Heroku lets you ping a URL after deploying an application:
https://devcenter.heroku.com/articles/deploy-hooks#http-post-hook
However, I see no mention of these requests being signed or otherwise authenticated.
Is there any way to authenticate these, beyond using an obscure url?
-Nick
You can and should use HTTP Basic Auth.