feat: allow webhook update calls

snyk · Jan 28, 2025 · 68b1019 · 68b1019
1 parent 27f2ea7
commit 68b1019
Show file tree

Hide file tree

Showing 9 changed files with 206 additions and 1 deletion.
diff --git a/client-templates/github-com/accept.json.sample b/client-templates/github-com/accept.json.sample
@@ -2136,6 +2136,12 @@
       "method": "POST",
       "path": "/repos/:name/:repo/pulls/:pullRef/reviews",
       "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
+    },
+    {
+      "//": "allow webhook configs to be updated, to allow for secret upgrades",
+      "method": "PATCH",
+      "path": "/repos/:name/:repo/hooks/:id/config",
+      "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
     }
   ]
 }
diff --git a/client-templates/github-enterprise/accept.json.sample b/client-templates/github-enterprise/accept.json.sample
@@ -1416,6 +1416,12 @@
       "method": "POST",
       "path": "/repos/:name/:repo/pulls/:pullRef/reviews",
       "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
+    },
+    {
+      "//": "allow webhook configs to be updated, to allow for secret upgrades",
+      "method": "PATCH",
+      "path": "/repos/:name/:repo/hooks/:id/config",
+      "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
     }
   ]
 }
diff --git a/client-templates/github-server-app/accept.json.sample b/client-templates/github-server-app/accept.json.sample
@@ -1416,6 +1416,12 @@
       "method": "POST",
       "path": "/repos/:name/:repo/pulls/:pullRef/reviews",
       "origin": "https://${GITHUB_API}"
+    },
+    {
+      "//": "allow webhook configs to be updated, to allow for secret upgrades",
+      "method": "PATCH",
+      "path": "/repos/:name/:repo/hooks/:id/config",
+      "origin": "https://${GITHUB_API}"
     }
   ]
 }
diff --git a/defaultFilters/github-enterprise.json b/defaultFilters/github-enterprise.json
@@ -1416,6 +1416,12 @@
         "method": "POST",
         "path": "/repos/:name/:repo/pulls/:pullRef/reviews",
         "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
+      },
+      {
+        "//": "allow webhook configs to be updated, to allow for secret upgrades",
+        "method": "PATCH",
+        "path": "/repos/:name/:repo/hooks/:id/config",
+        "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
       }
     ]
   }
diff --git a/defaultFilters/github-server-app.json b/defaultFilters/github-server-app.json
@@ -2022,6 +2022,16 @@
           "scheme": "bearer",
           "token": "${GHA_ACCESS_TOKEN}"
         }
-      }
+      },
+      {
+        "//": "allow webhook configs to be updated, to allow for secret upgrades",
+        "method": "PATCH",
+        "path": "/repos/:name/:repo/hooks/:id/config",
+        "origin": "https://${GITHUB_API}",
+        "auth": {
+          "scheme": "bearer",
+          "token": "${GHA_ACCESS_TOKEN}"
+        }
+      },
     ]
   }
diff --git a/defaultFilters/github.json b/defaultFilters/github.json
@@ -2136,6 +2136,12 @@
         "method": "POST",
         "path": "/repos/:name/:repo/pulls/:pullRef/reviews",
         "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
+      },
+      {
+        "//": "allow webhook configs to be updated, to allow for secret upgrades",
+        "method": "PATCH",
+        "path": "/repos/:name/:repo/hooks/:id/config",
+        "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
       }
     ]
   }
diff --git a/test/fixtures/accept/github.json b/test/fixtures/accept/github.json
@@ -44,6 +44,12 @@
       "method": "POST",
       "path": "/repos/:name/:repo/pulls/:pullRef/reviews",
       "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
+    },
+    {
+      "//": "allow webhook configs to be updated, to allow for secret upgrades",
+      "method": "PATCH",
+      "path": "/repos/:name/:repo/hooks/:id/config",
+      "origin": "https://${GITHUB_TOKEN}@${GITHUB_API}"
     }
   ]
 }