Skip to content
Directory/Categories/Webhooks/GitHub-Hookshot
GitHub logo

GitHub-Hookshot

GoodBotVerifiedBOT

GitHub-Hookshot delivers webhook event payloa Operated by GitHub.

GoodBot
Assessment
Webhooks
Category
BOT
Kind
1
Data sources
AI-generated summary, drawn from Cloudflare, operator docs, and community data

What is GitHub-Hookshot?

GitHub-Hookshot is the official delivery mechanism for GitHub Webhooks, designed to push real-time data to configured endpoints whenever repository events occur. It acts as a bridge, allowing developers to connect their code repositories to external tools, such as deployment servers, chat platforms, or custom monitoring systems. By sending HTTP POST requests containing JSON payloads, it ensures that external services remain synchronized with the state of a GitHub project.

Helpful — This bot is a core component of GitHub's infrastructure, enabling real-time integration between repositories and third-party services or custom automation workflows.

Identification

Bot name
GitHub-Hookshot
Operator
GitHub
Category
Webhooks
Kind
BOT
Verification
Verified bot
Cloudflare slug
github-hookshot
User-agent patterns
GitHub-Hookshot
User-agent string
GitHub-Hookshot/*
Main use cases
Triggering CI/CD pipelinesNotifying external services of repository eventsAutomating issue and pull request workflows
Rated Sep 23, 2026 from public evidence

How we rated this bot

Verified by Cloudflare, which confirms who runs it, with no widespread reports of abuse.

Names itself honestly
Yes
Verified by Cloudflare
Yes
Says it follows robots.txt and opt-outs
Not stated
Ignores site rules
None found
Disguises itself or evades blocks
None found
Overloads sites
None found
How widely people complain
No complaint about this bot in the evidence
Reddit discussion
There is no Reddit discussion of this bot in the evidence

What we read

Why it crawls your site

This bot does not 'crawl' in the traditional sense of indexing content for search; instead, it performs targeted outbound requests to specific URLs defined by repository administrators. It operates by listening for events like 'push', 'pull_request', or 'issue_opened' and immediately dispatching that information to the registered webhook URL. Operators can verify the authenticity of these requests by validating the HMAC signature provided in the 'X-Hub-Signature-256' header using their configured webhook secret.

Block or allow GitHub-Hookshot

Block it

Add a Disallow rule for GitHub-Hookshot in your robots.txt file. You can also block at the server level using your web server configuration or CDN firewall rules to filter requests matching the user-agent string.

# Block GitHub-Hookshot from crawling your entire site
User-agent: GitHub-Hookshot
Disallow: /

# Allow GitHub-Hookshot full access
User-agent: GitHub-Hookshot
Allow: /
Allow & verify

Ensure your robots.txt allows GitHub-Hookshot. Verify requests by checking the user-agent string.

Traffic & trends

Cloudflare Radar traffic

No Cloudflare traffic data available.

Google Trends interest

Loading trend data…

Data sources

This profile is compiled from the following sources.

CloudflareRadar
Last updated October 25, 2026

Something wrong with this entry? Suggest a correction