# Using Snyk webhooks with Zapier
{% hint style="info" %}
Snyk API v1 docs are at [https://snyk.docs.apiary.io/#](https://snyk.docs.apiary.io)
{% endhint %}
## Integration example
First of all, we need to create a new Zap in [Zapier](https://zapier.com)
### Trigger
In order to have an access to request headers, we need to create **"Catch Raw Hook"** trigger. It comes with a disadvantage that request payload will be provided as a string and we will need to parse it to the JSON.
It will provide us a Webhook url, were we can send requests:
.png)
Now we need to create a Webhook in Snyk via API with provided url.
```
POST /api/v1/org/{orgId}/webhooks HTTP/2
> Host: snyk.io
> Authorization: token {authToken}
> Content-Type: application/json
| {
| "url": "https://hooks.zapier.com/hooks/catch/9002958/oemlgkz/",
| "secret": "my-secret-string"
| }
```
The API will respond with a nearly created Webhook.
```
< HTTP/2 200
< Content-Type: application/json
| {
| "id": "{webhookId}",
| "url": "https://hooks.zapier.com/hooks/catch/9002958/oemlgkz/",
| }
```
Now we are able to ping a webhook, in order to test a Zapier's trigger.
```
> POST /api/v1/org/{orgId}/webhooks/{webhookId}/ping HTTP/2
> Host: snyk.io
> Authorization: token {authToken}
> Content-Type: application/json
```
Now we will be able to select a ping request from the list, and map fields.
.png)
### Action (validate a payload)
In order to validate a payload, we need to create a JS Action:
**"Code by Zapier" → "Run Javascript"**
.png)
We need to map `headers['X-Hub-Signature']` and payload string to the snippet variables.
.png)
Following snippet will introduce a `isValid: boolean` variable to the Zap's fields.
{% hint style="info" %}
Replace `my-secret-string` string with a webhook's secret string.
{% endhint %}
```javascript
const crypto = require('crypto');
const secret = "my-secret-string";
function makeSignature(body, secret) {
const hmac = crypto.createHmac('sha256', secret);
hmac.update(body, 'utf8');
return `sha256=${hmac.digest('hex')}`;
}
try {
const body = JSON.parse(inputData.body);
const { project, org, group, newIssues } = body;
output = {
isValid: inputData.signature === makeSignature(inputData.body, secret)
};
} catch (err) {
output = { isValid: false, err: err.message };
}
```
Test the snippet, make sure `isValid === true`.
.png)
### Action (parse a payload)
Let's create another action, to parse a payload from string to something Zapier can understand.
We need to create the same JS Action:
**"Code by Zapier" → "Run Javascript"**, with the following field mapping:
.png)
And the following JS snippet:
```
try {
output = JSON.parse(inputData.body);
} catch (err) {
output = { err: err.message };
}
```
That will parse a request payload and map it to Zap's variables.
### Action (format issues)
New issues are provided as a list of objects, unfortunately, Zapier doesn't understand that format well, rather it likes a list of strings. So We need to format `newIssues` to `string[]`.
Let's create one more JS Action:
**"Code by Zapier" → "Run Javascript"**, and paste the following snippet:
```
function formatIssue({ pkgName, pkgVersions, issueData }) {
return `
${issueData.title}
Vulnerability in ${pkgName} (${pkgVersions.join(', ')}). ${issueData.severity} severity.
`;
}
try {
const { newIssues, ...body } = JSON.parse(inputData.body);
output = { ...body, newIssues: newIssues.map(formatIssue) };
} catch (err) {
output = { newIssues: [], err: err.message };
}
```
### Action (filter)
Now with all fields provided, we can decide whatever we want to do anything with an event or not.
To filter, we need to create **"Filter by Zapier"** app:
.png)
Now you will be able to choose how you want it to be filtered.
.png)
### Action (send a notification)
With the actions above, we are able to access all necessary fields, and we can build a notification template. In my case, I choose to send an email. But it can be anything else.
.png)
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.snyk.io/~/changes/m2hJeDrttXy2N83AnRjM/snyk-api-info/snyk-webhooks/tutorial.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.