fleetworks / warden / features / signed-webhooks
Signed webhooks
Workspace events go to your HTTPS endpoints, signed with HMAC-SHA256 and retried with exponential backoff.
Register an HTTPS URL and choose the events it receives. Each committed change is sent to every active, subscribed endpoint of the same organization, at least once.
Every request carries X-Gatehouse-Event, X-Gatehouse-Delivery, X-Gatehouse-Timestamp and an X-Gatehouse-Signature computed over the timestamp and body with the endpoint’s signing secret.
A failed delivery is retried with exponential backoff, from 30 seconds up to an hour, and is marked dead after its last attempt. Send a test ping and read each endpoint’s delivery history from the API or console.
Payloads carry only the public projection of a workspace, never more than an anonymous caller could read.
More features
All features →- 01
Workspace records
List, create and update the Terraform Cloud workspaces your organization owns, each mapped to a service, an AWS account and a repo.
- 02
Org-scoped access
Every read is limited to the caller’s organization; roles and a chmod-style Perm mode decide who may change what.
- 03
Deterministic config Review
A fixed rule set checks a stored workspace, PAT or webhook endpoint and reports findings with a severity and a stable rule id.