coderabbit-webhooks-events

name	coderabbit-webhooks-events
description	Implement CodeRabbit webhook signature validation and event handling. Use when setting up webhook endpoints, implementing signature verification, or handling CodeRabbit event notifications securely. Trigger with phrases like "coderabbit webhook", "coderabbit events", "coderabbit webhook signature", "handle coderabbit events", "coderabbit notifications".
allowed-tools	Read, Write, Edit, Bash(curl:*)
version	1.11.0
license	MIT
author	Jeremy Longshore <[e-mail]>
tags	["saas","coderabbit","webhooks"]
compatibility	Designed for Claude Code

CodeRabbit Webhooks & Events

Overview

Handle CodeRabbit events triggered through GitHub and GitLab integrations. CodeRabbit posts AI-powered code review comments on pull requests.

Prerequisites

• CodeRabbit installed on your GitHub or GitLab repository
• GitHub webhook endpoint configured for PR events
• GitHub App or personal access token for API access
• .coderabbit.yaml configuration in repository root

Event Types

Event	Source	Payload
pull_request_review	GitHub webhook	Review body, state (approved/changes_requested)
pull_request_review_comment	GitHub webhook	Line comment, diff position, file path
check_run.completed	GitHub Checks API	CodeRabbit analysis results, conclusion
issue_comment.created	GitHub webhook	Summary comment, walkthrough
pull_request.labeled	GitHub webhook	Labels applied by CodeRabbit

Instructions

Step 1: Configure GitHub Webhook Receiver

import express from "express";
import crypto from "crypto";

const app = express();

app.post("/webhooks/github",
  express.raw({ type: "application/json" }),
  async (req, res) => {
    const signature = req.headers["x-hub-signature-256"] as string;  # 256 bytes
    const secret = process..!;

     expected =  + crypto
      .(, secret)
      .(req.)
      .();

     (!crypto.(.(signature), .(expected))) {
       res.().({ :  });  #   
    }

     event = req.[]  ;
     payload = .(req..());
    res.().({ :  });  #   
     (event, payload);
  }
);