Skip to content

Allow webhook ping events for unapproved plugins#347

Merged
simonhamp merged 1 commit intomainfrom
allow-webhook-ping
Apr 10, 2026
Merged

Allow webhook ping events for unapproved plugins#347
simonhamp merged 1 commit intomainfrom
allow-webhook-ping

Conversation

@simonhamp
Copy link
Copy Markdown
Member

Summary

  • Moves the X-GitHub-Event header check before the plugin approval gate in PluginWebhookController
  • Returns a 200 response for ping events regardless of plugin approval status
  • Non-ping events (push, release, etc.) still require the plugin to be approved

This fixes an issue where developers setting up webhooks manually would get a 403 on GitHub's test ping because their plugin wasn't yet approved, making it look like the webhook was misconfigured.

Test plan

  • Ping event returns 200 for unapproved plugins
  • Ping event returns 200 for approved plugins
  • Non-ping events still return 403 for unapproved plugins
  • Invalid webhook secret still returns 404

🤖 Generated with Claude Code

Move the X-GitHub-Event header check before the plugin approval gate
so that GitHub's test ping returns 200 regardless of plugin status.
This lets developers verify webhook setup before their plugin is approved.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
@simonhamp simonhamp marked this pull request as ready for review April 10, 2026 11:00
@simonhamp simonhamp merged commit 960e4a2 into main Apr 10, 2026
2 checks passed
@simonhamp simonhamp deleted the allow-webhook-ping branch April 10, 2026 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant