AutomateLab

SaaS webhooks / Dev tools

GitHub webhook events.

75 events emitted by GitHub in the team-ops webhook catalog. Each event below carries the canonical event name, payload schema (field names and types only), auth method, signature header, retry policy, and a link back to GitHub's docs.

Auth mix: 75 hmac-sha256 · Source extraction: 2026-05-13

All 75 events

Direct anchors. Each event header links to its own URL.

branch_protection_configuration

Fires when branch protection configuration is enabled or disabled on a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

branch_protection_rule

Fires when a branch protection rule is created, deleted, or edited.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

check_run

Fires when a check run is created, completed, rerequested, or its re-run is requested.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

check_suite

Fires when a check suite is completed, requested, or rerequested.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

code_scanning_alert

Fires when a code scanning alert is created, fixed, dismissed, reopened, or auto-dismissed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

commit_comment

Fires when a commit comment is created.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

create

Fires when a Git branch or tag is created in a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

custom_property

Fires when a custom property is created, deleted, updated, or promoted.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

custom_property_values

Fires when custom property values for a repository are updated.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

delete

Fires when a Git branch or tag is deleted from a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

dependabot_alert

Fires when a Dependabot alert is auto-dismissed, auto-reopened, created, dismissed, fixed, reintroduced, or reopened.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

deploy_key

Fires when a deploy key is added or removed from a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

deployment

Fires when a deployment is created from the GitHub API or a push to a branch.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

deployment_protection_rule

Fires when a deployment protection rule is requested for an environment.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

deployment_review

Fires when a deployment review is approved, rejected, or requested.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

deployment_status

Fires when a deployment's status changes (pending, success, error, failure, inactive).

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

discussion

Fires when a discussion is created, edited, deleted, pinned, unpinned, locked, unlocked, transferred, answered, or categorized.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

discussion_comment

Fires when a comment on a discussion is created, edited, or deleted.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

fork

Fires when a user forks a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

github_app_authorization

Fires when a user revokes their authorization of a GitHub App.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

gollum

Fires when a wiki page is created or updated.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

installation

Fires when a GitHub App installation is created, deleted, suspended, new_permissions_accepted, or unsuspended.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

installation_repositories

Fires when repositories are added to or removed from an app installation.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

installation_target

Fires when the account (user or organization) that hosts a GitHub App is renamed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

issue_comment

Fires when a comment on an issue or pull request is created, edited, or deleted.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

issue_dependencies

Fires when a blocking issue dependency is added or removed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

issues

Fires when an issue is assigned, closed, deleted, demilestoned, edited, labeled, locked, milestoned, opened, pinned, reopened, transferred, unassigned, unlabeled, or unlocked.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

label

Fires when a repository label is created, deleted, or edited.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

marketplace_purchase

Fires when a GitHub Marketplace purchase is cancelled, changed, pending_change, pending_change_cancelled, or purchased.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

member

Fires when a user's repository collaborator status is added, edited, or removed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

membership

Fires when a user is added or removed from a team.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

merge_group

Fires when a merge group's checks are requested or the merge group is destroyed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

meta

Fires when the webhook itself is deleted or has its configuration changed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

milestone

Fires when a milestone is created, closed, deleted, edited, or opened.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

org_block

Fires when a user is blocked or unblocked by an organization.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

organization

Fires when an organization is deleted, renamed, member_added, member_removed, member_invited, or blocked/unblocked.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

package

Fires when a GitHub Package is published or updated.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

page_build

Fires when a GitHub Pages site build is triggered, whether successful or not.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

personal_access_token_request

Fires when a fine-grained personal access token request is approved, cancelled, created, or denied.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

ping

Fires when a new webhook is created, confirming the endpoint is reachable.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

project

Fires when a classic project board is closed, created, deleted, edited, or reopened.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

project_card

Fires when a note is created, converted, moved, deleted, or edited on a classic project board.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

project_column

Fires when a column is created, deleted, edited, or moved on a classic project board.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

projects_v2

Fires when an organization project is closed, created, deleted, edited, or reopened.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

projects_v2_item

Fires when an item on an organization project is archived, converted, created, deleted, edited, or reordered.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

projects_v2_status_update

Fires when a status update is created, deleted, or edited on an organization project.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

public

Fires when a repository changes from private to public.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

pull_request

Fires when a pull request is assigned, auto merge disabled/enabled, closed, converted to draft, demilestoned, dequeued, edited, enqueued, labeled, locked, milestoned, opened, ready for review, reopened, review_request_removed, review_requested, synchronized, unassigned, unlabeled, or unlocked.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

pull_request_review

Fires when a pull request review is dismissed, edited, or submitted.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

pull_request_review_comment

Fires when a comment on a pull request diff is created, deleted, or edited.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

pull_request_review_thread

Fires when a review comment thread on a pull request is resolved or unresolved.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

push

Fires when one or more commits are pushed to a repository branch, tag, or when commits are force-pushed.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

registry_package

Fires when a package version is published or updated (legacy event; prefer package).

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

release

Fires when a release is created, deleted, edited, prereleased, published, released, or unpublished.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

repository

Fires when a repository is archived, created, deleted, edited, privatized, publicized, renamed, transferred, or unarchived.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

repository_advisory

Fires when a security advisory is published, reported, or updated.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

repository_dispatch

Fires when an external service triggers a custom event via the repository dispatch API endpoint.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

repository_import

Fires when a repository import succeeds, fails, or is cancelled.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

repository_ruleset

Fires when a repository or organization ruleset is created, deleted, or edited.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

repository_vulnerability_alert

Fires when a security vulnerability alert is created, dismissed, or resolved (deprecated; use dependabot_alert).

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

secret_scanning_alert

Fires when a secret scanning alert is created, resolved, or reopened.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

secret_scanning_alert_location

Fires when new instances of a detected secret are identified in a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

secret_scanning_scan

Fires when a secret scanning scan completes for a branch, tag, or backfill.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

security_advisory

Fires when a global GitHub security advisory is published, updated, or withdrawn.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

security_and_analysis

Fires when a code security or analysis feature is enabled or disabled for a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

sponsorship

Fires when a sponsorship listing is cancelled, created, edited, pending_cancellation, or pending_tier_change.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

star

Fires when a repository is starred or unstarred.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

status

Fires when the status of a Git commit changes (error, failure, pending, or success).

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

sub_issues

Fires when a sub-issue relationship is added or removed between issues.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

team

Fires when a team is added to a repository, created, deleted, edited, or removed from a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

team_add

Fires when a repository is added to a team.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

watch

Fires when a user starts watching (starring) a repository.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

workflow_dispatch

Fires when a GitHub Actions workflow is manually triggered via the UI or API.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

workflow_job

Fires when a GitHub Actions workflow job is queued, in_progress, completed, or waiting.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

workflow_run

Fires when a GitHub Actions workflow run is completed, in_progress, or requested.

extraction: manual html

Auth

Auth method
hmac-sha256
Signature header
X-Hub-Signature-256
Signature detail
HMAC-SHA256 of raw request body; also delivers legacy X-Hub-Signature (HMAC-SHA1) when configured.
Idempotency header
X-GitHub-Delivery
Event ID header
X-GitHub-Delivery

Delivery

Guarantees
at-least-once
Max payload size
26,214,400 bytes

Payload schema (field names + types only)

action string
The action that triggered the event (e.g. created, deleted, updated).
sender object required
User account that triggered the event.
login string
id integer
type string
repository object
Repository where the event occurred. Absent on some org-level events.
id integer
name string
full_name string
private boolean
organization object | null
Organization owning the repository, if applicable.
installation object | null
GitHub App installation context, present for app-based deliveries.

Vendor docs

Use this data programmatically

The full catalog ships as a HuggingFace dataset under CC-BY-4.0. Load it with the datasets library, filter by vendor, and you have every GitHub event in a Parquet table ready for code-generation, schema validation, or routing. 

from datasets import load_dataset
ds = load_dataset("automatelab/saas-webhook-catalog")
events = ds["train"].filter(lambda r: r["vendor"] == "github")

Open the dataset on HuggingFace Source on GitHub

Other vendors in the catalog

Back to the index for all 30 vendors.