WebhooksBuild Notifications
Build Webhooks
Integrate Code2Native builds into your CI/CD or ops flow with signed completion callbacks.
What you get
- Receive a POST request when a build completes (SUCCESS / FAILED / CANCELLED).
- Payload includes build id, platform, status, timings, artifact URL (when available), and error message.
- Signed with HMAC so you can verify authenticity.
How to verify
- Read the signature header and verify HMAC-SHA256 over the raw request body.
- Reject requests with unknown event type or missing signature.
- Store idempotency by build id + status to avoid double-processing.
Best practices
- Return 2xx quickly; queue your processing asynchronously.
- Use HTTPS and rotate your webhook secret periodically.
- Log failed deliveries and expose a retry endpoint on your side if needed.