Integration webhook secret

Hi,

I’m evaluating using GitLab webhooks vs a GitLab integration for our companies GitLab integration.

The integration provides a HasWebHooks module that forwards specified webhooks to a hook url. What I’m not seeing is an obvious way to provide a secret that we can use to validate a request comes from GitLab at the integration webhook endpoint.

An option could be to create an api only field and provide a server generated secret that way, but please let me know if I’m overlooking something more obvious.