GitHub integrations
Choose a setup guide for your framework or GitHub workflow.
Integrations
Choose a setup guide for your framework or GitHub workflow.
LA
PHP
NO
Laravel
Validate the raw body before transforming the payload and send heavy work to the queue.
View integration →JavaScript
NE
Node.js + Express
Use express.raw on this route: express.json running before it changes the bytes signed by GitHub.
View integration →TypeScript
RU
Next.js App Router
Read request.text once, verify the signature, and only then parse JSON.
View integration →Ruby
FA
Ruby on Rails
Use request.raw_post and secure_compare before allowing the event to reach processing.
View integration →Python
GI
FastAPI
Calculate the HMAC with await request.body and compare the signature before deserializing.
View integration →YAML + Python
GitHub Actions
Send a signed synthetic event to validate the endpoint and secret without exposing credentials in logs.
View integration →HMAC-SHA256
Code samples, header names, event names, and signatures remain verbatim across locales.
Raw body
→HMAC
→Delivery ID
→Queue