Get notified when a task finishes, a PR is merged, or a scaffold deploys. ShipRepo POSTs a signed JSON payload to your URL.
Each request includes X-ShipRepo-Signature (HMAC-SHA256 of the raw body using your webhook secret). Compute and compare:
const sig = crypto.createHmac('sha256', SECRET).update(rawBody).digest('hex');
if (sig !== req.headers['x-shiprepo-signature']) return res.status(401).end();