Alexander Payne 54a6def7e8 feat(webhook): authenticated webhook runner with allowlists, signature verification, idempotent logging ...

- Rewrite scripts/gitea_webhook_handler.py as HTTP server with HMAC-SHA256 auth
- Add config/webhook.yaml defining allowed repos/events/branches/actions
- Implement dispatch_push calling ansible/scripts/deploy_on_webhook.sh safely
- SQLite logging table with delivery_id dedup for replay safety
- Add tests/test_gitea_webhook_handler.py covering push/PR/signature/idempotency
- Add docs/webhook-deployment.md with security model, ops, and #288 alignment

Closes #436

2026-04-30 10:03:57 -04:00

..

base.yaml

Merge PR #738: config/base.yaml (added)

2026-04-16 05:03:22 +00:00

cron.overlay.yaml

Merge PR #738: config/cron.overlay.yaml (added)

2026-04-16 05:03:23 +00:00

dev.overlay.yaml

Merge PR #738: config/dev.overlay.yaml (added)

2026-04-16 05:03:25 +00:00

gateway.overlay.yaml

Merge PR #738: config/gateway.overlay.yaml (added)

2026-04-16 05:03:26 +00:00

prod.overlay.yaml

Merge PR #738: config/prod.overlay.yaml (added)

2026-04-16 05:03:28 +00:00

webhook.yaml

feat(webhook): authenticated webhook runner with allowlists, signature verification, idempotent logging

2026-04-30 10:03:57 -04:00