{"action":"opened","issue":{"url":"https://api.github.com/repos/markomarkovic/simple-php-git-deploy/issues/67","repository_url":"https://api.github.com/repos/markomarkovic/simple-php-git-deploy","labels_url":"https://api.github.com/repos/markomarkovic/simple-php-git-deploy/issues/67/labels{/name}","comments_url":"https://api.github.com/repos/markomarkovic/simple-php-git-deploy/issues/67/comments","events_url":"https://api.github.com/repos/markomarkovic/simple-php-git-deploy/issues/67/events","html_url":"https://github.com/markomarkovic/simple-php-git-deploy/issues/67","id":132292031,"number":67,"title":"Sending secret insecure over HTTP","user":{"login":"melefabrizio","id":9076837,"avatar_url":"https://avatars.githubusercontent.com/u/9076837?v=3","gravatar_id":"","url":"https://api.github.com/users/melefabrizio","html_url":"https://github.com/melefabrizio","followers_url":"https://api.github.com/users/melefabrizio/followers","following_url":"https://api.github.com/users/melefabrizio/following{/other_user}","gists_url":"https://api.github.com/users/melefabrizio/gists{/gist_id}","starred_url":"https://api.github.com/users/melefabrizio/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/melefabrizio/subscriptions","organizations_url":"https://api.github.com/users/melefabrizio/orgs","repos_url":"https://api.github.com/users/melefabrizio/repos","events_url":"https://api.github.com/users/melefabrizio/events{/privacy}","received_events_url":"https://api.github.com/users/melefabrizio/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-02-08T23:54:19Z","updated_at":"2016-02-08T23:54:19Z","closed_at":null,"body":"With no SSL encryption sending the secret is highly insecure, any sniffer on http traffic will read the sat parameter in plain text. The script should instead use, for example, the github payload hash."}}