Verifies one delivery.
GitLab is rarely HMAC-verifiable: webhook-signature needs 19.0 with the webhook_signing_token flag, and older installs send the secret plaintext in X-Gitlab-Token. Both are accepted and the verdict records which one answered.
webhook-signature
webhook_signing_token
X-Gitlab-Token
Verifies one delivery.
GitLab is rarely HMAC-verifiable:
webhook-signatureneeds 19.0 with thewebhook_signing_tokenflag, and older installs send the secret plaintext inX-Gitlab-Token. Both are accepted and the verdict records which one answered.