---
title: "GitHub App webhook"
method: POST
path: "/webhooks/github"
tags: ["Projects Webhooks"]
---

# GitHub App webhook

`POST /webhooks/github`

Endpoint used by GitHub to deliver App webhook events.
This endpoint is authenticated via GitHub's HMAC-SHA256 signature header,
not via the normal API authentication.

## Request body

- object — GitHub webhook event payload

## Response `200`

Webhook received and processed successfully

## Other responses

- `400` — Invalid signature or malformed request
- `500` — Internal error while handling the webhook

## Changes

- **2026-04-29** `041b436ec5f0` — 1 info
  - endpoint added
- **2026-04-15** `a2cc5189d200` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/xataio/apis/xata-api/changes/webhooks/github/post.md)

---

[API](https://skmtc.dev/xataio/apis/xata-api.md) · [All operations](https://skmtc.dev/xataio/apis/xata-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/xataio/xata-api/revisions/f3e5b60db9e1/schema)