How to verify the push of github webhooks?

Question

has already been created in github, and it can also receive the data of the webhooks event, but there is no push field I set in it. I checked and only when adding Secret There will be a webhooks event with the ping field in it, so how can I verify that it came from Secret? github post? X-Hub-Signature

Answer 1

Yes, I have written a script before to make judgments. Some functions are not completed, but you can refer to the part about verifying the request

Address