Events from CoderHelm's relay
On a hybrid self-hosted install, where CoderHelm's hosted relay forwards the events of CoderHelm's GitHub App (and Jira app) after checking the provider's own signature. Each request is signed with the install's relay key: X-CoderHelm-Relay-Signature: t=<unix seconds>,d=<delivery id>,v1=<hex>, the HMAC-SHA256 of <t>.<d>.<raw body>. Requests older than 5 minutes are refused, and so is a delivery id the install has already taken (409). X-CoderHelm-Relay-Source is github or jira; for GitHub, X-CoderHelm-Relay-Event is GitHub's event type and the body is GitHub's payload, unchanged.
relay_signatureX-CoderHelm-Relay-Signature<token>t=<unix seconds>,d=<delivery id>,v1=<hex>: the HMAC-SHA256 of <t>.<d>.<raw body>, keyed with the install's relay key.
X-CoderHelm-Relay-Signature*stringt=<unix seconds>,d=<delivery id>,v1=<hex HMAC-SHA256>.
X-CoderHelm-Relay-Source*stringWhere the event came from: github or jira.
X-CoderHelm-Relay-Event?|The provider's event type.
The provider's payload, unchanged.
application/json- body
Handled (or acknowledged and ignored).
curl -X POST 'https://api.coderhelm.com/webhooks/relay' \ -H 'X-CoderHelm-Relay-Signature: t=1761436800,d=72d3162e-cc78-11e3-81ab-4c9367dc0958,v1=5d1a…' \ -H 'X-CoderHelm-Relay-Source: github' \ -H 'X-CoderHelm-Relay-Event: pull_request' \ -H 'Content-Type: application/json' \ -d '{}'Knowledge source change POST
Tells CoderHelm that pages of a connected knowledge source changed, so it syncs that source now instead of at its next scheduled sync. Sanity posts to the address shown for each Sanity source (CoderHelm registers it itself when the token may manage webhooks), signed with `sanity-webhook-signature`: `t=<ms>,v1=` and the base64url HMAC-SHA256 of `<t>.<body>`, keyed with the token in the address; a signature older than five minutes is refused. Notion posts to `/webhooks/knowledge/notion` for the whole install, signed with `X-Notion-Signature`: `sha256=` and the hex HMAC-SHA256 of the body, keyed with the subscription's verification token. An event only starts a sync: what changed is always read back from the provider with the source's own connection.
List quarantined tests GET
Returns the tests quarantined for the repository the OIDC token was issued to, so a CI step can keep their failures from failing the build. For Playwright, pass `playwright_grep_invert` to `--grep-invert`.