Github Webhook Events

GitHub Webhook events are automated notifications sent to a specified endpoint when certain actions occur in a repository or organization. These events capture activities such as push events, pull request creations or updates, issue comments, and release publications.

Ingest Method

This source uses am HTTP webhook to ingest events. Create the Github Webhook source in RunReveal and a new webhook URL will be generated. Use this URL when setting up your source.

webhook-setup

Setup

In Github under your organization settings, click on the Webhooks menu item and then Add webhook.

Paste the webhook URL that RunReveal provided when setting up your source, set the content type to application/json, and select which events you would like to receive from Github.

github setup

Once added Github will begin to forward events to your RunReveal account.

Schema

The following columns are exposed for this source. RunReveal applies schema normalization across all sources, ensuring uniform field names and data types for cross-source queries and reusable detection logic.

Table: runreveal_logs (22 columns)

ColumnType
idString
receivedAtDateTime
workspaceIDString
sourceTypeString
sourceIDString
eventIDString
eventNameString
eventTimeDateTime
readOnlyBool
srcIPString
resourcesArray(String)
serviceNameString
srcASOrganizationNullable(String)
srcASNumberNullable(UInt32)
srcASCountryCodeNullable(String)
dstIPString
dstASOrganizationNullable(String)
dstASNumberNullable(UInt32)
dstASCountryCodeNullable(String)
actorMap(String
tagsMap(String
rawLogString