This issue is archived. You can view it, but you can't modify it. Learn more

ExportXMLWordPrintable

      The Github plugin currently validates received webhooks using the legacy sha-1 HMAC.

      The plugin should migrate to use the X-Hub-Signature-256 header and the SHA256 HMAC.

      See https://docs.github.com/en/webhooks/using-webhooks/validating-webhook-deliveries for details.

            Assignee:
            Kirill Merkushev
            Reporter:
            James Nord
            Archiver:
            Jenkins Service Account

              Created:
              Updated:
              Archived: