Project Description: Graft

Graft is a self-hosted Webhook Bridge solution, optimized for performance and security using the Go programming language. The system acts as an intermediary that receives Webhook signals from third-party platforms (such as GitHub, Stripe), performs authentication, customizes data, and reliably forwards it to the desired destinations.

Core Features

• System Security: Supports digital signature authentication (HMAC-SHA256, Stripe v1) to ensure the integrity of input data. All sensitive information (Secrets) is encrypted at rest using the AES-GCM 256-bit algorithm.

• Data Processing and Transformation: Integrates the text/template engine that allows users to define rules for flexibly changing the structure of JSON payloads before sending them to the destination.

• Resilience and Monitoring: Configurable Retry and Timeout mechanisms help the system operate stably in the face of network issues. The project provides a ready-made endpoint /metrics in Prometheus format for real-time performance monitoring.

• Storage Architecture: Uses SQLite as a database to maintain routing rules and transaction history, simplifying the deployment and operation processes.

Deployment Environment

Graft is packaged to run flexibly in various environments:

• Containerization: Fully supports Docker and Kubernetes through Docker Compose and Helm (optional).

• Native Go: Requires Go 1.26+ with CGO support to interact with SQLite.

• Administration: Provides an Admin API protected by an API Key to manage the lifecycle of rules automatically.