nievah-edge

The webhook front door for a self-hosted Nievah runtime.

It verifies each GitHub delivery against your App's webhook secret, parks it durably on your cloud's queue and answers GitHub inside its ten-second budget. Your runtime then pulls the work out, so nothing in your network has to accept a connection from the internet.

It is the same signature check your runtime runs, so do not fork it: a front door that verifies differently accepts deliveries the runtime refuses.

Install the extra for your cloud:

pip install "nievah-edge[azure]"   # Azure Functions, Service Bus, Key Vault, Blob Storage
pip install "nievah-edge[gcp]"     # Cloud Functions, Pub/Sub, Secret Manager, Cloud Storage
pip install "nievah-edge[aws]"     # anywhere but Lambda, which ships boto3

The Terraform for each cloud, and what to give your runtime afterwards, is on your workspace's Runtime page in the Nievah console.

Proprietary. Use requires a Nievah licence from Magma Moose.