Allow subscribing to events via wss://webhook-forwarder.github.com to avoid firewall issues

[dhirschfeld]

What would you like added?

Allow subscribing to events via wss://webhook-forwarder.github.com

Why is this needed?

This will allows users to connect to a websockent endpoint to receive events which means that the firewall only needs to allow outbound connections and thus doesn't expose your infrastructure tothe internet, making it significantly more secure.

Additional context

As implemented in the GitHub CLI: https://github.com/cli/gh-webhook

[github-actions]

Hello! Thank you for filing an issue.

The maintainers will triage your issue shortly.

In the meantime, please take a look at the troubleshooting guide for bug reports.

If this is a feature request, please review our contribution guidelines.

[dhirschfeld]

See also https://github.com/orgs/community/discussions/38262#discussioncomment-6862260

[dhirschfeld]

@gr2m has implemented the api in JavaScript which might serve as a useful reference:

• https://github.com/gr2m/github-webhook-relay/
• Document webhook-forwarder.github.com api cli/gh-webhook#19 (comment)