API Documentation

Integrate source-control events with Versionably and consume published release updates.

Authentication

GitHub webhook requests use the HMAC SHA-256 signature in X-Hub-Signature-256. Configure the same webhook secret in GitHub and Versionably. RSS requests are public and scoped by organization slug.

POST/functions/githubWebhook?orgSlug=YOUR_ORG_SLUG

GitHub webhook ingestion

Receives GitHub push and release events. Push commits become draft changes; published GitHub releases become draft Versionably releases.

curl -X POST "https://YOUR_DOMAIN/functions/githubWebhook?orgSlug=acme" \
  -H "Content-Type: application/json" \
  -H "X-GitHub-Event: push" \
  -H "X-Hub-Signature-256: sha256=SIGNATURE" \
  --data @github-payload.json

GET/functions/rss?orgSlug=YOUR_ORG_SLUG

Published release feed

Returns the 20 latest published releases as RSS 2.0 XML.

curl "https://YOUR_DOMAIN/functions/rss?orgSlug=acme"

Webhook responses

{ "ok": true, "event": "push", "created": 3 }

Successful requests return HTTP 200. Missing organization slugs return 400, unknown organizations return 404, and invalid signatures return 401.