tree 733d581549e4b1b71300fe410376d9c0a4d9b4ab
parent ad2f6773a68e625ab9d389ef4edc632741c7a904
author Clint Byrum <clint@fewbar.com> 1501200720 -0700
committer Clint Byrum <clint@fewbar.com> 1501201612 -0700

Github - Require webhook_token

It's quite unsafe to run without webhook_token, and quite easy for us to
run our tests with a terribly predictable one. This will ensure that
nobody accidentally runs a Zuul vulnerable to MITM proxy attacks.

Per the link right under the doc we just changed, we also use
hmac.compare_digest to prevent timing analysis by malicious attackers
which would help them discover the secret.

Change-Id: Ie8aa83b81b8e4ef1bb755a664bf416a8663930fa