harald/zeroclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 3
zeroclaw/.github/workflows
History
Argenis 5cc02c5813
fix: add WhatsApp webhook signature verification (X-Hub-Signature-256) 
Closes #51

- Add HMAC-SHA256 signature verification for WhatsApp webhooks
- Prevents message spoofing attacks (CWE-345)
- Add whatsapp_app_secret config field with ZEROCLAW_WHATSAPP_APP_SECRET env override
- Add 13 comprehensive unit tests

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-15 06:17:24 -05:00
..
ci.yml fix: add WhatsApp webhook signature verification (X-Hub-Signature-256) 2026-02-15 06:17:24 -05:00
docker.yml fix: add WhatsApp webhook signature verification (X-Hub-Signature-256) 2026-02-15 06:17:24 -05:00
release.yml feat: initial release — ZeroClaw v0.1.0 2026-02-13 12:19:14 -05:00
security.yml feat: initial release — ZeroClaw v0.1.0 2026-02-13 12:19:14 -05:00