Jira webhook
For a plain Jira webhook, when the CoderHelm Jira app can't be installed. The URL holds a token generated for your team on the Jira page of the dashboard. If you also generated a secret there, every request must carry X-Hub-Signature: sha256= and the hex HMAC-SHA256 of the raw body, keyed with that secret. Jira Cloud signs webhooks this way when you set the secret on the webhook; a Jira automation can send the header itself.
jira_signatureX-Hub-Signature<token>Only when the team generated a webhook secret: sha256= and the hex HMAC-SHA256 of the raw body, keyed with that secret.
token*stringThe webhook token from the Jira page of the dashboard.
The Jira event.
application/json- body
The body of a Jira webhook, as Jira sends it. Only the fields CoderHelm reads are listed; the rest are accepted and ignored.
{ "coderhelm": { "repo_name": "web", "repo_owner": "acme" }, "issue": { "fields": { "labels": [ "coderhelm" ], "summary": "Add rate limiting to the login form" }, "key": "WEB-42" }, "webhookEvent": "jira:issue_updated"}coderhelm?null|comment?null|issue*The issue. A run starts when it has the label coderhelm (or one
starting coderhelm:), or is assigned to a user whose name contains
"CoderHelm", in a project the team switched on.
webhookEvent*stringThe event, such as jira:issue_created, jira:issue_updated or
comment_created. An event whose name contains comment retries a
failed run or sends feedback to an open pull request; other issue
events can start a run.
"jira:issue_updated"Accepted (whether or not it started anything).
curl -X POST 'https://api.coderhelm.com/webhooks/jira/string' \ -H 'Content-Type: application/json' \ -d '{ "coderhelm": { "repo_name": "web", "repo_owner": "acme" }, "issue": { "fields": { "labels": [ "coderhelm" ], "summary": "Add rate limiting to the login form" }, "key": "WEB-42" }, "webhookEvent": "jira:issue_updated"}'GitHub App events POST
Where GitHub sends every event of the CoderHelm GitHub App. Installing the app sets this up; you only call it yourself when you self-host. Each request is signed with the app's webhook secret in `X-Hub-Signature-256` (`sha256=` and the hex HMAC-SHA256 of the raw body), compared in constant time. The event type comes from `X-GitHub-Event` and the body must name an installation. Events CoderHelm doesn't act on, and events from an installation not linked to a team, are accepted with `200` and ignored.
List quarantined tests GET
Returns the tests quarantined for the repository the OIDC token was issued to, so a CI step can keep their failures from failing the build. For Playwright, pass `playwright_grep_invert` to `--grep-invert`.