GitHub webhook receiver (POST /api/aos/webhooks/github): - Push events: extracts commit messages, matches #TKT-XXXX or task:<id> references, adds commit links as task comments, audit-logs - Pull request events: matches branch name to project (e.g. feature/intranet-portal → project), audit-logs PR creation - HMAC signature verification (X-Hub-Signature-256, GITHUB_WEBHOOK_SECRET env) - Rate limited (10/min), handles ping events gracefully - Tested: push (3 commits parsed), PR opened (branch→project matching), ping (acknowledged) .env.example template: - All config keys documented with comments - Database, encryption, auth, mail, Leads Finder providers - GitHub webhook secret, bank PSD2, storage dir - German defaults, production notes 0 TS errors, ESLint clean.
456 KiB
456 KiB