GitLab webhooks, without the lost events
Put HookStead in front of GitLab webhooks: secret token checked on arrival and never forwarded, events stored, retried and replayable.
Common problems, solved
- The token travels in a plain header, so every receiving service would see it.
- HookStead checks it and removes it before forwarding; your services verify HookStead's signature instead.
- A CI or bot service that's down misses pipeline and merge request events.
- Events wait in HookStead and are retried until your service is back.
Set up in five minutes
- 01In your project or group, open Settings → Webhooks → Add new webhook.
- 02Paste your HookStead source URL and set a secret token; enter the same token here.
- 03Choose the triggers you need, keep SSL verification on, and use Test to send an event.
| Source option | GitLab (secret token) |
|---|---|
| Signature header | X-Gitlab-Token |
| Scheme | Your secret token, compared in constant time |