Webhook Setup
Auto-trigger code reviews · HMAC-SHA256 signature verification · Supports Push & PR/MR events
🐙 GitHub
🦊 GitLab
🪣 Bitbucket
🔗 Webhook Endpoint
https://api.codeguardian.ai/api/v1/webhook/github
🔒
Verification: X-Hub-Signature-256 — HMAC-SHA256 signature
GitHub signs the request body with the Secret below; reviews trigger only after server verification
🔑 Webhook Secret
whsec_6f3a9d2e1b4c7f8a0e5d3c2b1a9f8e7d6c5b4a3f2e1d0c
📡 Listen Events
✓
push
✓
pull_request
pull_request_review
create
release
workflow_run
📋 Setup Steps
1
Go to GitHub Repository Settings
Settings → Webhooks → Add webhook
2
Enter Payload URL
Paste the endpoint URL above into the Payload URL field
3
Set Content type
Select application/json
4
Enter Secret
Paste the generated Secret into the Secret field for HMAC-SHA256 verification
5
Select Events and Save
Check push and pull_request events, click Add webhook
🔗 Webhook Endpoint
https://api.codeguardian.ai/api/v1/webhook/gitlab
🔑
Verification: X-Gitlab-Token — static token match
Enter the Token below in GitLab Webhook config; server validates request header consistency
🔑 GitLab Token
glhk_9a8b7c6d5e4f3a2b1c0d9e8f7a6b5c4d
📡 Listen Events
✓
push events
✓
merge_request events
tag push events
pipeline events
🔗 Webhook Endpoint
https://api.codeguardian.ai/api/v1/webhook/bitbucket
🔒
Verification: X-Hub-Signature — HMAC-SHA256 signature (same as GitHub)
Enter the Secret Key in Bitbucket Webhook config
🔑 Secret Key
bbhk_1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d7e8f
📡 Listen Events
✓
repo:push
✓
pullrequest:created
pullrequest:updated
pullrequest:fulfilled
📜 Recent Webhook Event Log
push → main 202 Review triggered
github.com/org/backend-api · sha:a3f8c2d · by zhangsan
14:32:10
pull_request opened → main 202 Review triggered
github.com/org/frontend-app · PR #142 · by lisi
13:05:44
push 401 Signature verification failed
X-Hub-Signature-256 mismatch, check Secret configuration
12:18:03