Webhooks

Receive real-time events whenever an artifact is built, signed, promoted or deleted.

Events

• build.completed
• artifact.published
• artifact.promoted
• artifact.deleted

Payload

{
  "event": "artifact.published",
  "artifact": "web",
  "version": "2.4.1",
  "digest": "sha256:8f2d…b7e1",
  "actor": "alex@catalyst.dev",
  "timestamp": "2026-04-22T14:21:00Z"
}

Verifying signatures

Each delivery includes an X-Catalyst-Signature header (HMAC-SHA256). Always verify before trusting the payload.