Update a webhook
Update webhook URL, events, active status, or rotate the signing secret. Asset-scoped tokens may update only an in-scope business_unit webhook. If you omit business_unit, the webhook keeps its current business_unit. If you change business_unit, use an in-scope value.
Authorizations
API token obtained from the Tokens endpoint or CLI device login. Include as Authorization: Bearer <token>. Requests made with a managed CLI session also include X-Strix-Workspace: <organization_id> to pin a process to the workspace it started in; recovery endpoints report the current workspace after a concurrent switch.
Path Parameters
UUID of the webhook. Use the id field of a webhook from listWebhooks.
Body
At least one of url, events, is_active, business_unit, or rotate_secret must be provided.
New HTTPS endpoint that receives the signed webhook deliveries.
Full replacement list of event names to subscribe to. Use * to receive every event.
scan.created, scan.completed, scan.failed, scan.cancelled, vulnerability.created, vulnerability.status_changed, vulnerability.severity_changed, * Set to a string to restrict deliveries to that business_unit (requires the Enterprise plan), or null to clear the scope (organization-wide).
Set to false to pause deliveries, or true to resume them.
If true, generate and return a new signing secret.