Webhooks

Receive real-time events from your platforms instantly via webhooks.

PagerDuty

Webhook URL: https://api.devbar.app/webhooks/pagerduty

  1. 1In PagerDuty, go to Integrations → Generic Webhooks (V3) → New Webhook.
  2. 2Paste the webhook URL above.
  3. 3Select the event types: incident.triggered, incident.acknowledged, incident.resolved.
  4. 4No additional secret configuration is needed — PagerDuty signs requests with your account's webhook signing secret automatically.
  5. 5Click Save. DevBar will start receiving events immediately.

GitHub

Webhook URL: https://api.devbar.app/webhooks/github

  1. 1In your GitHub repository (or organisation), go to Settings → Webhooks → Add webhook.
  2. 2Set Payload URL to the webhook URL above.
  3. 3Set Content type to application/json.
  4. 4Generate a random secret (e.g. openssl rand -hex 32) and paste it into the Secret field.
  5. 5Copy the same secret into DevBar Admin → Settings → Webhooks → GitHub Secret.
  6. 6Select the events: Pull requests, Push, Check runs, Workflow runs.
  7. 7Click Add webhook.

Signature Verification

DevBar verifies every GitHub webhook using HMAC-SHA256. The signature is in the X-Hub-Signature-256 header. Requests with an invalid or missing signature are rejected with HTTP 401.

// Pseudo-code verification
const sig = request.headers['x-hub-signature-256']
const expected = 'sha256=' + hmacSHA256(secret, request.body)
if (!timingSafeEqual(sig, expected)) return 401

Datadog

Webhook URL: https://api.devbar.app/webhooks/datadog

  1. 1In Datadog, go to Integrations → Integrations → search for Webhooks → Configure.
  2. 2Click New to add a webhook.
  3. 3Enter a name (e.g. devbar) and paste the webhook URL above.
  4. 4In the Payload field, leave the default JSON payload or use the custom template in the DevBar settings panel.
  5. 5Navigate to Monitors → any monitor → Edit → Notify your team, add @webhook-devbar to the notification message.
  6. 6Save the monitor. Alerts will now flow to DevBar in real time.
Tip: Use Datadog monitor tags to control which alerts DevBar receives. Create a separate monitor group tagged notify:devbar and only attach the webhook to those monitors.