[Phase 4.3] GitHub integration: status sync via webhooks

[Andreas-Froyland]

Goal

Automatically sync feedback status when linked GitHub issues change state.

Depends on: #16 (create issues), #17 (link issues), #21 (status management)

Webhook setup

• Org configures a webhook in their GitHub repo pointing to https://veerify.app/api/github/webhook
• Events to listen for: issues (opened, closed, reopened, edited)
• Webhook secret for payload validation (HMAC-SHA256)

Sync logic

GitHub Event	Veerify Action
Issue closed	Set feedback status → done
Issue reopened	Set feedback status → in_progress
Issue edited (title)	Update feedback title (optional, stretch)

Validation

• Verify webhook signature using the shared secret
• Look up the feedback item via github_issue_links (repo + issue number)
• If no link found, ignore the event silently
• Log all received webhook events for debugging

Notes

• Webhook endpoint must respond within 10s or GitHub will retry
• Process events async if needed (queue or background job)
• Show webhook status in project settings (last received, any errors)

Why this matters

• Keep Veerify and GitHub in sync automatically
• Users see up-to-date status without manual updates
• Reduces admin overhead