Webhook endpoint has no rate limiting

[Ayush-Patel-56]

Problem

/api/webhooks/github accepts POST requests with no rate limiting. Anyone who finds the endpoint can spam it and flood the Inngest queue.

Fix

Add rate limiting using the existing rateLimit() utility before processing the payload:

await rateLimit({ namespace: 'webhook', key: ip, limit: 100, windowSec: 60 });

File: src/app/api/webhooks/github/route.ts

Signature verification already exists - this is just an extra layer on top.

[shivampilania07]

Hi, I would like to work on this issue.

I will add rate limiting to the /api/webhooks/github endpoint using the existing rateLimit() utility as suggested, and ensure it is applied before processing the webhook payload while keeping the current signature verification intact.

Please assign this to me. Thank you!