[Buildbot] #2889: Check HMAC in github change hook
Buildbot trac
trac at buildbot.net
Mon Sep 8 00:16:50 UTC 2014
#2889: Check HMAC in github change hook
------------------------+-----------------------
Reporter: bgilbert | Owner:
Type: enhancement | Status: new
Priority: minor | Milestone: undecided
Version: master | Keywords:
------------------------+-----------------------
!GitHub webhook events can include an HMAC signature. This provides
better security than `change_hook_auth` on non-SSL connections: the
message content is authenticated, and no secrets are transmitted in the
clear.
Support validating the HMAC in the !GitHub change hook. Attached is a
working patch against 0.8.9 that may be useful as a starting point.
--
Ticket URL: <http://trac.buildbot.net/ticket/2889>
Buildbot <http://buildbot.net/>
Buildbot: build/test automation
More information about the bugs
mailing list