, whsec_ prefix included; the signed content is <t>.<raw body>. Compute it from the raw body before parsing it, compare in constant time, and refuse a t more than five minutes from your clock. Each attempt signs again with a new t and the current secret.

Payload

specversion'1.0' required
idstring required

The same on every attempt of a delivery. Use it to find duplicates. A pipeline delivery that Run now starts again sends a new id.

sourcestring uri required

The Hub site that sent the event, e.g. https://skmtc.dev.

subjectstring required

The API, as {owner}/{slug}.

timestring date-time required

When Hub captured the event; for a pipeline delivery event, when the delivery started. This is not the publisher's time.

datacontenttype'application/json' required
type'dev.skmtc.pipeline.delivery.v1' required

Response

Any 2xx: the delivery succeeded. Hub does not read the body.

Changes

Webhooks have no change history: a webhook is keyed by its event name rather than a path and method, so no recorded change can name it.