docs/data/reusables/webhooks/secret.md

Setting a webhook secret allows you to ensure that POST requests sent to the payload URL are from {% data variables.product.github %}. When you set a secret, you'll receive the X-Hub-Signature and X-Hub-Signature-256 headers in the webhook POST request. For more information on how to use a secret with a signature header to secure your webhook payloads, see AUTOTITLE.