Github Push CGI

#!/usr/bin/env python

from __future__ import print_function

from hashlib import sha1
from hmac import new
from os import environ, system
from sys import stdin

KEY_FILE = '/etc/github.key'
EXEC_CMD = 'sudo /usr/local/bin/github_push.sh'

print("Content-type: text")
print("")

payload = stdin.read()
key = open(KEY_FILE).read().strip()

digest = 'sha1=' + new(key, payload, sha1).hexdigest()

if digest == environ['HTTP_X_HUB_SIGNATURE']:
    system(EXEC_CMD)
    print("ok")
else:
    print('wrong password')