root/fusion
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
e43d7951ca4688fc785f6b24f67069bf5893f07e
fusion/.changeset/github-app-badge-webhooks.md
gsxdsm f78f01ac5b feat(KB-137): add GitHub App webhooks for real-time badge updates 
- Add verified POST /api/github/webhooks endpoint with signature verification
- Implement GitHub App installation token authentication for API calls
- Add webhook handlers for pull_request, issues, and issue_comment events
- Support multi-task resource matching by parsed badge URL
- Retire live GitHub polling service in favor of push-based updates
- Add comprehensive webhook integration and unit tests
- Keep 5-minute REST refresh endpoints as fallback
2026-03-30 13:37:33 -07:00

1.0 KiB
Raw Blame History

@dustinbyrne/kb
@dustinbyrne/kb
patch

Replace GitHub badge polling with GitHub App webhook ingestion

  • Added POST /api/github/webhooks endpoint for verified GitHub App webhook delivery
  • Webhook signature verification using X-Hub-Signature-256 header
  • Support for pull_request, issues, and issue_comment (on PRs) events
  • GitHub App installation token authentication for canonical badge fetches
  • Multi-task resource matching by parsed badge URL (supports cross-repo badges)
  • Idempotent freshness updates without duplicate websocket broadcasts
  • Retained 5-minute REST refresh endpoints as fallback path
  • Removed live /api/ws dependency on GitHubPollingService lifecycle

Configuration:

  • KB_GITHUB_APP_ID - GitHub App ID
  • KB_GITHUB_APP_PRIVATE_KEY or KB_GITHUB_APP_PRIVATE_KEY_PATH - PEM private key
  • KB_GITHUB_WEBHOOK_SECRET - Webhook secret for signature verification

Required GitHub App Permissions:

  • Metadata: Read
  • Pull requests: Read
  • Issues: Read

Webhook Events: pull_request, issues, issue_comment

Reference in New Issue View Git Blame Copy Permalink