Function handler

ci/src/github-webhook-endpoint/index.mjs:33–72

(event)

 * @throws GitHub webhook validation error
 */
export const handler = async (event) => {
  const githubSignature = event.headers['x-hub-signature'].split('=')[1];

  console.log(`Checking event signature: ${githubSignature}`);

  const key = process.env.GITHUB_WEBHOOK_SECRET;
  const data = event.body;
  const check = createHmac('sha1', key).update(data).digest('hex');

  if (githubSignature !== check) {
    throw new Error('Invalid signature!');
  }

  console.log(`Handling event: ${event.headers['x-github-event']}`);
  const body = event.isBase64Encoded
    ? Buffer.from(event.body, 'base64').toString('utf-8')
    : event.body;

  console.log(body);

  switch (event.headers['x-github-event']) {
    case 'ping':
      // Blackhole `ping` events
      break;
    default:
      await eventbridge.send(
        new PutEventsCommand({
          Entries: [
            {
              Detail: body,
              DetailType: event.headers['x-github-event'],
              Source: 'org.prx.ci.github-webhook',
            },
          ],
        }),
      );
  }

  return OK_RESPONSE;
};