status-watcher

Introduction

This is a simple proof of concept that shows how to use the status webhook event to verify updates made to a commit's status through the API are performed by authorized users.

Set up and run server

# make sure we're in the right directory 
$ cd status-watcher
# install Ruby gems
$ bundle install
# set a token to use with the API
$ export GITHUB_TOKEN=7d9dj0[...]
# run the webhook listener
$ ruby server.rb

Set up webhook

Enter the URL where we'll send webhook JSON payloads (make sure to append /payload):

Make sure we're only receiving status events: