github pushes some headers like `X-Hub-Signature-256` can we use that to verify commits before building?
github pushes some headers like
X-Hub-Signature-256can we use that to verify commits before building?