#1777 Support Jira webhooks with X-Hub-Signature HMAC-SHA256 verification

Opened by shelson · 8/21/2026· Shipped 8/25/2026

Jira webhooks use the X-Hub-Signature header for HMAC-SHA256 payload verification, similar to GitHub webhooks. The header format is:

X-Hub-Signature: sha256=[REDACTED-SECRET-1]...

Request: Add a built-in model or extension that can receive Jira webhooks, validate the X-Hub-Signature HMAC-SHA256 signature against a configured secret, and surface the parsed payload as swamp data.

Use case: Trigger swamp workflows from Jira events (issue created, updated, commented, etc.) without writing custom signature verification boilerplate.

Reference: https://[HOST-1]/cloud/jira/platform/webhooks/

02Bog Flow

Shipped

8/25/2026, 5:30:31 PM

Click a lifecycle step above to view its details.

03Sludge Pulse

stack72 assigned stack728/25/2026, 4:37:35 PM

stack72 commented 8/25/2026, 5:30:39 PM

Thanks @shelson for reporting this! The fix has been merged and a release is on its way. We appreciate your contribution to swamp.