Skip to main content
POST
/
v1
/
webhooks
/
{zombie_id}
/
github
Ingest a GitHub Actions webhook
curl --request POST \
  --url https://api.usezombie.com/v1/webhooks/{zombie_id}/github \
  --header 'Content-Type: application/json' \
  --header 'X-GitHub-Delivery: <x-github-delivery>' \
  --header 'X-GitHub-Event: <x-github-event>' \
  --header 'X-Hub-Signature-256: <x-hub-signature-256>' \
  --data '{}'
{
  "deduped": true,
  "ignored": "<string>"
}

Headers

​
X-GitHub-Event
string
required

GitHub event type. Only workflow_run is ingested.

​
X-GitHub-Delivery
string
required

GitHub-issued delivery UUID. Used as the dedupe key.

​
X-Hub-Signature-256
string
required

HMAC-SHA256 of the raw body, prefixed with sha256=.

Path Parameters

​
zombie_id
string<uuid>
required

UUIDv7 of the zombie that owns this webhook receiver.

Body

application/json

Response

Duplicate delivery (idempotency hit) or event ignored (zombie paused, non-workflow_run, non-completed action, or non-failure conclusion). Body distinguishes the two via the deduped or ignored field. The zombie_paused ignore does not consume the dedup slot, so redelivery after resume processes normally.

​
deduped
boolean
​
ignored
string

Reason the event was filtered out (e.g. non_failure_conclusion, zombie_paused).