/pr automerge/pr auto, then merge the pull request once it is green. Find out more')
expect(res.body).not.toContain('')
@@ -244,17 +227,13 @@ describe('GraphQL transformer', { timeout: 10000 }, () => {
const res = await getCached('/en/graphql/overview/breaking-changes')
expect(res.statusCode).toBe(200)
- // Check for main heading
expect(res.body).toContain('# Breaking changes')
- // Check for intro
expect(res.body).toContain('Learn about recent and upcoming breaking changes')
- // Check for manual content
expect(res.body).toContain('## About breaking changes')
expect(res.body).toContain('Breaking:** Changes that will break existing queries')
- // Check for date-based sections
expect(res.body).toContain('## Changes scheduled for 2025-04-01')
expect(res.body).toContain('## Changes scheduled for 2026-04-01')
})
@@ -263,7 +242,6 @@ describe('GraphQL transformer', { timeout: 10000 }, () => {
const res = await getCached('/en/graphql/overview/breaking-changes')
expect(res.statusCode).toBe(200)
- // Check for breaking criticality
expect(res.body).toMatch(/\*\*Breaking\*\*\s+A change will be made to `\w+\.\w+`\./)
expect(res.body).toMatch(/\*\*Description:\*\*.*will be removed/)
expect(res.body).toMatch(/\*\*Reason:\*\*/)
@@ -274,7 +252,6 @@ describe('GraphQL transformer', { timeout: 10000 }, () => {
expect(res.statusCode).toBe(200)
expect(res.body).toContain('scheduled for')
- // Check that HTML tags are removed from descriptions
expect(res.body).not.toContain('') expect(res.body).not.toContain('
') expect(res.body).not.toContain('')
@@ -291,7 +268,6 @@ describe('GraphQL transformer', { timeout: 10000 }, () => {
const res = await getCached('/en/graphql/reference/repos')
expect(res.statusCode).toBe(200)
- // Make sure the raw AUTOTITLE tag is not present
expect(res.body).not.toContain('[AUTOTITLE]')
})
@@ -308,7 +284,6 @@ describe('GraphQL transformer', { timeout: 10000 }, () => {
const res = await getCached('/en/graphql/overview/breaking-changes')
expect(res.statusCode).toBe(200)
- // Check that liquid variables in intro are rendered
expect(res.body).toMatch(/(GitHub|HubGit) GraphQL API/)
expect(res.body).not.toContain('{% data variables.product.prodname_dotcom %}')
})
diff --git a/src/article-api/tests/journey-landing-transformer.ts b/src/article-api/tests/journey-landing-transformer.ts
index 09e56d9af8fc..63a4110695ea 100644
--- a/src/article-api/tests/journey-landing-transformer.ts
+++ b/src/article-api/tests/journey-landing-transformer.ts
@@ -12,7 +12,6 @@ describe('journey landing transformer', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Check for journey tracks (now under Links section with track title as h3)
expect(res.body).toContain('## Links')
expect(res.body).toContain('### First Track')
expect(res.body).toContain('* [Hello World](/en/get-started/start-your-journey/hello-world)')
diff --git a/src/article-api/tests/pageinfo.ts b/src/article-api/tests/pageinfo.ts
index f17804619633..5739bc97c2f6 100644
--- a/src/article-api/tests/pageinfo.ts
+++ b/src/article-api/tests/pageinfo.ts
@@ -47,9 +47,7 @@ describe('pageinfo api', () => {
'Get started using HubGit to manage Git repositories and collaborate with others.',
)
expect(meta.documentType).toBe('category')
- // Canonical URLs should not have redirectedFrom
expect(meta.redirectedFrom).toBeUndefined()
- // Check that it can be cached at the CDN
expect(res.headers['set-cookie']).toBeUndefined()
expect(res.headers['cache-control']).toContain('public')
expect(res.headers['cache-control']).toMatch(/max-age=[1-9]/)
diff --git a/src/article-api/tests/pagelist.ts b/src/article-api/tests/pagelist.ts
index 0cdb55cfcd04..684d64cde4c8 100644
--- a/src/article-api/tests/pagelist.ts
+++ b/src/article-api/tests/pagelist.ts
@@ -23,7 +23,6 @@ describe.each(allVersionKeys)('pagelist api for %s', async (versionKey) => {
}
})
- // queries the pagelist API for each version
const res = await get(`/api/pagelist/en/${versionKey}`)
test('is reachable, returns 200 OK', async () => {
@@ -82,7 +81,6 @@ describe('Versions API', () => {
const data = JSON.parse(res.body)
- // Check top-level keys exist
expect(data).toHaveProperty('versions')
expect(data).toHaveProperty('ghesVersions')
expect(data).toHaveProperty('ghesLatest')
@@ -91,20 +89,16 @@ describe('Versions API', () => {
expect(data).toHaveProperty('ghesDeprecated')
expect(data).toHaveProperty('allVersions')
- // Versions array should contain expected values
expect(Array.isArray(data.versions)).toBe(true)
expect(data.versions).toContain('free-pro-team@latest')
expect(data.versions).toContain('enterprise-cloud@latest')
- // GHES versions should be an array of version strings
expect(Array.isArray(data.ghesVersions)).toBe(true)
expect(data.ghesVersions.length).toBeGreaterThan(0)
expect(data.ghesVersions[0]).toMatch(/^\d+\.\d+$/)
- // ghesLatest should be a valid version string
expect(data.ghesLatest).toMatch(/^\d+\.\d+$/)
- // allVersions should be an object with version details
expect(typeof data.allVersions).toBe('object')
expect(data.allVersions['free-pro-team@latest']).toHaveProperty('version')
expect(data.allVersions['free-pro-team@latest']).toHaveProperty('versionTitle')
@@ -119,17 +113,14 @@ describe('Languages API', () => {
const data = JSON.parse(res.body)
- // Check top-level keys exist
expect(data).toHaveProperty('languages')
expect(data).toHaveProperty('allLanguages')
- // Languages array should contain expected values
expect(Array.isArray(data.languages)).toBe(true)
expect(data.languages).toContain('en')
expect(data.languages).toContain('ja')
expect(data.languages).toContain('es')
- // allLanguages should be an object with language details
expect(typeof data.allLanguages).toBe('object')
expect(data.allLanguages.en).toHaveProperty('name')
expect(data.allLanguages.en).toHaveProperty('code')
@@ -137,7 +128,7 @@ describe('Languages API', () => {
expect(data.allLanguages.en).toHaveProperty('locale')
expect(data.allLanguages.en.name).toBe('English')
- // Should not contain redirectPatterns (not JSON serializable)
+ // redirectPatterns is not JSON serializable, so it must not be in the response.
expect(data.allLanguages.ja).not.toHaveProperty('redirectPatterns')
})
})
diff --git a/src/article-api/tests/resolve-path.ts b/src/article-api/tests/resolve-path.ts
index 6156b8c1e689..3fc654f84fd8 100644
--- a/src/article-api/tests/resolve-path.ts
+++ b/src/article-api/tests/resolve-path.ts
@@ -2,7 +2,6 @@ import { describe, expect, test } from 'vitest'
import { resolvePath } from '@/article-api/lib/resolve-path'
import type { Context, Page } from '@/types'
-// Helper to create a minimal mock page
function createMockPage(relativePath: string): Page {
return {
relativePath,
@@ -10,7 +9,6 @@ function createMockPage(relativePath: string): Page {
} as unknown as Page
}
-// Helper to create a minimal context with pages
function createContext(pages: Record): Context {
return { pages } as unknown as Context
}
diff --git a/src/article-api/tests/rest-transformer.ts b/src/article-api/tests/rest-transformer.ts
index cee19cf3a62c..4673e9a89e2a 100644
--- a/src/article-api/tests/rest-transformer.ts
+++ b/src/article-api/tests/rest-transformer.ts
@@ -24,13 +24,10 @@ describe('REST transformer', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Check for the main heading
expect(res.body).toContain('# GitHub Actions Artifacts')
- // Check for intro (using fixture's prodname_actions which is 'HubGit Actions')
expect(res.body).toContain('Use the REST API to interact with artifacts in HubGit Actions.')
- // Check for manual content section heading
expect(res.body).toContain('## About artifacts in HubGit Actions')
})
@@ -38,13 +35,10 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for operation heading
expect(res.body).toContain('## List artifacts for a repository')
- // Check for HTTP method and endpoint
expect(res.body).toContain('GET /repos/{owner}/{repo}/actions/artifacts')
- // Check for operation description
expect(res.body).toContain('Lists all artifacts for a repository.')
})
@@ -52,13 +46,10 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for parameters heading
expect(res.body).toContain('### Parameters')
- // Check for headers section
expect(res.body).toContain('#### Headers')
- // Check for accept header
expect(res.body).toContain('**`accept`** (string)')
expect(res.body).toContain('Setting to `application/vnd.github+json` is recommended.')
})
@@ -67,10 +58,8 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for path and query parameters section
expect(res.body).toContain('#### Path and query parameters')
- // Check for specific parameters
expect(res.body).toContain('**`owner`** (string) (required)')
expect(res.body).toContain('The account owner of the repository.')
@@ -90,10 +79,8 @@ describe('REST transformer', () => {
console.log(`[DEBUG] Test response: ${res.statusCode} in ${Date.now() - startTime}ms`)
expect(res.statusCode).toBe(200)
- // Check for status codes section
expect(res.body).toContain('### HTTP response status codes')
- // Check for specific status code
expect(res.body).toContain('**200**')
expect(res.body).toContain('OK')
})
@@ -102,14 +89,11 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for code examples section
expect(res.body).toContain('### Code examples')
- // Check for request/response labels
expect(res.body).toContain('**Request:**')
expect(res.body).toContain('**Response schema (Status: 200):**')
- // Check for curl code block
expect(res.body).toContain('```curl')
expect(res.body).toContain('curl -L \\')
expect(res.body).toContain('-X GET \\')
@@ -120,7 +104,6 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check that auth note is at the top using [!NOTE] syntax
expect(res.body).toContain('[!NOTE]')
expect(res.body).toContain('Authorization: Bearer ')
expect(res.body).toContain('application/vnd.github+json')
@@ -130,7 +113,6 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for API version in the auth note (any valid date format)
expect(res.body).toMatch(/X-GitHub-Api-Version: \d{4}-\d{2}-\d{2}/)
})
@@ -138,7 +120,6 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts', '2022-11-28'))
expect(res.statusCode).toBe(200)
- // Check for the specified API version in auth note
expect(res.body).toContain('X-GitHub-Api-Version: 2022-11-28')
})
@@ -150,7 +131,6 @@ describe('REST transformer', () => {
expect(res.body).toContain('HubGit Actions')
expect(res.body).not.toContain('{% data variables.product.prodname_actions %}')
- // Check in both the intro and the manual content section
expect(res.body).toMatch(/Use the REST API to interact with artifacts in HubGit Actions/)
expect(res.body).toMatch(/About artifacts in HubGit Actions/)
})
@@ -159,15 +139,12 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check that AUTOTITLE has been resolved to actual link text
// The link should have the actual page title, not "AUTOTITLE"
expect(res.body).toContain('[Storing workflow data as artifacts]')
expect(res.body).toContain('(/en/actions/using-workflows/storing-workflow-data-as-artifacts)')
- // Make sure the raw AUTOTITLE tag is not present
expect(res.body).not.toContain('[AUTOTITLE]')
- // Verify the link appears in the manual content section
expect(res.body).toMatch(
/About artifacts in HubGit Actions[\s\S]*Storing workflow data as artifacts/,
)
@@ -177,7 +154,6 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check that markdown links are preserved
expect(res.body).toMatch(/\[.*?\]\(\/en\/.*?\)/)
})
@@ -185,14 +161,12 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for markdown-formatted schema
expect(res.body).toContain('**Response schema (Status: 200):**')
// Schema should be rendered as a markdown bullet list, not JSON
expect(res.body).toContain('* `total_count`:')
expect(res.body).toContain('* `artifacts`:')
- // Should not contain raw JSON Schema keywords
expect(res.body).not.toContain('"properties":')
})
@@ -240,7 +214,6 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Should include the default API version in auth note (any valid date format)
expect(res.body).toMatch(/X-GitHub-Api-Version: \d{4}-\d{2}-\d{2}/)
})
@@ -248,7 +221,6 @@ describe('REST transformer', () => {
const res = await get(makeURL('/en/rest/actions/artifacts'))
expect(res.statusCode).toBe(200)
- // Check for multiple operation headings
expect(res.body).toContain('## List artifacts for a repository')
expect(res.body).toContain('## Get an artifact')
expect(res.body).toContain('## Delete an artifact')
@@ -281,7 +253,7 @@ describe('REST transformer', () => {
// because it looks for 'rest' in the path and gets the category/subcategory after it
// e.g. /ja/rest/actions/artifacts should work the same as /en/rest/actions/artifacts
- // Verify the operation content is present (in English, since REST data is not translated)
+ // REST data is not translated, so the operation content is English either way.
expect(res.body).toContain('## List artifacts for a repository')
expect(res.body).toContain('GET /repos/{owner}/{repo}/actions/artifacts')
@@ -294,7 +266,6 @@ describe('REST transformer', () => {
// One of them must be present
expect(hasJapaneseTitle || hasEnglishTitle).toBe(true)
- // Verify the appropriate content based on which language was served
if (hasJapaneseTitle) {
// If Japanese is loaded, expect Japanese intro text
expect(res.body).toContain('アーティファクト')
diff --git a/src/article-api/tests/secret-scanning-transformer.ts b/src/article-api/tests/secret-scanning-transformer.ts
index be236faf377a..c5daac87568e 100644
--- a/src/article-api/tests/secret-scanning-transformer.ts
+++ b/src/article-api/tests/secret-scanning-transformer.ts
@@ -13,20 +13,16 @@ describe('secret scanning article body api', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Check for expected content
expect(res.body).toContain('# Supported secret scanning patterns')
expect(res.body).toContain('## Supported secrets')
- // Verify HTML comments are stripped
expect(res.body).not.toMatch(//)
- // Verify HTML icon spans are not present (would be replaced with ✓/✗)
+ // The icon spans are replaced with plain ✓/✗ characters.
expect(res.body).not.toMatch(/]*aria-label="Supported"/)
expect(res.body).not.toMatch(/]*aria-label="Unsupported"/)
- // Verify no raw HTML span tags remain
expect(res.body).not.toMatch(/]*>/)
- // Verify table content is present with providers
expect(res.body).toMatch(/|\s*Provider\s*|/)
expect(res.body).toMatch(/\| (Adafruit|AWS|Alibaba|Amazon)/)
diff --git a/src/article-api/tests/toc-transformer.ts b/src/article-api/tests/toc-transformer.ts
index 4bef199a0879..6edd660fadd0 100644
--- a/src/article-api/tests/toc-transformer.ts
+++ b/src/article-api/tests/toc-transformer.ts
@@ -12,12 +12,11 @@ describe('toc transformer', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Check for title and intro
expect(res.body).toContain('# Category page of GitHub Actions')
expect(res.body).toContain('Learn how to migrate your existing CI/CD workflows')
- // Should have Links section with children (uses full title, not shortTitle)
expect(res.body).toContain('## Links')
+ // Child links use the full title, not shortTitle.
expect(res.body).toContain('[Subcategory page about Actions](/en/actions/category/subcategory)')
})
@@ -27,10 +26,8 @@ describe('toc transformer', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Check for title
expect(res.body).toContain('# Subcategory page about Actions')
- // Should have Links section with children
expect(res.body).toContain('## Links')
})
@@ -46,10 +43,8 @@ describe('toc transformer', () => {
const res = await get(makeURL('/en/actions/category/subcategory'))
expect(res.statusCode).toBe(200)
- // Should NOT have href paths as titles
expect(res.body).not.toContain('* [/en/actions/category/subcategory/')
- // Should have proper article titles (or shortTitle)
expect(res.body).toMatch(/\[.*\]\(\/en\/actions\/category\/subcategory\/.*\)/)
})
})
diff --git a/src/article-api/tests/webhooks-transformer.ts b/src/article-api/tests/webhooks-transformer.ts
index 8c611b285177..32f6db087ac0 100644
--- a/src/article-api/tests/webhooks-transformer.ts
+++ b/src/article-api/tests/webhooks-transformer.ts
@@ -22,10 +22,8 @@ describe('Webhooks transformer', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Should have title
expect(res.body).toContain('# Webhook events and payloads')
- // Should have intro
expect(res.body).toContain('Learn about when each webhook event occurs')
})
@@ -33,7 +31,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Check for webhook event headers (## webhook_name)
expect(res.body).toMatch(/^## \w+/m)
})
@@ -41,7 +38,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Should list action types for webhooks with multiple actions
expect(res.body).toContain('**Action type:**')
})
@@ -49,7 +45,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Should show availability as a heading
expect(res.body).toContain('### Availability')
})
@@ -57,7 +52,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Check for some known manual content from the markdown file
expect(res.body).toContain('About webhook events and payloads')
})
@@ -73,7 +67,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Check that data variables are rendered (not left as Liquid syntax)
expect(res.body).not.toContain('{% data')
expect(res.body).not.toContain('{{')
})
@@ -90,10 +83,8 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Should show payload object parameters section
expect(res.body).toContain('### Webhook payload object')
expect(res.body).toContain('#### Webhook payload object parameters')
- // Should have a markdown table with parameter columns (may have extra spacing from formatting)
expect(res.body).toMatch(/\|\s*Name\s*\|\s*Type\s*\|\s*Description\s*\|/)
})
@@ -101,7 +92,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Should include webhook descriptions (converted from HTML to plain text)
// Using actual descriptions from real webhook data
expect(res.body).toContain('A check run was completed')
})
@@ -110,11 +100,9 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Should show parameter names and types in tables
expect(res.body).toContain('`action`')
expect(res.body).toContain('`string`')
expect(res.body).toContain('`object`')
- // Should mark required parameters
expect(res.body).toContain('**Required.**')
})
@@ -132,7 +120,6 @@ describe('Webhooks transformer', () => {
const res = await get(makeURL('/en/webhooks/webhook-events-and-payloads'))
expect(res.statusCode).toBe(200)
- // Should have a common parameters section at the top
expect(res.body).toContain('## Common payload parameters')
expect(res.body).toContain('Most webhook events include these standard parameters')
diff --git a/src/article-api/transformers/article-transformer.ts b/src/article-api/transformers/article-transformer.ts
index bbe81684dee8..94a61e52eab4 100644
--- a/src/article-api/transformers/article-transformer.ts
+++ b/src/article-api/transformers/article-transformer.ts
@@ -2,14 +2,11 @@ import type { Context, Page } from '@/types'
import type { PageTransformer } from './types'
/**
- * Transformer for regular articles.
- *
- * This is a catch-all transformer registered last in the registry.
- * It renders the page body as markdown and prepends the title and intro.
+ * Catch-all transformer, registered last. Renders the page body as markdown
+ * and prepends the title and intro.
*/
export class ArticleTransformer implements PageTransformer {
canTransform(page: Page): boolean {
- // Catch-all: handles any page not matched by a more specific transformer.
return page != null
}
diff --git a/src/article-api/transformers/audit-logs-transformer.ts b/src/article-api/transformers/audit-logs-transformer.ts
index ad20d022db3d..fd3ff4c6aa7d 100644
--- a/src/article-api/transformers/audit-logs-transformer.ts
+++ b/src/article-api/transformers/audit-logs-transformer.ts
@@ -7,8 +7,7 @@ import { loadTemplate } from '@/article-api/lib/load-template'
import matter from '@gr2m/gray-matter'
/**
- * Transformer for Audit Logs pages
- * Converts audit log events and their data into markdown format using a Liquid template
+ * Converts audit log events and their data into markdown using a Liquid template.
*/
export class AuditLogsTransformer implements PageTransformer {
templateName = 'audit-logs-page.template.md'
@@ -22,7 +21,6 @@ export class AuditLogsTransformer implements PageTransformer {
const { getCategorizedAuditLogEvents, getCategoryNotes, resolveReferenceLinksToMarkdown } =
await import('@/audit-logs/lib/index')
- // Extract version from context
const currentVersion = context.currentVersion!
let pageType = ''
@@ -36,11 +34,9 @@ export class AuditLogsTransformer implements PageTransformer {
throw new Error(`Unknown audit log page type for path: ${pathname}`)
}
- // Get the audit log events data
const categorizedEvents = getCategorizedAuditLogEvents(pageType, currentVersion)
const categoryNotes = getCategoryNotes()
- // Prepare manual content
let manualContent = ''
if (page.markdown) {
const markerIndex = page.markdown.indexOf(
@@ -63,7 +59,6 @@ export class AuditLogsTransformer implements PageTransformer {
}
}
- // Prepare data for template
const templateData = await this.prepareTemplateData(
page,
categorizedEvents,
@@ -73,10 +68,8 @@ export class AuditLogsTransformer implements PageTransformer {
resolveReferenceLinksToMarkdown,
)
- // Load and render template
const templateContent = loadTemplate(this.templateName)
- // Render the template with Liquid
const rendered = await renderContent(templateContent, {
...context,
...templateData,
@@ -86,9 +79,6 @@ export class AuditLogsTransformer implements PageTransformer {
return rendered
}
- /**
- * Prepare data for the Liquid template
- */
private async prepareTemplateData(
page: Page,
categorizedEvents: CategorizedEvents,
@@ -100,7 +90,6 @@ export class AuditLogsTransformer implements PageTransformer {
context: TitleResolutionContext,
) => Promise,
): Promise> {
- // Prepare page intro
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
// Sort categories and events, and compute fields shared by most (≥80%) events
diff --git a/src/article-api/transformers/bespoke-landing-transformer.ts b/src/article-api/transformers/bespoke-landing-transformer.ts
index 8f3916f390e3..490b2cc1094d 100644
--- a/src/article-api/transformers/bespoke-landing-transformer.ts
+++ b/src/article-api/transformers/bespoke-landing-transformer.ts
@@ -13,10 +13,9 @@ interface BespokeLandingPage extends Omit {
}
/**
- * Transforms bespoke-landing pages into markdown format.
- * Handles carousels and full article listings.
- * Note: Unlike discovery-landing, bespoke-landing shows ALL articles
- * regardless of includedCategories.
+ * Transforms bespoke-landing pages into markdown.
+ * Unlike discovery-landing, this shows every article regardless of
+ * includedCategories, which only filters discovery-landing pages.
*/
export class BespokeLandingTransformer implements PageTransformer {
templateName = 'landing-page.template.md'
@@ -80,7 +79,6 @@ export class BespokeLandingTransformer implements PageTransformer {
const validLinks = links.filter((l) => l.href && l.title)
if (validLinks.length > 0) {
- // Use carousel key as title (capitalize first letter)
const sectionTitle = carouselKey.charAt(0).toUpperCase() + carouselKey.slice(1)
sections.push({
title: sectionTitle,
@@ -90,14 +88,12 @@ export class BespokeLandingTransformer implements PageTransformer {
}
}
- // Articles section: recursively gather ALL descendant articles
- // This matches the behavior of the site which uses genericTocFlat/genericTocNested
- // Note: For bespoke-landing pages, the site shows ALL articles regardless of includedCategories
- // (includedCategories only filters for discovery-landing pages)
+ // Recursively gather every descendant article, matching the site's
+ // genericTocFlat/genericTocNested behaviour.
if (bespokePage.children && bespokePage.children.length > 0) {
const tocItems = await getAllTocItems(page, context)
- // Flatten to get all leaf articles (excludeParents: true means only get articles, not category pages)
+ // excludeParents keeps only leaf TOC items, dropping anything with children.
const allArticles = flattenTocItems(tocItems, { excludeParents: true })
if (allArticles.length > 0) {
diff --git a/src/article-api/transformers/category-landing-transformer.ts b/src/article-api/transformers/category-landing-transformer.ts
index 3678372fb36c..f75cdf08579f 100644
--- a/src/article-api/transformers/category-landing-transformer.ts
+++ b/src/article-api/transformers/category-landing-transformer.ts
@@ -32,11 +32,8 @@ export class CategoryLandingTransformer implements PageTransformer {
})
}
- /**
- * Recursively collects all descendant articles from the given parent hrefs.
- * Traverses the page tree, adding non-index pages and recursing into children.
- * Uses a visited set to prevent infinite loops from circular references.
- */
+ // Walks the page tree from the given parent hrefs, collecting every non-index
+ // descendant. The visited set guards against circular references.
private async getAllDescendantArticles(
parentHrefs: string[],
languageCode: string,
@@ -47,7 +44,6 @@ export class CategoryLandingTransformer implements PageTransformer {
const allArticles: LinkData[] = []
for (const href of parentHrefs) {
- // Prevent infinite loops from circular references
if (visited.has(href)) continue
visited.add(href)
@@ -56,7 +52,6 @@ export class CategoryLandingTransformer implements PageTransformer {
| undefined
if (!parentPage) continue
- // Add this page if it's an article (not an index)
if (!parentPage.relativePath.endsWith('index.md')) {
const linkData = await getLinkData(href, languageCode, pathname, context, resolvePath)
if (linkData.href) {
@@ -64,7 +59,6 @@ export class CategoryLandingTransformer implements PageTransformer {
}
}
- // Recursively get children
const children = parentPage.children
if (children && Array.isArray(children) && children.length > 0) {
// Get the parent's permalink to use as the base path for resolving children
@@ -96,7 +90,6 @@ export class CategoryLandingTransformer implements PageTransformer {
const languageCode = page.languageCode || 'en'
const sections: Section[] = []
- // Spotlight section
const spotlight = categoryPage.spotlight
if (spotlight && spotlight.length > 0) {
const links = await Promise.all(
@@ -126,7 +119,6 @@ export class CategoryLandingTransformer implements PageTransformer {
}
}
- // Children - get all descendant articles recursively
if (categoryPage.children) {
const allArticles = await this.getAllDescendantArticles(
categoryPage.children,
diff --git a/src/article-api/transformers/codeql-cli-transformer.ts b/src/article-api/transformers/codeql-cli-transformer.ts
index f32c8fbc903e..2aa07e4a187b 100644
--- a/src/article-api/transformers/codeql-cli-transformer.ts
+++ b/src/article-api/transformers/codeql-cli-transformer.ts
@@ -5,10 +5,7 @@ import { loadTemplate } from '@/article-api/lib/load-template'
import { stripHtmlCommentsAndNormalizeWhitespace } from '@/article-api/lib/strip-html-comments'
/**
- * Transformer for CodeQL CLI reference pages.
- * Renders autogenerated CodeQL CLI documentation pages as markdown using a Liquid template.
- * Sets `markdownRequested` to true in the context to ensure the page is rendered as markdown,
- * bypassing the default article type check.
+ * Renders autogenerated CodeQL CLI reference pages as markdown using a Liquid template.
*/
export class CodeQLCliTransformer implements PageTransformer {
templateName = 'codeql-cli-page.template.md'
@@ -25,7 +22,6 @@ export class CodeQLCliTransformer implements PageTransformer {
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
- // Prepare template data
const templateData: Record = {
page: {
title: page.title,
@@ -34,7 +30,6 @@ export class CodeQLCliTransformer implements PageTransformer {
content,
}
- // Load and render template
const templateContent = loadTemplate(this.templateName)
const result = await renderContent(templateContent, {
@@ -43,7 +38,7 @@ export class CodeQLCliTransformer implements PageTransformer {
markdownRequested: true,
})
- // Strip HTML comments (e.g., markdownlint-disable comments) from the output
+ // Strip markdownlint-disable and any other HTML comments.
return stripHtmlCommentsAndNormalizeWhitespace(result)
}
}
diff --git a/src/article-api/transformers/discovery-landing-transformer.ts b/src/article-api/transformers/discovery-landing-transformer.ts
index 6cf5a3d9e0fd..bcf16217b4ac 100644
--- a/src/article-api/transformers/discovery-landing-transformer.ts
+++ b/src/article-api/transformers/discovery-landing-transformer.ts
@@ -80,7 +80,6 @@ export class DiscoveryLandingTransformer implements PageTransformer {
const validLinks = links.filter((l) => l.href && l.title)
if (validLinks.length > 0) {
- // Use carousel key as title (capitalize first letter)
const sectionTitle = carouselKey.charAt(0).toUpperCase() + carouselKey.slice(1)
sections.push({
title: sectionTitle,
@@ -90,7 +89,6 @@ export class DiscoveryLandingTransformer implements PageTransformer {
}
}
- // Intro links (getting started)
const rawIntroLinks = discoveryPage.introLinks ?? discoveryPage.rawIntroLinks
if (rawIntroLinks) {
const { default: getPageLinkData } = await import('@/frame/lib/get-link-data')
@@ -134,10 +132,9 @@ export class DiscoveryLandingTransformer implements PageTransformer {
if (discoveryPage.children && discoveryPage.children.length > 0) {
const tocItems = await getAllTocItems(page, context)
- // Flatten to get all leaf articles (excludeParents: true means only get articles, not category pages)
+ // excludeParents keeps only leaf TOC items, dropping anything with children.
let allArticles = flattenTocItems(tocItems, { excludeParents: true })
- // Apply includedCategories filter if specified
if (discoveryPage.includedCategories && discoveryPage.includedCategories.length > 0) {
const includedCategories = discoveryPage.includedCategories.map((c) => c.toLowerCase())
diff --git a/src/article-api/transformers/github-apps-transformer.ts b/src/article-api/transformers/github-apps-transformer.ts
index 72cecd46999b..bcc49cb9eae7 100644
--- a/src/article-api/transformers/github-apps-transformer.ts
+++ b/src/article-api/transformers/github-apps-transformer.ts
@@ -6,7 +6,6 @@ import matter from '@gr2m/gray-matter'
const DEBUG = process.env.RUNNER_DEBUG === '1' || process.env.DEBUG === '1'
-// GitHub Apps data types
interface GitHubAppsOperation {
slug: string
subcategory?: string
@@ -105,17 +104,14 @@ export class GithubAppsTransformer implements PageTransformer {
// Import getAppsData dynamically to avoid circular dependencies
const { getAppsData } = await import('@/github-apps/lib/index')
- // Extract version from context
const currentVersion = context.currentVersion!
- // Use the provided apiVersion, or fall back to the latest from context
const effectiveApiVersion =
apiVersion ||
(context.currentVersionObj?.apiVersions?.length
? context.currentVersionObj.latestApiVersion
: undefined)
- // Determine page type from the page's relative path
const filename = page.relativePath.split('/').pop()
const pageType = filename ? PAGE_TYPE_MAP[filename] : undefined
@@ -123,12 +119,10 @@ export class GithubAppsTransformer implements PageTransformer {
throw new Error(`Unknown GitHub Apps page type for path: ${page.relativePath}`)
}
- // Get the GitHub Apps data
const appsData = (await getAppsData(pageType, currentVersion, effectiveApiVersion)) as
| GitHubAppsListData
| GitHubAppsPermissionsData
- // Prepare manual content
let manualContent = ''
if (page.markdown) {
const { content } = matter(page.markdown)
@@ -139,7 +133,6 @@ export class GithubAppsTransformer implements PageTransformer {
markdownRequested: true,
})
- // Strip HTML comments and normalize whitespace
manualContent = manualContent
.replace(//gs, '')
.replace(/\n{3,}/g, '\n\n')
@@ -147,7 +140,6 @@ export class GithubAppsTransformer implements PageTransformer {
}
}
- // Prepare data for template based on page type
const isListPage = LIST_PAGE_TYPES.has(pageType)
const isPermissionsPage = PERMISSIONS_PAGE_TYPES.has(pageType)
@@ -160,13 +152,11 @@ export class GithubAppsTransformer implements PageTransformer {
isPermissionsPage,
)
- // Load template
const templateContent = loadTemplate(this.templateName)
// For permissions pages, we need to construct the tables manually to avoid Liquid escaping
let finalContent: string
if (isPermissionsPage) {
- // Build the intro manually
let introMarkdown = `# ${templateData.page.title}\n\n`
if (templateData.page.intro) {
introMarkdown += `${templateData.page.intro}\n\n`
@@ -180,7 +170,6 @@ export class GithubAppsTransformer implements PageTransformer {
introMarkdown += `**Token types:** UAT = user access token, IAT = installation access token\n\n`
}
- // Build the tables manually
let tablesMarkdown = ''
for (const item of templateData.items as PreparedPermissionItem[]) {
tablesMarkdown += `## ${item.displayTitle}\n\n`
@@ -229,9 +218,6 @@ export class GithubAppsTransformer implements PageTransformer {
return finalContent
}
- /**
- * Prepare data for the Liquid template
- */
private async prepareTemplateData(
page: Page,
appsData: GitHubAppsListData | GitHubAppsPermissionsData,
@@ -246,13 +232,10 @@ export class GithubAppsTransformer implements PageTransformer {
isPermissionsPage: boolean
items: PreparedListItem[] | PreparedPermissionItem[]
}> {
- // Prepare page intro
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
- // Get categories without subcategories from rest lib
const { categoriesWithoutSubcategories } = await import('@/rest/lib/index')
- // Prepare items based on page type
let preparedItems: PreparedListItem[] | PreparedPermissionItem[] = []
if (isListPage) {
@@ -270,7 +253,6 @@ export class GithubAppsTransformer implements PageTransformer {
preparedItems = Object.entries(appsData as GitHubAppsPermissionsData).map(
([permissionName, permissionObject]) => {
const { displayTitle, permissions } = permissionObject
- // Sort by access level (admin, write, read)
const adminPermissions = permissions.filter((p) => p.access === 'admin')
const writePermissions = permissions.filter((p) => p.access === 'write')
const readPermissions = permissions.filter((p) => p.access === 'read')
@@ -299,9 +281,6 @@ export class GithubAppsTransformer implements PageTransformer {
}
}
- /**
- * Prepare a single operation for list-based rendering (endpoints)
- */
private prepareOperation(
operation: GitHubAppsOperation,
category: string,
@@ -321,9 +300,6 @@ export class GithubAppsTransformer implements PageTransformer {
}
}
- /**
- * Prepare a single operation for permissions-based rendering (tables)
- */
private preparePermissionOperation(
operation: GitHubAppsPermissionOperation,
categoriesWithoutSubcategories: string[],
diff --git a/src/article-api/transformers/graphql-breaking-changes-transformer.ts b/src/article-api/transformers/graphql-breaking-changes-transformer.ts
index e0268c7351c5..6a1d6fb62ea6 100644
--- a/src/article-api/transformers/graphql-breaking-changes-transformer.ts
+++ b/src/article-api/transformers/graphql-breaking-changes-transformer.ts
@@ -8,8 +8,7 @@ import { extractManualContent } from '@/article-api/lib/graphql-helpers'
import GithubSlugger from 'github-slugger'
/**
- * Transformer for GraphQL breaking changes page
- * Renders breaking changes organized by date
+ * Renders the GraphQL breaking changes page, organized by date.
*/
export class GraphQLBreakingChangesTransformer implements PageTransformer {
templateName = 'graphql-breaking-changes.template.md'
@@ -32,7 +31,6 @@ export class GraphQLBreakingChangesTransformer implements PageTransformer {
const slugger = new GithubSlugger()
- // Process breaking changes by date
const breakingChangesByDate = Object.keys(schema).map((date) => {
const items = schema[date]
const heading = `Changes scheduled for ${date}`
diff --git a/src/article-api/transformers/graphql-changelog-transformer.ts b/src/article-api/transformers/graphql-changelog-transformer.ts
index 53d764cbdb09..513d66f6d73f 100644
--- a/src/article-api/transformers/graphql-changelog-transformer.ts
+++ b/src/article-api/transformers/graphql-changelog-transformer.ts
@@ -7,8 +7,7 @@ import { fastTextOnly } from '@/content-render/unified/text-only'
import { extractManualContent } from '@/article-api/lib/graphql-helpers'
/**
- * Transformer for GraphQL changelog page
- * Renders the changelog with schema changes, preview changes, and upcoming changes
+ * Renders the GraphQL changelog: schema changes, preview changes, and upcoming changes.
*/
export class GraphQLChangelogTransformer implements PageTransformer {
templateName = 'graphql-changelog.template.md'
@@ -25,7 +24,6 @@ export class GraphQLChangelogTransformer implements PageTransformer {
const { getGraphqlChangelogByYear, getGraphqlChangelogYears } =
await import('@/graphql/lib/index')
- // Determine if this is a year-specific page
const yearMatch = page.relativePath.match(/changelog\/(\d{4})\.md$/)
const year = yearMatch ? Number(yearMatch[1]) : null
const years = getGraphqlChangelogYears(currentVersion)
@@ -42,13 +40,11 @@ export class GraphQLChangelogTransformer implements PageTransformer {
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
const manualContent = await extractManualContent(page, context)
- // Process changelog items
const changelogItems = schema.map((item) => {
const processChanges = (changes: Array<{ title: string; changes: string[] }>) =>
changes.map((change) => ({
title: change.title,
changes: change.changes.map((html: string) => {
- // Remove wrapping tags if present
if (html.startsWith('
') && html.endsWith('
')) {
return fastTextOnly(html.slice(3, -4))
}
@@ -64,7 +60,6 @@ export class GraphQLChangelogTransformer implements PageTransformer {
}
})
- // Build year navigation links
const displayYear = year || years[0]
const yearNavItems = years.map((y) => ({
year: y,
diff --git a/src/article-api/transformers/graphql-index-transformer.ts b/src/article-api/transformers/graphql-index-transformer.ts
index b46b41cf9100..dd400a8173c7 100644
--- a/src/article-api/transformers/graphql-index-transformer.ts
+++ b/src/article-api/transformers/graphql-index-transformer.ts
@@ -5,8 +5,7 @@ import { loadTemplate } from '@/article-api/lib/load-template'
import { extractManualContent } from '@/article-api/lib/graphql-helpers'
/**
- * Transformer for GraphQL reference index page
- * Renders the index page with links to child pages
+ * Renders the GraphQL reference index page with links to its child pages.
*/
export class GraphQLIndexTransformer implements PageTransformer {
templateName = 'graphql-index.template.md'
@@ -14,7 +13,6 @@ export class GraphQLIndexTransformer implements PageTransformer {
canTransform(page: Page): boolean {
if (page.autogenerated !== 'graphql') return false
- // Match the reference index page (no specific page type after /reference)
return page.relativePath.endsWith('graphql/reference/index.md')
}
@@ -23,7 +21,6 @@ export class GraphQLIndexTransformer implements PageTransformer {
const manualContent = await extractManualContent(page, context)
- // Get children links from page metadata
const children = page.children || []
const childrenLinks = children
.map((child) => {
diff --git a/src/article-api/transformers/graphql-reference-transformer.ts b/src/article-api/transformers/graphql-reference-transformer.ts
index bde951e507a0..73989be04107 100644
--- a/src/article-api/transformers/graphql-reference-transformer.ts
+++ b/src/article-api/transformers/graphql-reference-transformer.ts
@@ -17,8 +17,7 @@ import { fastTextOnly } from '@/content-render/unified/text-only'
import { extractManualContent } from '@/article-api/lib/graphql-helpers'
/**
- * Transformer for GraphQL reference pages (queries, mutations, objects, etc.)
- * Renders schema items with their fields and arguments
+ * Renders GraphQL reference pages: schema items with their fields and arguments.
*/
export class GraphQLReferenceTransformer implements PageTransformer {
templateName = 'graphql-reference.template.md'
@@ -26,7 +25,6 @@ export class GraphQLReferenceTransformer implements PageTransformer {
canTransform(page: Page): boolean {
if (page.autogenerated !== 'graphql') return false
- // Match reference pages that have a specific page type (not index)
const isReference = page.relativePath.includes('graphql/reference/')
const isNotIndex = !page.relativePath.endsWith('index.md')
@@ -36,7 +34,6 @@ export class GraphQLReferenceTransformer implements PageTransformer {
async transform(page: Page, pathname: string, context: Context): Promise {
const currentVersion = context.currentVersion!
- // Determine the page slug from the pathname
const pathParts = pathname.split('/').filter(Boolean)
const graphqlIndex = pathParts.indexOf('graphql')
const pageType = pathParts[graphqlIndex + 2] // category slug like 'repos', 'issues', etc.
@@ -300,10 +297,7 @@ export class GraphQLReferenceTransformer implements PageTransformer {
private static STANDARD_PAGINATION_ARGS = new Set(['after', 'before', 'first', 'last'])
- /**
- * Check if a field has only the standard pagination arguments
- * (after, before, first, last) with no additional args.
- */
+ // True when the field's only arguments are after, before, first and last.
private hasOnlyStandardPaginationArgs(field: FieldT): boolean {
if (!field.arguments || field.arguments.length !== 4) return false
return field.arguments.every((arg) =>
diff --git a/src/article-api/transformers/index.ts b/src/article-api/transformers/index.ts
index d5efd9407235..a6fc2d634860 100644
--- a/src/article-api/transformers/index.ts
+++ b/src/article-api/transformers/index.ts
@@ -18,10 +18,7 @@ import { SearchPageTransformer } from './search-page-transformer'
import { ReleaseNotesTransformer } from './release-notes-transformer'
import { ArticleTransformer } from './article-transformer'
-/**
- * Global transformer registry
- * Registers all available page-to-markdown transformers
- */
+// Every page-to-markdown transformer is registered here.
export const transformerRegistry = new TransformerRegistry()
transformerRegistry.register(new RestTransformer())
@@ -41,7 +38,7 @@ transformerRegistry.register(new CategoryLandingTransformer())
transformerRegistry.register(new DiscoveryLandingTransformer())
transformerRegistry.register(new SearchPageTransformer())
transformerRegistry.register(new ReleaseNotesTransformer())
-// ArticleTransformer is the catch-all — must be registered last.
+// ArticleTransformer is the catch-all, so it must be registered last.
transformerRegistry.register(new ArticleTransformer())
export { TransformerRegistry } from './types'
diff --git a/src/article-api/transformers/journey-landing-transformer.ts b/src/article-api/transformers/journey-landing-transformer.ts
index 959b28deaf6a..e966d2b58a7f 100644
--- a/src/article-api/transformers/journey-landing-transformer.ts
+++ b/src/article-api/transformers/journey-landing-transformer.ts
@@ -23,9 +23,9 @@ interface JourneyPage extends Page {
}
/**
- * Transforms journey-landing pages into markdown format.
- * Handles journey tracks (grouped learning paths) with guides,
- * falling back to children listings when tracks aren't available.
+ * Transforms journey-landing pages into markdown. Renders journey tracks
+ * (grouped learning paths), falling back to a children listing when no track
+ * produces a renderable link.
*/
export class JourneyLandingTransformer implements PageTransformer {
templateName = 'landing-page.template.md'
@@ -54,7 +54,6 @@ export class JourneyLandingTransformer implements PageTransformer {
const languageCode = page.languageCode || 'en'
const sections: Section[] = []
- // Journey tracks
const journeyTracks = journeyPage.journeyTracks
if (journeyTracks) {
const groups: LinkGroup[] = []
@@ -87,7 +86,6 @@ export class JourneyLandingTransformer implements PageTransformer {
}
}
- // Children fallback
if (sections.length === 0 && journeyPage.children) {
const links = await Promise.all(
journeyPage.children.map(async (childHref) => {
diff --git a/src/article-api/transformers/rest-transformer.ts b/src/article-api/transformers/rest-transformer.ts
index 3685f5a87b4f..c3af44277ed8 100644
--- a/src/article-api/transformers/rest-transformer.ts
+++ b/src/article-api/transformers/rest-transformer.ts
@@ -52,15 +52,13 @@ type PreparedTemplateData = {
}
/**
- * Transformer for REST API pages
- * Converts REST operations and their data into markdown format using a Liquid template
+ * Converts REST operations and their data into markdown using a Liquid template.
*/
export class RestTransformer implements PageTransformer {
templateName = 'rest-page.template.md'
canTransform(page: Page): boolean {
- // Only transform REST pages that are not landing pages
- // Landing pages (like /en/rest) will be handled by a separate transformer
+ // Landing pages like /en/rest are handled by a different transformer.
return page.autogenerated === 'rest' && !page.relativePath.endsWith('index.md')
}
@@ -76,17 +74,14 @@ export class RestTransformer implements PageTransformer {
// Import getRest dynamically to avoid circular dependencies
const { default: getRest } = await import('@/rest/lib/index')
- // Extract version from context
const currentVersion = context.currentVersion!
- // Use the provided apiVersion, or fall back to the latest from context
const effectiveApiVersion =
apiVersion ||
(context.currentVersionObj?.apiVersions?.length
? context.currentVersionObj.latestApiVersion
: undefined)
- // Parse the category and subcategory from the page path
// e.g. /en/rest/actions/artifacts -> category: actions, subcategory: artifacts
const pathParts = pathname.split('/').filter(Boolean)
const restIndex = pathParts.indexOf('rest')
@@ -98,7 +93,6 @@ export class RestTransformer implements PageTransformer {
const category = pathParts[restIndex + 1]
const subcategory = pathParts[restIndex + 2] // May be undefined for category-only pages
- // Get the REST operations data
const categoryData = await getRest(currentVersion, effectiveApiVersion, category)
let operations: Operation[] = []
@@ -106,12 +100,10 @@ export class RestTransformer implements PageTransformer {
if (subcategory && categoryData?.[subcategory]) {
operations = categoryData[subcategory]
} else if (category && categoryData) {
- // For categories without subcategories, operations are nested directly
- // Flatten all operations from all subcategories
+ // Categories without subcategories nest their operations one level deeper.
operations = Object.values(categoryData).flat()
}
- // Prepare manual content
let manualContent = ''
if (page.markdown) {
const markerIndex = page.markdown.indexOf(
@@ -134,7 +126,6 @@ export class RestTransformer implements PageTransformer {
}
}
- // Prepare data for template
const templateData = await this.prepareTemplateData(
page,
operations,
@@ -143,7 +134,6 @@ export class RestTransformer implements PageTransformer {
effectiveApiVersion,
)
- // Load and render template
const templateContent = loadTemplate(this.templateName)
// Render the template with Liquid. templateData intentionally replaces
@@ -159,9 +149,6 @@ export class RestTransformer implements PageTransformer {
return rendered
}
- /**
- * Prepare data for the Liquid template
- */
private async prepareTemplateData(
page: Page,
operations: Operation[],
@@ -169,10 +156,8 @@ export class RestTransformer implements PageTransformer {
manualContent: string,
apiVersion?: string,
): Promise {
- // Prepare page intro
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
- // Prepare operations for the template
const preparedOperations = await Promise.all(
operations.map(async (operation) => await this.prepareOperation(operation)),
)
@@ -211,35 +196,26 @@ export class RestTransformer implements PageTransformer {
}
}
- /**
- * Prepare a single operation for template rendering
- */
private async prepareOperation(operation: Operation): Promise {
- // Convert HTML description to text
const description = operation.descriptionHTML ? fastTextOnly(operation.descriptionHTML) : ''
- // Determine header settings
const needsContentTypeHeader = operation.subcategory === 'inference'
const omitHeaders =
operation.subcategory === 'management-console' || operation.subcategory === 'manage-ghes'
const showHeaders = !omitHeaders
- // Check if operation has parameters
const hasParameters =
(operation.parameters?.length || 0) > 0 || (operation.bodyParameters?.length || 0) > 0
- // Process status codes to convert HTML descriptions to plain text
const statusCodes = operation.statusCodes?.map((statusCode) => ({
...statusCode,
description: statusCode.description ? fastTextOnly(statusCode.description) : undefined,
}))
- // Prepare code examples with processed URLs
const codeExamples =
operation.codeExamples?.map((example) => {
let url = `${operation.serverUrl}${operation.requestPath}`
- // Replace path parameters in URL
if (example.request?.parameters && Object.keys(example.request.parameters).length > 0) {
for (const [key, value] of Object.entries(example.request.parameters)) {
url = url.replace(`{${key}}`, String(value))
diff --git a/src/article-api/transformers/search-page-transformer.ts b/src/article-api/transformers/search-page-transformer.ts
index c3756298ecc5..ed5b7e7a8871 100644
--- a/src/article-api/transformers/search-page-transformer.ts
+++ b/src/article-api/transformers/search-page-transformer.ts
@@ -2,15 +2,13 @@ import type { Context, Page } from '@/types'
import type { PageTransformer } from './types'
/**
- * Transformer for the search page (/en/search).
- * This is a special UI-only page with no markdown content.
- * Returns minimal markdown with just the title.
+ * /en/search is a UI-only page with no markdown content, so this returns the
+ * title plus a pointer to the Search API.
*/
export class SearchPageTransformer implements PageTransformer {
templateName = ''
canTransform(page: Page): boolean {
- // Only match the search page specifically
return page.relativePath === 'search/index.md'
}
diff --git a/src/article-api/transformers/secret-scanning-transformer.ts b/src/article-api/transformers/secret-scanning-transformer.ts
index 2d8550e9b50d..e1ecaeed4bbf 100644
--- a/src/article-api/transformers/secret-scanning-transformer.ts
+++ b/src/article-api/transformers/secret-scanning-transformer.ts
@@ -8,9 +8,7 @@ import { loadTemplate } from '@/article-api/lib/load-template'
import { getSecretScanningData } from '@/secret-scanning/lib/get-secret-scanning-data'
/**
- * Transformer for Secret Scanning pages.
- * Loads pattern data and converts secret scanning documentation into markdown format.
- * Used by the Article API to render Secret Scanning documentation dynamically.
+ * Loads secret scanning pattern data and converts it into markdown.
*/
export class SecretScanningTransformer implements PageTransformer {
templateName = 'secret-scanning-page.template.md'
@@ -38,7 +36,6 @@ export class SecretScanningTransformer implements PageTransformer {
try {
const data = await getSecretScanningData(filepath)
- // Process Liquid in values
for (const entry of data) {
// Process Liquid for the hasValidityCheck field, as in the middleware
if (typeof entry.hasValidityCheck === 'string' && entry.hasValidityCheck.includes('{%')) {
@@ -104,13 +101,10 @@ export class SecretScanningTransformer implements PageTransformer {
content += table
}
- // Strip HTML comments from the rendered content
content = content.replace(//gs, '')
- // Replace HTML icon spans with plain text equivalents
content = content.replace(/]*aria-label="Supported"[^>]*>[^<]*<\/span>/g, '✓')
content = content.replace(/]*aria-label="Unsupported"[^>]*>[^<]*<\/span>/g, '✗')
- // Convert
tags to newlines and text to markdown links
content = content.replace(//gi, '\n')
content = content.replace(/]*>([^<]*)<\/a>/gi, '[$2]($1)')
// Strip any remaining HTML tags. Loop until stable to handle nested or
@@ -125,12 +119,11 @@ export class SecretScanningTransformer implements PageTransformer {
iterations++
}
- // Normalize whitespace after stripping comments
content = content.replace(/\n{3,}/g, '\n\n').trim()
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
- // Render the template with Liquid only — page.render() already ran
+ // Render the template with Liquid only. page.render() already ran
// rewriteLocalLinks on all markdown links, and the regex cleanup above
// only creates fragment links (e.g. #token-versions) which don't need
// link rewriting. So we skip the expensive remark re-parse.
diff --git a/src/article-api/transformers/toc-transformer.ts b/src/article-api/transformers/toc-transformer.ts
index 1ff9f79f1f9c..cbe51d4204ba 100644
--- a/src/article-api/transformers/toc-transformer.ts
+++ b/src/article-api/transformers/toc-transformer.ts
@@ -10,16 +10,14 @@ interface CategoryPage extends Page {
}
/**
- * Transformer for table of contents (TOC) landing pages - pages with children but no specific layout.
- * These are simple navigation pages (category/subcategory/product/homepage) that list child pages with titles and intros.
- * Corresponds to TocLanding component in the web UI.
+ * Transformer for pages that have children but no specific layout: category,
+ * subcategory, product and homepage. Lists each child with its title and intro.
+ * Corresponds to the TocLanding component in the web UI.
*/
export class TocTransformer implements PageTransformer {
templateName = 'landing-page.template.md'
canTransform(page: Page): boolean {
- // Transform pages that have children but no layout specified
- // These are typically category, subcategory, product, or homepage pages
const categoryPage = page as CategoryPage
const validDocTypes = ['category', 'subcategory', 'product', 'homepage']
return (
@@ -50,7 +48,6 @@ export class TocTransformer implements PageTransformer {
const languageCode = page.languageCode || 'en'
const sections: Section[] = []
- // Get all child pages
if (mapPage.children?.length) {
const links = await Promise.all(
mapPage.children.map(async (childHref) => {
diff --git a/src/article-api/transformers/types.ts b/src/article-api/transformers/types.ts
index aa2441f816e2..cc43d421b52d 100644
--- a/src/article-api/transformers/types.ts
+++ b/src/article-api/transformers/types.ts
@@ -9,17 +9,11 @@ export interface LinkData {
intro?: string
}
-/**
- * Group of links with an optional title
- */
export interface LinkGroup {
title: string | null
links: LinkData[]
}
-/**
- * Section containing multiple link groups
- */
export interface Section {
title: string | null
groups: LinkGroup[]
@@ -35,106 +29,34 @@ export interface TemplateData {
}
/**
- * Base interface for page-to-markdown transformers
- *
- * Transformers convert autogenerated pages (REST, webhooks, etc.)
- * into markdown format for the Article API
+ * Converts a page into markdown.
*/
export interface PageTransformer {
- /**
- * Optional: The name of the template file to use for rendering
- * If provided, can be used by helper functions to load the template
- * Example: 'landing-page.template.md'
- */
+ /** Template file to render with, e.g. 'landing-page.template.md'. */
templateName?: string
- /**
- * Check if this transformer can handle the given page
- */
canTransform(page: Page): boolean
- /**
- * Transform the page into markdown format
- * @param page - The page to transform
- * @param pathname - The pathname of the page
- * @param context - The rendering context
- * @param apiVersion - Optional API version (e.g., '2022-11-28' for REST API calendar versioning)
- */
+ /** `apiVersion` is the REST calendar version, e.g. '2022-11-28'. */
transform(page: Page, pathname: string, context: Context, apiVersion?: string): Promise
}
/**
- * Registry of available transformers for converting pages to markdown
- *
- * The TransformerRegistry manages a collection of PageTransformer instances
- * and provides a mechanism to find the appropriate transformer for a given page.
- *
- * Transformers are evaluated in registration order. The first transformer
- * whose `canTransform()` method returns true will be selected.
- *
- * @example
- * ```typescript
- * const registry = new TransformerRegistry()
- *
- * // Register transformers in priority order
- * registry.register(new RestTransformer())
- * registry.register(new WebhookTransformer())
- * registry.register(new GraphQLTransformer())
- *
- * // Find and use a transformer
- * const transformer = registry.findTransformer(page)
- * if (transformer) {
- * const markdown = await transformer.transform(page, pathname, context)
- * }
- * ```
+ * Transformers are evaluated in registration order, and the first one whose
+ * `canTransform()` returns true wins. Register the specific ones before the
+ * general ones.
*
- * @remarks
- * This class is not thread-safe. In server environments with concurrent requests,
- * register all transformers during initialization before handling requests.
+ * This class is not thread-safe, so register everything during initialization
+ * rather than while handling requests.
*/
export class TransformerRegistry {
private transformers: PageTransformer[] = []
- /**
- * Register a new transformer
- *
- * Transformers are evaluated in registration order when finding a match.
- * Register more specific transformers before more general ones.
- *
- * @param transformer - The transformer to register
- *
- * @example
- * ```typescript
- * const registry = new TransformerRegistry()
- * registry.register(new RestTransformer())
- * ```
- */
register(transformer: PageTransformer): void {
this.transformers.push(transformer)
}
- /**
- * Find a transformer that can handle the given page
- *
- * Iterates through registered transformers in registration order and returns
- * the first transformer whose `canTransform()` method returns true.
- *
- * @param page - The page to find a transformer for
- * @returns The first matching transformer, or null if:
- * - The page is null/undefined
- * - No registered transformer can handle the page
- *
- * @example
- * ```typescript
- * const transformer = registry.findTransformer(page)
- * if (transformer) {
- * const markdown = await transformer.transform(page, pathname, context)
- * } else {
- * // Handle case where no transformer is available
- * console.warn('No transformer found for page:', page.relativePath)
- * }
- * ```
- */
+ /** Returns null when `page` is nullish or nothing can handle it. */
findTransformer(page: Page): PageTransformer | null {
if (page == null) {
return null
diff --git a/src/article-api/transformers/webhooks-transformer.ts b/src/article-api/transformers/webhooks-transformer.ts
index ba2a4c623bd5..d780665852fb 100644
--- a/src/article-api/transformers/webhooks-transformer.ts
+++ b/src/article-api/transformers/webhooks-transformer.ts
@@ -6,8 +6,7 @@ import { loadTemplate } from '@/article-api/lib/load-template'
import matter from '@gr2m/gray-matter'
/**
- * Transformer for Webhooks pages.
- * Converts webhook events and payloads into markdown format using a Liquid template.
+ * Converts webhook events and payloads into markdown using a Liquid template.
*/
export class WebhooksTransformer implements PageTransformer {
templateName = 'webhooks-page.template.md'
@@ -20,16 +19,12 @@ export class WebhooksTransformer implements PageTransformer {
// Import getInitialPageWebhooks dynamically to avoid circular dependencies
const { getInitialPageWebhooks } = await import('@/webhooks/lib/index')
- // Extract version from context
const currentVersion = context.currentVersion!
- // Get the webhook data
const webhooksData = await getInitialPageWebhooks(currentVersion)
- // Prepare page intro
const intro = page.intro ? await page.renderProp('intro', context, { textOnly: true }) : ''
- // Prepare manual content
let manualContent = ''
if (page.markdown) {
const { content } = matter(page.markdown)
@@ -88,7 +83,6 @@ export class WebhooksTransformer implements PageTransformer {
)
}
- // Prepare template data
const templateData: Record = {
page: {
title: page.title,
@@ -99,7 +93,6 @@ export class WebhooksTransformer implements PageTransformer {
commonParams,
}
- // Load and render template
const templateContent = loadTemplate(this.templateName)
return await renderContent(templateContent, {
diff --git a/src/audit-logs/data/fpt/organization.json b/src/audit-logs/data/fpt/organization.json
index fad1c30d62e3..f60139009b56 100644
--- a/src/audit-logs/data/fpt/organization.json
+++ b/src/audit-logs/data/fpt/organization.json
@@ -425,6 +425,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -595,6 +596,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -629,6 +631,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -733,6 +736,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -1860,6 +1864,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -2146,6 +2151,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2296,6 +2302,38 @@
"previous_value"
]
},
+ {
+ "action": "copilot.code_review_organization_settings_updated",
+ "description": "Copilot code review settings were updated for an organization.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type"
+ ]
+ },
{
"action": "copilot.code_review_repository_settings_updated",
"description": "Copilot code review settings were updated for a repository.",
@@ -2361,6 +2399,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -3275,6 +3314,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -3313,10 +3353,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3354,6 +3396,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3387,6 +3430,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3889,6 +3933,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4565,6 +4610,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4601,6 +4647,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4635,6 +4682,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -5315,6 +5363,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5536,7 +5587,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -5620,6 +5672,43 @@
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
+ {
+ "action": "integration.update",
+ "description": "A GitHub App was updated.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "application_client_id",
+ "created_at",
+ "integration",
+ "name",
+ "oauth_application_id",
+ "operation_type"
+ ]
+ },
{
"action": "ip_allow_list.disable",
"description": "An IP allow list was disabled.",
@@ -6992,7 +7081,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -7165,6 +7255,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -8013,6 +8104,41 @@
],
"docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
},
+ {
+ "action": "oauth_application.update_token_expiration",
+ "description": "The token expiration setting for an OAuth application was updated.",
+ "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application",
+ "oauth_application_id",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
+ },
{
"action": "org.accept_business_invitation",
"description": "An invitation sent to an organization to join an enterprise was accepted.",
@@ -8075,6 +8201,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -8218,7 +8345,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8888,6 +9016,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -8920,6 +9049,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9484,6 +9614,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9517,8 +9648,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9549,6 +9682,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9616,9 +9750,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -9649,6 +9785,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9717,6 +9854,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10177,6 +10315,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10353,6 +10492,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -10386,6 +10526,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -10513,10 +10654,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -12269,7 +12412,8 @@
"user_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "topic"
]
},
{
@@ -12333,6 +12477,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12368,10 +12513,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -12402,8 +12549,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12532,8 +12681,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12870,7 +13021,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12905,7 +13057,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13393,6 +13546,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13428,10 +13582,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -13499,6 +13655,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13607,6 +13764,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13682,7 +13840,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -13749,6 +13908,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13784,6 +13944,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -14697,7 +14858,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14730,7 +14891,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14762,7 +14923,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14795,7 +14956,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -15054,7 +15215,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -16182,6 +16344,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -17082,10 +17245,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -17123,7 +17288,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -18251,6 +18417,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18930,6 +19097,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19405,8 +19573,8 @@
]
},
{
- "action": "repo.code_scanning_ai_findings_disabled",
- "description": "AI-powered findings for code scanning were disabled for a repository.",
+ "action": "repo.code_quality_disabled",
+ "description": "Code Quality was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19433,13 +19601,16 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "topic",
+ "user_programmatic_access_name"
]
},
{
- "action": "repo.code_scanning_ai_findings_enabled",
- "description": "AI-powered findings for code scanning were enabled for a repository.",
+ "action": "repo.code_quality_enabled",
+ "description": "Code Quality was enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19464,16 +19635,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
- "action": "repo.code_scanning_analysis_deleted",
- "description": "Code scanning analysis for a repository was deleted.",
- "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository",
+ "action": "repo.code_quality_updated",
+ "description": "Code Quality was updated for a repository.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -19499,19 +19673,16 @@
"user_agent",
"actor_is_agent",
"actor_is_bot",
- "category",
"created_at",
"oauth_application_id",
"operation_type",
"public_repo",
- "tool",
"user_programmatic_access_name"
- ],
- "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository"
+ ]
},
{
- "action": "repo.code_scanning_autofix_disabled",
- "description": "Autofix for code scanning alerts was disabled for a repository.",
+ "action": "repo.code_scanning_ai_findings_disabled",
+ "description": "AI-powered findings for code scanning were disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19538,13 +19709,14 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
},
{
- "action": "repo.code_scanning_autofix_enabled",
- "description": "Autofix for code scanning alerts was enabled for a repository.",
+ "action": "repo.code_scanning_ai_findings_enabled",
+ "description": "AI-powered findings for code scanning were enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19571,14 +19743,15 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
},
{
- "action": "repo.code_scanning_autofix_third_party_tools_disabled",
- "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
- "docs_reference_links": "N/A",
+ "action": "repo.code_scanning_analysis_deleted",
+ "description": "Code scanning analysis for a repository was deleted.",
+ "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository",
"fields": [
"@timestamp",
"_document_id",
@@ -19602,15 +19775,21 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
+ "category",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
- ]
+ "public_repo",
+ "tool",
+ "user_programmatic_access_name"
+ ],
+ "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository"
},
{
- "action": "repo.code_scanning_autofix_third_party_tools_enabled",
- "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
+ "action": "repo.code_scanning_autofix_disabled",
+ "description": "Autofix for code scanning alerts was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19642,9 +19821,9 @@
]
},
{
- "action": "repo.code_scanning_configuration_for_branch_deleted",
- "description": "A code scanning configuration for a branch of a repository was deleted.",
- "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch",
+ "action": "repo.code_scanning_autofix_enabled",
+ "description": "Autofix for code scanning alerts was enabled for a repository.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -19669,17 +19848,116 @@
"user_id",
"user_agent",
"actor_is_bot",
- "branch",
- "category",
"created_at",
"operation_type",
- "public_repo",
- "tool"
- ],
- "docs_reference_titles": "Resolving code scanning alerts"
+ "public_repo"
+ ]
},
{
- "action": "repo.code_scanning_delegated_alert_dismissal_disabled",
+ "action": "repo.code_scanning_autofix_third_party_tools_disabled",
+ "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_autofix_third_party_tools_enabled",
+ "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_configuration_for_branch_deleted",
+ "description": "A code scanning configuration for a branch of a repository was deleted.",
+ "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "branch",
+ "category",
+ "created_at",
+ "operation_type",
+ "public_repo",
+ "tool"
+ ],
+ "docs_reference_titles": "Resolving code scanning alerts"
+ },
+ {
+ "action": "repo.code_scanning_delegated_alert_dismissal_disabled",
"description": "Prevention of direct alert dismissal for code scanning was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
@@ -21376,6 +21654,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -21419,6 +21698,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -21570,6 +21850,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -21651,7 +21932,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -22149,6 +22431,42 @@
],
"docs_reference_titles": "Repository security advisories"
},
+ {
+ "action": "repository_advisory.create_confidential_comment",
+ "description": "Someone created a confidential comment on a repository security advisory.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo",
+ "repository_advisory",
+ "repository_advisory_comment_id",
+ "repository_advisory_id"
+ ]
+ },
{
"action": "repository_advisory.cve_request",
"description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.",
@@ -22321,6 +22639,43 @@
"user_programmatic_access_name"
]
},
+ {
+ "action": "repository_advisory.read_confidential_comments",
+ "description": "Confidential comments on a repository security advisory were read by someone.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "confidential_comment_count",
+ "created_at",
+ "operation_type",
+ "public_repo",
+ "repository_advisory",
+ "repository_advisory_id",
+ "surface"
+ ]
+ },
{
"action": "repository_advisory.reopen",
"description": "Someone reopened as draft security advisory.",
@@ -22353,7 +22708,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -23214,6 +23570,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -23541,7 +23898,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23574,8 +23932,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23712,7 +24072,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -24123,7 +24484,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24945,6 +25307,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -25132,6 +25495,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25169,6 +25533,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25278,6 +25643,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -25395,7 +25761,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -25442,9 +25809,9 @@
"docs_reference_titles": "Managing custom repository roles for an organization"
},
{
- "action": "secret_scanning_alert.assign",
- "description": "A user was assigned to a secret scanning alert.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.add_port",
+ "description": "A forwarded port was added to a sandbox.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25469,18 +25836,14 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.create",
- "description": "GitHub detected a secret and created a secret scanning alert.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.create",
+ "description": "A sandbox was created.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25505,18 +25868,14 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.delete",
- "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.delete",
+ "description": "A sandbox was deleted.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25541,19 +25900,14 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "reason",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.public_leak",
- "description": "A secret scanning alert was leaked in a public repo.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.generate_token",
+ "description": "A token was generated for a sandbox.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25578,17 +25932,13 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.reopen",
- "description": "A secret scanning alert was reopened.",
+ "action": "sandbox.remove_port",
+ "description": "A forwarded port was removed from a sandbox.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25613,17 +25963,330 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
- "actor_is_bot",
"created_at",
- "multi_repo",
- "number",
- "oauth_application_id",
"operation_type",
- "publicly_leaked",
- "public_repo",
- "resolution",
- "secret_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.resume",
+ "description": "A sandbox was resumed.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.stop",
+ "description": "A sandbox was stopped.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "secret_scanning_alert.assign",
+ "description": "A user was assigned to a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.create",
+ "description": "GitHub detected a secret and created a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.delete",
+ "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "reason",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.metadata_create",
+ "description": "Metadata was added to a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.metadata_remove",
+ "description": "Metadata was removed from a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.public_leak",
+ "description": "A secret scanning alert was leaked in a public repo.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.reopen",
+ "description": "A secret scanning alert was reopened.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "multi_repo",
+ "number",
+ "oauth_application_id",
+ "operation_type",
+ "publicly_leaked",
+ "public_repo",
+ "resolution",
+ "secret_type",
"secret_type_display_name",
"user_programmatic_access_name"
]
@@ -26369,6 +27032,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -29199,6 +29863,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -29206,6 +29871,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
@@ -29255,6 +29921,71 @@
],
"docs_reference_titles": "Understanding GitHub Actions"
},
+ {
+ "action": "workflows.debugger_session_completed",
+ "description": "An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "completed_at",
+ "created_at",
+ "operation_type",
+ "started_at"
+ ]
+ },
+ {
+ "action": "workflows.debugger_session_started",
+ "description": "An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "started_at"
+ ]
+ },
{
"action": "workflows.delete_workflow_run",
"description": "A workflow run was deleted.",
diff --git a/src/audit-logs/data/fpt/user.json b/src/audit-logs/data/fpt/user.json
index c4b66f719bf9..a35f7517e21c 100644
--- a/src/audit-logs/data/fpt/user.json
+++ b/src/audit-logs/data/fpt/user.json
@@ -307,6 +307,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -718,6 +719,40 @@
"operation_type"
]
},
+ {
+ "action": "business.add_member",
+ "description": "A member was added to an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "operation_type"
+ ]
+ },
{
"action": "business.add_support_entitlee",
"description": "A support entitlement was added to a member of an enterprise.",
@@ -1069,6 +1104,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1138,6 +1174,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -1210,6 +1247,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1243,6 +1281,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -1316,7 +1355,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1758,6 +1798,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1904,6 +1945,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2019,6 +2061,38 @@
"seat_assignment"
]
},
+ {
+ "action": "copilot.code_review_organization_settings_updated",
+ "description": "Copilot code review settings were updated for an organization.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type"
+ ]
+ },
{
"action": "copilot.code_review_repository_settings_updated",
"description": "Copilot code review settings were updated for a repository.",
@@ -2505,6 +2579,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -2543,10 +2618,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -2584,6 +2661,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3550,6 +3628,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3586,6 +3665,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3620,6 +3700,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3692,6 +3773,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -4297,6 +4379,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4518,7 +4603,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -4602,6 +4688,43 @@
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
+ {
+ "action": "integration.update",
+ "description": "A GitHub App was updated.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "application_client_id",
+ "created_at",
+ "integration",
+ "name",
+ "oauth_application_id",
+ "operation_type"
+ ]
+ },
{
"action": "issue_dependencies.blocked_by_add",
"description": "An issue was marked as blocked by another issue.",
@@ -6178,6 +6301,41 @@
],
"docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
},
+ {
+ "action": "oauth_application.update_token_expiration",
+ "description": "The token expiration setting for an OAuth application was updated.",
+ "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application",
+ "oauth_application_id",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
+ },
{
"action": "oauth_authorization.create",
"description": "An authorization for an OAuth application was created.",
@@ -6284,8 +6442,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -6706,6 +6866,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6741,10 +6902,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -6812,6 +6975,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6888,6 +7052,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -6963,7 +7128,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -7558,6 +7724,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -8592,10 +8759,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -8633,7 +8802,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -8827,6 +8997,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -10569,6 +10740,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10612,6 +10784,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -10763,6 +10936,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -10844,7 +11018,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -11727,7 +11902,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11758,7 +11934,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11789,7 +11966,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11820,7 +11998,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11851,7 +12030,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11882,7 +12062,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11913,7 +12094,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -13132,6 +13314,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -13932,6 +14115,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -14105,6 +14289,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -14270,7 +14455,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14297,12 +14482,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14328,12 +14514,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14359,6 +14546,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -14430,7 +14618,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14457,12 +14645,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14488,13 +14677,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14520,6 +14710,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -15472,6 +15663,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghec/enterprise.json b/src/audit-logs/data/ghec/enterprise.json
index 4a0d5deadb70..b23efaa6d4e8 100644
--- a/src/audit-logs/data/ghec/enterprise.json
+++ b/src/audit-logs/data/ghec/enterprise.json
@@ -469,13 +469,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -626,6 +629,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -796,6 +800,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -830,6 +835,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -934,6 +940,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -1244,6 +1251,40 @@
"two_factor_method"
]
},
+ {
+ "action": "business.add_member",
+ "description": "A member was added to an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "operation_type"
+ ]
+ },
{
"action": "business.add_organization",
"description": "An organization was added to an enterprise.",
@@ -1854,6 +1895,7 @@
"email",
"invitation_id",
"name",
+ "oauth_application_id",
"operation_type"
]
},
@@ -2907,41 +2949,8 @@
]
},
{
- "action": "business.enable_oidc",
- "description": "OIDC single sign-on was enabled for an enterprise.",
- "docs_reference_links": "/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_bot",
- "created_at",
- "operation_type"
- ],
- "docs_reference_titles": "Configuring OIDC for Enterprise Managed Users"
- },
- {
- "action": "business.enable_open_scim",
- "description": "SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.",
+ "action": "business.enable_app_delegated_credential_authorizations",
+ "description": "App-delegated credential authorizations were enabled for an enterprise.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -2972,44 +2981,9 @@
]
},
{
- "action": "business.enable_saml",
- "description": "SAML single sign-on was enabled for an enterprise.",
- "docs_reference_links": "N/A",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_bot",
- "created_at",
- "issuer",
- "name",
- "operation_type",
- "sso_url"
- ]
- },
- {
- "action": "business.enable_source_ip_disclosure",
- "description": "Display of IP addresses within audit log events for the enterprise was enabled.",
- "docs_reference_links": "/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise",
+ "action": "business.enable_oidc",
+ "description": "OIDC single sign-on was enabled for an enterprise.",
+ "docs_reference_links": "/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users",
"fields": [
"@timestamp",
"_document_id",
@@ -3037,77 +3011,11 @@
"created_at",
"operation_type"
],
- "docs_reference_titles": "Displaying IP addresses in the audit log for your enterprise"
- },
- {
- "action": "business.enable_two_factor_requirement",
- "description": "The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.",
- "docs_reference_links": "N/A",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_bot",
- "created_at",
- "name",
- "oauth_application_id",
- "operation_type"
- ]
- },
- {
- "action": "business.enterprise_server_license_download",
- "description": "A GitHub Enterprise Server license was downloaded.",
- "docs_reference_links": "N/A",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_bot",
- "created_at",
- "operation_type"
- ]
+ "docs_reference_titles": "Configuring OIDC for Enterprise Managed Users"
},
{
- "action": "business.enterprise_teams_limit_reached",
- "description": "An enterprise has reached its enterprise teams limit.",
+ "action": "business.enable_open_scim",
+ "description": "SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3133,16 +3041,13 @@
"user_id",
"user_agent",
"actor_is_bot",
- "count",
"created_at",
- "limit",
- "name",
"operation_type"
]
},
{
- "action": "business.enterprise_teams_limit_warning",
- "description": "An enterprise is approaching its enterprise teams limit.",
+ "action": "business.enable_saml",
+ "description": "SAML single sign-on was enabled for an enterprise.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3168,17 +3073,17 @@
"user_id",
"user_agent",
"actor_is_bot",
- "count",
"created_at",
- "limit",
+ "issuer",
"name",
- "operation_type"
+ "operation_type",
+ "sso_url"
]
},
{
- "action": "business.expire_trial",
- "description": "The trial of GitHub Enterprise Cloud expired.",
- "docs_reference_links": "/admin/overview/setting-up-a-trial-of-github-enterprise-cloud",
+ "action": "business.enable_source_ip_disclosure",
+ "description": "Display of IP addresses within audit log events for the enterprise was enabled.",
+ "docs_reference_links": "/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise",
"fields": [
"@timestamp",
"_document_id",
@@ -3204,14 +3109,13 @@
"user_agent",
"actor_is_bot",
"created_at",
- "name",
"operation_type"
],
- "docs_reference_titles": "Setting up a trial of GitHub Enterprise Cloud"
+ "docs_reference_titles": "Displaying IP addresses in the audit log for your enterprise"
},
{
- "action": "business.github_models_billing_disabled",
- "description": "GitHub Models billing was disabled for the business.",
+ "action": "business.enable_two_factor_requirement",
+ "description": "The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3239,12 +3143,13 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.github_models_billing_enabled",
- "description": "GitHub Models billing was enabled for the business.",
+ "action": "business.enterprise_server_license_download",
+ "description": "A GitHub Enterprise Server license was downloaded.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3271,48 +3176,12 @@
"user_agent",
"actor_is_bot",
"created_at",
- "name",
"operation_type"
]
},
{
- "action": "business.import_license_usage",
- "description": "License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.",
- "docs_reference_links": "/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_agent",
- "actor_is_bot",
- "created_at",
- "name",
- "operation_type"
- ],
- "docs_reference_titles": "Syncing license usage from GitHub Enterprise Server to Cloud"
- },
- {
- "action": "business.invite_admin",
- "description": "An invitation for someone to be an enterprise owner of an enterprise was sent.",
+ "action": "business.enterprise_teams_limit_reached",
+ "description": "An enterprise has reached its enterprise teams limit.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3337,19 +3206,17 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
+ "count",
"created_at",
- "email",
- "invitation_id",
+ "limit",
"name",
- "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.invite_billing_manager",
- "description": "An invitation for someone to be a billing manager of an enterprise was sent.",
+ "action": "business.enterprise_teams_limit_warning",
+ "description": "An enterprise is approaching its enterprise teams limit.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3374,20 +3241,18 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
+ "count",
"created_at",
- "email",
- "invitation_id",
+ "limit",
"name",
- "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.invite_unaffiliated_member",
- "description": "An invitation for someone to join an enterprise was sent.",
- "docs_reference_links": "N/A",
+ "action": "business.expire_trial",
+ "description": "The trial of GitHub Enterprise Cloud expired.",
+ "docs_reference_links": "/admin/overview/setting-up-a-trial-of-github-enterprise-cloud",
"fields": [
"@timestamp",
"_document_id",
@@ -3411,19 +3276,16 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
"created_at",
- "email",
- "invitation_id",
"name",
- "oauth_application_id",
"operation_type"
- ]
+ ],
+ "docs_reference_titles": "Setting up a trial of GitHub Enterprise Cloud"
},
{
- "action": "business.members_can_update_protected_branches.clear",
- "description": "An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.",
+ "action": "business.github_models_billing_disabled",
+ "description": "GitHub Models billing was disabled for the business.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3455,8 +3317,8 @@
]
},
{
- "action": "business.members_can_update_protected_branches.disable",
- "description": "The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.",
+ "action": "business.github_models_billing_enabled",
+ "description": "GitHub Models billing was enabled for the business.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3484,14 +3346,13 @@
"actor_is_bot",
"created_at",
"name",
- "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.members_can_update_protected_branches.enable",
- "description": "The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.",
- "docs_reference_links": "N/A",
+ "action": "business.import_license_usage",
+ "description": "License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.",
+ "docs_reference_links": "/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage",
"fields": [
"@timestamp",
"_document_id",
@@ -3515,14 +3376,17 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
- ]
+ ],
+ "docs_reference_titles": "Syncing license usage from GitHub Enterprise Server to Cloud"
},
{
- "action": "business.members_limit_reached",
- "description": "An enterprise has reached its members limit.",
+ "action": "business.invite_admin",
+ "description": "An invitation for someone to be an enterprise owner of an enterprise was sent.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3547,17 +3411,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
- "count",
"created_at",
- "limit",
+ "email",
+ "invitation_id",
"name",
+ "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.organizations_limit_reached",
- "description": "An enterprise has reached its organizations limit.",
+ "action": "business.invite_billing_manager",
+ "description": "An invitation for someone to be a billing manager of an enterprise was sent.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3582,17 +3448,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
- "count",
"created_at",
- "limit",
+ "email",
+ "invitation_id",
"name",
+ "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.organizations_limit_warning",
- "description": "An enterprise is approaching its organizations limit.",
+ "action": "business.invite_unaffiliated_member",
+ "description": "An invitation for someone to join an enterprise was sent.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3617,17 +3485,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
- "count",
"created_at",
- "limit",
+ "email",
+ "invitation_id",
"name",
+ "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.proxy_security_header_disabled",
- "description": "The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.",
+ "action": "business.members_can_update_protected_branches.clear",
+ "description": "An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3654,12 +3524,13 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "name",
"operation_type"
]
},
{
- "action": "business.proxy_security_header_enabled",
- "description": "The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.",
+ "action": "business.members_can_update_protected_branches.disable",
+ "description": "The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3686,12 +3557,14 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "name",
+ "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.proxy_security_header_unsatisfied",
- "description": "A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.",
+ "action": "business.members_can_update_protected_branches.enable",
+ "description": "The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -3719,14 +3592,13 @@
"actor_is_bot",
"created_at",
"name",
- "oauth_application_id",
"operation_type"
]
},
{
- "action": "business.recovery_code_failed",
- "description": "An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.",
- "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable",
+ "action": "business.members_limit_reached",
+ "description": "An enterprise has reached its members limit.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3751,17 +3623,17 @@
"user_id",
"user_agent",
"actor_is_bot",
+ "count",
"created_at",
+ "limit",
"name",
- "operation_type",
- "reason"
- ],
- "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable"
+ "operation_type"
+ ]
},
{
- "action": "business.recovery_code_used",
- "description": "An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.",
- "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable",
+ "action": "business.members_limit_warning",
+ "description": "An enterprise is approaching its members limit.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3786,16 +3658,17 @@
"user_id",
"user_agent",
"actor_is_bot",
+ "count",
"created_at",
+ "limit",
"name",
"operation_type"
- ],
- "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable"
+ ]
},
{
- "action": "business.recovery_codes_downloaded",
- "description": "An enterprise owner downloaded the enterprise's SSO recovery codes.",
- "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
+ "action": "business.organizations_limit_reached",
+ "description": "An enterprise has reached its organizations limit.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3820,16 +3693,17 @@
"user_id",
"user_agent",
"actor_is_bot",
+ "count",
"created_at",
+ "limit",
"name",
"operation_type"
- ],
- "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
+ ]
},
{
- "action": "business.recovery_codes_generated",
- "description": "An enterprise owner generated the enterprise's SSO recovery codes.",
- "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
+ "action": "business.organizations_limit_warning",
+ "description": "An enterprise is approaching its organizations limit.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3854,16 +3728,17 @@
"user_id",
"user_agent",
"actor_is_bot",
+ "count",
"created_at",
+ "limit",
"name",
"operation_type"
- ],
- "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
+ ]
},
{
- "action": "business.recovery_codes_printed",
- "description": "An enterprise owner printed the enterprise's SSO recovery codes.",
- "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
+ "action": "business.proxy_security_header_disabled",
+ "description": "The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3889,15 +3764,13 @@
"user_agent",
"actor_is_bot",
"created_at",
- "name",
"operation_type"
- ],
- "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
+ ]
},
{
- "action": "business.recovery_codes_viewed",
- "description": "An enterprise owner viewed the enterprise's SSO recovery codes.",
- "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
+ "action": "business.proxy_security_header_enabled",
+ "description": "The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3923,15 +3796,13 @@
"user_agent",
"actor_is_bot",
"created_at",
- "name",
"operation_type"
- ],
- "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
+ ]
},
{
- "action": "business.remove_admin",
- "description": "An enterprise owner was removed from an enterprise.",
- "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise",
+ "action": "business.proxy_security_header_unsatisfied",
+ "description": "A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -3955,19 +3826,52 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
"oauth_application_id",
"operation_type"
+ ]
+ },
+ {
+ "action": "business.recovery_code_failed",
+ "description": "An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.",
+ "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "operation_type",
+ "reason"
],
- "docs_reference_titles": "Inviting people to manage your enterprise"
+ "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable"
},
{
- "action": "business.remove_billing_manager",
- "description": "A billing manager was removed from an enterprise.",
- "docs_reference_links": "N/A",
+ "action": "business.recovery_code_used",
+ "description": "An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.",
+ "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable",
"fields": [
"@timestamp",
"_document_id",
@@ -3991,18 +3895,17 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
- "oauth_application_id",
"operation_type"
- ]
+ ],
+ "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable"
},
{
- "action": "business.remove_disallowed_two_factor_method",
- "description": "Removed a two-factor authentication method restriction for an enterprise.",
- "docs_reference_links": "N/A",
+ "action": "business.recovery_codes_downloaded",
+ "description": "An enterprise owner downloaded the enterprise's SSO recovery codes.",
+ "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
"fields": [
"@timestamp",
"_document_id",
@@ -4029,14 +3932,14 @@
"actor_is_bot",
"created_at",
"name",
- "operation_type",
- "two_factor_method"
- ]
+ "operation_type"
+ ],
+ "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
},
{
- "action": "business.remove_member",
- "description": "A member was removed from an enterprise.",
- "docs_reference_links": "N/A",
+ "action": "business.recovery_codes_generated",
+ "description": "An enterprise owner generated the enterprise's SSO recovery codes.",
+ "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
"fields": [
"@timestamp",
"_document_id",
@@ -4060,19 +3963,17 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
- "oauth_application_id",
- "operation_type",
- "user_programmatic_access_name"
- ]
+ "operation_type"
+ ],
+ "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
},
{
- "action": "business.remove_organization",
- "description": "An organization was removed from an enterprise.",
- "docs_reference_links": "N/A",
+ "action": "business.recovery_codes_printed",
+ "description": "An enterprise owner printed the enterprise's SSO recovery codes.",
+ "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
"fields": [
"@timestamp",
"_document_id",
@@ -4096,18 +3997,228 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
- "oauth_application_id",
"operation_type"
- ]
+ ],
+ "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
},
{
- "action": "business.remove_support_entitlee",
- "description": "A support entitlement was removed from a member of an enterprise.",
- "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise",
+ "action": "business.recovery_codes_viewed",
+ "description": "An enterprise owner viewed the enterprise's SSO recovery codes.",
+ "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "operation_type"
+ ],
+ "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes"
+ },
+ {
+ "action": "business.remove_admin",
+ "description": "An enterprise owner was removed from an enterprise.",
+ "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "oauth_application_id",
+ "operation_type"
+ ],
+ "docs_reference_titles": "Inviting people to manage your enterprise"
+ },
+ {
+ "action": "business.remove_billing_manager",
+ "description": "A billing manager was removed from an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "oauth_application_id",
+ "operation_type"
+ ]
+ },
+ {
+ "action": "business.remove_disallowed_two_factor_method",
+ "description": "Removed a two-factor authentication method restriction for an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "operation_type",
+ "two_factor_method"
+ ]
+ },
+ {
+ "action": "business.remove_member",
+ "description": "A member was removed from an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "oauth_application_id",
+ "operation_type",
+ "user_programmatic_access_name"
+ ]
+ },
+ {
+ "action": "business.remove_organization",
+ "description": "An organization was removed from an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "oauth_application_id",
+ "operation_type",
+ "user_programmatic_access_name"
+ ]
+ },
+ {
+ "action": "business.remove_support_entitlee",
+ "description": "A support entitlement was removed from a member of an enterprise.",
+ "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise",
"fields": [
"@timestamp",
"_document_id",
@@ -4658,6 +4769,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -4691,6 +4803,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -5019,6 +5132,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -5052,6 +5166,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -5363,6 +5478,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -5432,6 +5548,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -5504,6 +5621,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -5537,6 +5655,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -5610,7 +5729,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -6002,6 +6122,7 @@
"created_at",
"name",
"new_repo_runners_policy",
+ "oauth_application_id",
"old_repo_runners_policy",
"operation_type"
]
@@ -7067,6 +7188,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -7419,6 +7541,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -7632,6 +7755,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -8333,6 +8457,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -8371,10 +8496,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -8412,6 +8539,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -8445,6 +8573,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8947,6 +9076,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -9134,6 +9264,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -9338,6 +9469,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"enterprise_role_id",
@@ -10783,6 +10915,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -10826,6 +10959,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -11263,6 +11397,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -11299,6 +11434,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11333,6 +11469,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -12013,6 +12150,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -12234,7 +12374,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -12319,8 +12460,8 @@
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
{
- "action": "ip_allow_list.disable",
- "description": "An IP allow list was disabled.",
+ "action": "integration.update",
+ "description": "A GitHub App was updated.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12345,15 +12486,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
+ "application_client_id",
"created_at",
+ "integration",
+ "name",
"oauth_application_id",
"operation_type"
]
},
{
- "action": "ip_allow_list.disable_for_installed_apps",
- "description": "An IP allow list was disabled for installed GitHub Apps.",
+ "action": "ip_allow_list.disable",
+ "description": "An IP allow list was disabled.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12385,8 +12530,8 @@
]
},
{
- "action": "ip_allow_list.disable_idp_ip_allowlist_for_web",
- "description": "Identity Provider based IP allow list for web interactions was disabled.",
+ "action": "ip_allow_list.disable_for_installed_apps",
+ "description": "An IP allow list was disabled for installed GitHub Apps.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12413,12 +12558,45 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
- "action": "ip_allow_list.disable_skip_idp_ip_allowlist_app_access",
- "description": "N/A",
+ "action": "ip_allow_list.disable_idp_ip_allowlist_for_web",
+ "description": "Identity Provider based IP allow list for web interactions was disabled.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type"
+ ]
+ },
+ {
+ "action": "ip_allow_list.disable_skip_idp_ip_allowlist_app_access",
+ "description": "N/A",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13803,6 +13981,78 @@
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
+ {
+ "action": "members_can_create_private_pages.disable",
+ "description": "The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.",
+ "docs_reference_links": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application_id",
+ "operation_type",
+ "user_programmatic_access_name"
+ ],
+ "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
+ },
+ {
+ "action": "members_can_create_private_pages.enable",
+ "description": "The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.",
+ "docs_reference_links": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application_id",
+ "operation_type",
+ "user_programmatic_access_name"
+ ],
+ "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
+ },
{
"action": "members_can_create_public_pages.disable",
"description": "The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.",
@@ -13972,6 +14222,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -14820,6 +15071,41 @@
],
"docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
},
+ {
+ "action": "oauth_application.update_token_expiration",
+ "description": "The token expiration setting for an OAuth application was updated.",
+ "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application",
+ "oauth_application_id",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
+ },
{
"action": "org.accept_business_invitation",
"description": "An invitation sent to an organization to join an enterprise was accepted.",
@@ -14882,6 +15168,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -14992,7 +15279,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -15501,6 +15789,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -15533,6 +15822,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -16032,6 +16322,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -16065,8 +16356,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -16097,6 +16390,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -16164,9 +16458,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -16197,6 +16493,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -16265,6 +16562,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -16798,6 +17096,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -16925,10 +17224,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -18549,6 +18850,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -18584,10 +18886,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -18618,8 +18922,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -18748,8 +19054,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -19086,7 +19394,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -19121,7 +19430,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -19465,6 +19775,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -19500,10 +19811,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -19571,6 +19884,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -19679,6 +19993,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -19754,7 +20069,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -19821,6 +20137,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -19856,6 +20173,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -20406,6 +20724,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"allowed_values",
"created_at",
@@ -20790,7 +21109,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -20823,7 +21142,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -20855,7 +21174,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -20888,7 +21207,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -21147,7 +21466,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -22339,6 +22659,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -23239,10 +23560,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -23280,7 +23603,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -24332,6 +24656,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -25011,6 +25336,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -25486,8 +25812,8 @@
]
},
{
- "action": "repo.code_scanning_ai_findings_disabled",
- "description": "AI-powered findings for code scanning were disabled for a repository.",
+ "action": "repo.code_quality_disabled",
+ "description": "Code Quality was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25514,13 +25840,16 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "topic",
+ "user_programmatic_access_name"
]
},
{
- "action": "repo.code_scanning_ai_findings_enabled",
- "description": "AI-powered findings for code scanning were enabled for a repository.",
+ "action": "repo.code_quality_enabled",
+ "description": "Code Quality was enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25545,16 +25874,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
- "action": "repo.code_scanning_analysis_deleted",
- "description": "Code scanning analysis for a repository was deleted.",
- "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository",
+ "action": "repo.code_quality_updated",
+ "description": "Code Quality was updated for a repository.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25580,19 +25912,16 @@
"user_agent",
"actor_is_agent",
"actor_is_bot",
- "category",
"created_at",
"oauth_application_id",
"operation_type",
"public_repo",
- "tool",
"user_programmatic_access_name"
- ],
- "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository"
+ ]
},
{
- "action": "repo.code_scanning_autofix_disabled",
- "description": "Autofix for code scanning alerts was disabled for a repository.",
+ "action": "repo.code_scanning_ai_findings_disabled",
+ "description": "AI-powered findings for code scanning were disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25619,13 +25948,14 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
},
{
- "action": "repo.code_scanning_autofix_enabled",
- "description": "Autofix for code scanning alerts was enabled for a repository.",
+ "action": "repo.code_scanning_ai_findings_enabled",
+ "description": "AI-powered findings for code scanning were enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25652,14 +25982,15 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
},
{
- "action": "repo.code_scanning_autofix_third_party_tools_disabled",
- "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
- "docs_reference_links": "N/A",
+ "action": "repo.code_scanning_analysis_deleted",
+ "description": "Code scanning analysis for a repository was deleted.",
+ "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository",
"fields": [
"@timestamp",
"_document_id",
@@ -25683,15 +26014,21 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
+ "category",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
- ]
+ "public_repo",
+ "tool",
+ "user_programmatic_access_name"
+ ],
+ "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository"
},
{
- "action": "repo.code_scanning_autofix_third_party_tools_enabled",
- "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
+ "action": "repo.code_scanning_autofix_disabled",
+ "description": "Autofix for code scanning alerts was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25723,9 +26060,108 @@
]
},
{
- "action": "repo.code_scanning_configuration_for_branch_deleted",
- "description": "A code scanning configuration for a branch of a repository was deleted.",
- "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch",
+ "action": "repo.code_scanning_autofix_enabled",
+ "description": "Autofix for code scanning alerts was enabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_autofix_third_party_tools_disabled",
+ "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_autofix_third_party_tools_enabled",
+ "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_configuration_for_branch_deleted",
+ "description": "A code scanning configuration for a branch of a repository was deleted.",
+ "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch",
"fields": [
"@timestamp",
"_document_id",
@@ -27457,6 +27893,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -27500,6 +27937,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -27651,6 +28089,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -27732,7 +28171,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -28266,8 +28706,8 @@
"docs_reference_titles": "Repository security advisories"
},
{
- "action": "repository_advisory.cve_request",
- "description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.",
+ "action": "repository_advisory.create_confidential_comment",
+ "description": "Someone created a confidential comment on a repository security advisory.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28292,18 +28732,18 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
"created_at",
- "oauth_application_id",
"operation_type",
"public_repo",
- "user_programmatic_access_name"
+ "repository_advisory",
+ "repository_advisory_comment_id",
+ "repository_advisory_id"
]
},
{
- "action": "repository_advisory.github_broadcast",
- "description": "GitHub made a security advisory public in the GitHub Advisory Database.",
+ "action": "repository_advisory.cve_request",
+ "description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28328,14 +28768,18 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
- "action": "repository_advisory.github_withdraw",
- "description": "GitHub withdrew a security advisory that was published in error.",
+ "action": "repository_advisory.github_broadcast",
+ "description": "GitHub made a security advisory public in the GitHub Advisory Database.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28366,8 +28810,8 @@
]
},
{
- "action": "repository_advisory.open",
- "description": "Someone opened a draft security advisory.",
+ "action": "repository_advisory.github_withdraw",
+ "description": "GitHub withdrew a security advisory that was published in error.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28392,18 +28836,14 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
- "actor_is_bot",
"created_at",
- "oauth_application_id",
"operation_type",
- "public_repo",
- "user_programmatic_access_name"
+ "public_repo"
]
},
{
- "action": "repository_advisory.publish",
- "description": "Someone published a security advisory.",
+ "action": "repository_advisory.open",
+ "description": "Someone opened a draft security advisory.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28438,8 +28878,8 @@
]
},
{
- "action": "repository_advisory.reopen",
- "description": "Someone reopened as draft security advisory.",
+ "action": "repository_advisory.publish",
+ "description": "Someone published a security advisory.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28469,12 +28909,13 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
- "action": "repository_advisory.update",
- "description": "Someone edited a draft or published security advisory.",
+ "action": "repository_advisory.read_confidential_comments",
+ "description": "Confidential comments on a repository security advisory were read by someone.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28499,85 +28940,19 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
"actor_is_bot",
+ "confidential_comment_count",
"created_at",
- "oauth_application_id",
"operation_type",
"public_repo",
- "title",
- "user_programmatic_access_name"
+ "repository_advisory",
+ "repository_advisory_id",
+ "surface"
]
},
{
- "action": "repository_branch_protection_evaluation.disable",
- "description": "Branch protections were disabled for the repository.",
- "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_bot",
- "created_at",
- "operation_type"
- ],
- "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule"
- },
- {
- "action": "repository_branch_protection_evaluation.enable",
- "description": "Branch protections were enabled for this repository.",
- "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule",
- "fields": [
- "@timestamp",
- "_document_id",
- "action",
- "actor",
- "actor_id",
- "business",
- "business_id",
- "hashed_token",
- "org",
- "org_id",
- "programmatic_access_type",
- "repo",
- "repo_id",
- "repository",
- "repository_id",
- "request_access_security_header",
- "request_id",
- "token_id",
- "token_scopes",
- "user",
- "user_id",
- "user_agent",
- "actor_is_bot",
- "created_at",
- "operation_type"
- ],
- "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule"
- },
- {
- "action": "repository_code_security.disable",
- "description": "Code security was disabled for a repository.",
+ "action": "repository_advisory.reopen",
+ "description": "Someone reopened as draft security advisory.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28608,13 +28983,12 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic",
"user_programmatic_access_name"
]
},
{
- "action": "repository_code_security.enable",
- "description": "Code security was enabled for a repository.",
+ "action": "repository_advisory.update",
+ "description": "Someone edited a draft or published security advisory.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28645,14 +29019,14 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic",
+ "title",
"user_programmatic_access_name"
]
},
{
- "action": "repository_content_analysis.disable",
- "description": "Data use settings were disabled for a private repository.",
- "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories",
+ "action": "repository_branch_protection_evaluation.disable",
+ "description": "Branch protections were disabled for the repository.",
+ "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule",
"fields": [
"@timestamp",
"_document_id",
@@ -28676,15 +29050,16 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
- "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories"
+ "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule"
},
{
- "action": "repository_content_analysis.enable",
- "description": "Data use settings were enabled for a private repository.",
- "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories",
+ "action": "repository_branch_protection_evaluation.enable",
+ "description": "Branch protections were enabled for this repository.",
+ "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule",
"fields": [
"@timestamp",
"_document_id",
@@ -28708,14 +29083,15 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
- "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories"
+ "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule"
},
{
- "action": "repository_dependency_graph_autosubmit.disable",
- "description": "Automatic dependency submission was disabled for a repository.",
+ "action": "repository_code_security.disable",
+ "description": "Code security was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28751,8 +29127,8 @@
]
},
{
- "action": "repository_dependency_graph_autosubmit.enable",
- "description": "Automatic dependency submission was enabled for a repository.",
+ "action": "repository_code_security.enable",
+ "description": "Code security was enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28788,9 +29164,147 @@
]
},
{
- "action": "repository_dependency_graph.disable",
- "description": "The dependency graph was disabled for a private repository.",
- "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories",
+ "action": "repository_content_analysis.disable",
+ "description": "Data use settings were disabled for a private repository.",
+ "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories"
+ },
+ {
+ "action": "repository_content_analysis.enable",
+ "description": "Data use settings were enabled for a private repository.",
+ "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories"
+ },
+ {
+ "action": "repository_dependency_graph_autosubmit.disable",
+ "description": "Automatic dependency submission was disabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application_id",
+ "operation_type",
+ "public_repo",
+ "topic",
+ "user_programmatic_access_name"
+ ]
+ },
+ {
+ "action": "repository_dependency_graph_autosubmit.enable",
+ "description": "Automatic dependency submission was enabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application_id",
+ "operation_type",
+ "public_repo",
+ "topic",
+ "user_programmatic_access_name"
+ ]
+ },
+ {
+ "action": "repository_dependency_graph.disable",
+ "description": "The dependency graph was disabled for a private repository.",
+ "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories",
"fields": [
"@timestamp",
"_document_id",
@@ -29254,6 +29768,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -29581,7 +30096,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -29614,8 +30130,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -29752,7 +30270,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -30163,7 +30682,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -30985,6 +31505,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -31172,6 +31693,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -31209,6 +31731,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -31318,6 +31841,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -31435,7 +31959,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -31481,6 +32006,230 @@
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
+ {
+ "action": "sandbox.add_port",
+ "description": "A forwarded port was added to a sandbox.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.create",
+ "description": "A sandbox was created.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.delete",
+ "description": "A sandbox was deleted.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.generate_token",
+ "description": "A token was generated for a sandbox.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.remove_port",
+ "description": "A forwarded port was removed from a sandbox.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.resume",
+ "description": "A sandbox was resumed.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.stop",
+ "description": "A sandbox was stopped.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
{
"action": "secret_scanning_alert.assign",
"description": "A user was assigned to a secret scanning alert.",
@@ -31590,6 +32339,78 @@
],
"docs_reference_titles": "Manage secret scanning alerts"
},
+ {
+ "action": "secret_scanning_alert.metadata_create",
+ "description": "Metadata was added to a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.metadata_remove",
+ "description": "Metadata was removed from a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
{
"action": "secret_scanning_alert.public_leak",
"description": "A secret scanning alert was leaked in a public repo.",
@@ -32409,6 +33230,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -35112,6 +35934,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -35119,6 +35942,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
@@ -35168,6 +35992,71 @@
],
"docs_reference_titles": "Understanding GitHub Actions"
},
+ {
+ "action": "workflows.debugger_session_completed",
+ "description": "An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "completed_at",
+ "created_at",
+ "operation_type",
+ "started_at"
+ ]
+ },
+ {
+ "action": "workflows.debugger_session_started",
+ "description": "An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "started_at"
+ ]
+ },
{
"action": "workflows.delete_workflow_run",
"description": "A workflow run was deleted.",
diff --git a/src/audit-logs/data/ghec/organization.json b/src/audit-logs/data/ghec/organization.json
index fad1c30d62e3..f60139009b56 100644
--- a/src/audit-logs/data/ghec/organization.json
+++ b/src/audit-logs/data/ghec/organization.json
@@ -425,6 +425,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -595,6 +596,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -629,6 +631,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -733,6 +736,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -1860,6 +1864,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -2146,6 +2151,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2296,6 +2302,38 @@
"previous_value"
]
},
+ {
+ "action": "copilot.code_review_organization_settings_updated",
+ "description": "Copilot code review settings were updated for an organization.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type"
+ ]
+ },
{
"action": "copilot.code_review_repository_settings_updated",
"description": "Copilot code review settings were updated for a repository.",
@@ -2361,6 +2399,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -3275,6 +3314,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -3313,10 +3353,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3354,6 +3396,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3387,6 +3430,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3889,6 +3933,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4565,6 +4610,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4601,6 +4647,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4635,6 +4682,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -5315,6 +5363,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5536,7 +5587,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -5620,6 +5672,43 @@
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
+ {
+ "action": "integration.update",
+ "description": "A GitHub App was updated.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "application_client_id",
+ "created_at",
+ "integration",
+ "name",
+ "oauth_application_id",
+ "operation_type"
+ ]
+ },
{
"action": "ip_allow_list.disable",
"description": "An IP allow list was disabled.",
@@ -6992,7 +7081,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -7165,6 +7255,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -8013,6 +8104,41 @@
],
"docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
},
+ {
+ "action": "oauth_application.update_token_expiration",
+ "description": "The token expiration setting for an OAuth application was updated.",
+ "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application",
+ "oauth_application_id",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
+ },
{
"action": "org.accept_business_invitation",
"description": "An invitation sent to an organization to join an enterprise was accepted.",
@@ -8075,6 +8201,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -8218,7 +8345,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8888,6 +9016,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -8920,6 +9049,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9484,6 +9614,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9517,8 +9648,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9549,6 +9682,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9616,9 +9750,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -9649,6 +9785,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9717,6 +9854,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10177,6 +10315,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10353,6 +10492,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -10386,6 +10526,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -10513,10 +10654,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -12269,7 +12412,8 @@
"user_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "topic"
]
},
{
@@ -12333,6 +12477,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12368,10 +12513,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -12402,8 +12549,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12532,8 +12681,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12870,7 +13021,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12905,7 +13057,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13393,6 +13546,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13428,10 +13582,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -13499,6 +13655,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13607,6 +13764,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13682,7 +13840,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -13749,6 +13908,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13784,6 +13944,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -14697,7 +14858,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14730,7 +14891,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14762,7 +14923,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14795,7 +14956,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -15054,7 +15215,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -16182,6 +16344,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -17082,10 +17245,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -17123,7 +17288,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -18251,6 +18417,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18930,6 +19097,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19405,8 +19573,8 @@
]
},
{
- "action": "repo.code_scanning_ai_findings_disabled",
- "description": "AI-powered findings for code scanning were disabled for a repository.",
+ "action": "repo.code_quality_disabled",
+ "description": "Code Quality was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19433,13 +19601,16 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "topic",
+ "user_programmatic_access_name"
]
},
{
- "action": "repo.code_scanning_ai_findings_enabled",
- "description": "AI-powered findings for code scanning were enabled for a repository.",
+ "action": "repo.code_quality_enabled",
+ "description": "Code Quality was enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19464,16 +19635,19 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
- "action": "repo.code_scanning_analysis_deleted",
- "description": "Code scanning analysis for a repository was deleted.",
- "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository",
+ "action": "repo.code_quality_updated",
+ "description": "Code Quality was updated for a repository.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -19499,19 +19673,16 @@
"user_agent",
"actor_is_agent",
"actor_is_bot",
- "category",
"created_at",
"oauth_application_id",
"operation_type",
"public_repo",
- "tool",
"user_programmatic_access_name"
- ],
- "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository"
+ ]
},
{
- "action": "repo.code_scanning_autofix_disabled",
- "description": "Autofix for code scanning alerts was disabled for a repository.",
+ "action": "repo.code_scanning_ai_findings_disabled",
+ "description": "AI-powered findings for code scanning were disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19538,13 +19709,14 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
},
{
- "action": "repo.code_scanning_autofix_enabled",
- "description": "Autofix for code scanning alerts was enabled for a repository.",
+ "action": "repo.code_scanning_ai_findings_enabled",
+ "description": "AI-powered findings for code scanning were enabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19571,14 +19743,15 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
},
{
- "action": "repo.code_scanning_autofix_third_party_tools_disabled",
- "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
- "docs_reference_links": "N/A",
+ "action": "repo.code_scanning_analysis_deleted",
+ "description": "Code scanning analysis for a repository was deleted.",
+ "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository",
"fields": [
"@timestamp",
"_document_id",
@@ -19602,15 +19775,21 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
+ "category",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
- ]
+ "public_repo",
+ "tool",
+ "user_programmatic_access_name"
+ ],
+ "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository"
},
{
- "action": "repo.code_scanning_autofix_third_party_tools_enabled",
- "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
+ "action": "repo.code_scanning_autofix_disabled",
+ "description": "Autofix for code scanning alerts was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -19642,9 +19821,9 @@
]
},
{
- "action": "repo.code_scanning_configuration_for_branch_deleted",
- "description": "A code scanning configuration for a branch of a repository was deleted.",
- "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch",
+ "action": "repo.code_scanning_autofix_enabled",
+ "description": "Autofix for code scanning alerts was enabled for a repository.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -19669,17 +19848,116 @@
"user_id",
"user_agent",
"actor_is_bot",
- "branch",
- "category",
"created_at",
"operation_type",
- "public_repo",
- "tool"
- ],
- "docs_reference_titles": "Resolving code scanning alerts"
+ "public_repo"
+ ]
},
{
- "action": "repo.code_scanning_delegated_alert_dismissal_disabled",
+ "action": "repo.code_scanning_autofix_third_party_tools_disabled",
+ "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_autofix_third_party_tools_enabled",
+ "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo"
+ ]
+ },
+ {
+ "action": "repo.code_scanning_configuration_for_branch_deleted",
+ "description": "A code scanning configuration for a branch of a repository was deleted.",
+ "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "branch",
+ "category",
+ "created_at",
+ "operation_type",
+ "public_repo",
+ "tool"
+ ],
+ "docs_reference_titles": "Resolving code scanning alerts"
+ },
+ {
+ "action": "repo.code_scanning_delegated_alert_dismissal_disabled",
"description": "Prevention of direct alert dismissal for code scanning was disabled for a repository.",
"docs_reference_links": "N/A",
"fields": [
@@ -21376,6 +21654,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -21419,6 +21698,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -21570,6 +21850,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -21651,7 +21932,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -22149,6 +22431,42 @@
],
"docs_reference_titles": "Repository security advisories"
},
+ {
+ "action": "repository_advisory.create_confidential_comment",
+ "description": "Someone created a confidential comment on a repository security advisory.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type",
+ "public_repo",
+ "repository_advisory",
+ "repository_advisory_comment_id",
+ "repository_advisory_id"
+ ]
+ },
{
"action": "repository_advisory.cve_request",
"description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.",
@@ -22321,6 +22639,43 @@
"user_programmatic_access_name"
]
},
+ {
+ "action": "repository_advisory.read_confidential_comments",
+ "description": "Confidential comments on a repository security advisory were read by someone.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "confidential_comment_count",
+ "created_at",
+ "operation_type",
+ "public_repo",
+ "repository_advisory",
+ "repository_advisory_id",
+ "surface"
+ ]
+ },
{
"action": "repository_advisory.reopen",
"description": "Someone reopened as draft security advisory.",
@@ -22353,7 +22708,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -23214,6 +23570,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -23541,7 +23898,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23574,8 +23932,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23712,7 +24072,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -24123,7 +24484,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24945,6 +25307,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -25132,6 +25495,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25169,6 +25533,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25278,6 +25643,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -25395,7 +25761,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -25442,9 +25809,9 @@
"docs_reference_titles": "Managing custom repository roles for an organization"
},
{
- "action": "secret_scanning_alert.assign",
- "description": "A user was assigned to a secret scanning alert.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.add_port",
+ "description": "A forwarded port was added to a sandbox.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25469,18 +25836,14 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.create",
- "description": "GitHub detected a secret and created a secret scanning alert.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.create",
+ "description": "A sandbox was created.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25505,18 +25868,14 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.delete",
- "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.delete",
+ "description": "A sandbox was deleted.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25541,19 +25900,14 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "reason",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.public_leak",
- "description": "A secret scanning alert was leaked in a public repo.",
- "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "action": "sandbox.generate_token",
+ "description": "A token was generated for a sandbox.",
+ "docs_reference_links": "N/A",
"fields": [
"@timestamp",
"_document_id",
@@ -25578,17 +25932,13 @@
"user_id",
"user_agent",
"created_at",
- "multi_repo",
- "number",
- "publicly_leaked",
- "secret_type",
- "secret_type_display_name"
- ],
- "docs_reference_titles": "Manage secret scanning alerts"
+ "operation_type",
+ "sandbox_id"
+ ]
},
{
- "action": "secret_scanning_alert.reopen",
- "description": "A secret scanning alert was reopened.",
+ "action": "sandbox.remove_port",
+ "description": "A forwarded port was removed from a sandbox.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -25613,17 +25963,330 @@
"user",
"user_id",
"user_agent",
- "actor_is_agent",
- "actor_is_bot",
"created_at",
- "multi_repo",
- "number",
- "oauth_application_id",
"operation_type",
- "publicly_leaked",
- "public_repo",
- "resolution",
- "secret_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.resume",
+ "description": "A sandbox was resumed.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "sandbox.stop",
+ "description": "A sandbox was stopped.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "sandbox_id"
+ ]
+ },
+ {
+ "action": "secret_scanning_alert.assign",
+ "description": "A user was assigned to a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.create",
+ "description": "GitHub detected a secret and created a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.delete",
+ "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "reason",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.metadata_create",
+ "description": "Metadata was added to a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.metadata_remove",
+ "description": "Metadata was removed from a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.public_leak",
+ "description": "A secret scanning alert was leaked in a public repo.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.reopen",
+ "description": "A secret scanning alert was reopened.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "multi_repo",
+ "number",
+ "oauth_application_id",
+ "operation_type",
+ "publicly_leaked",
+ "public_repo",
+ "resolution",
+ "secret_type",
"secret_type_display_name",
"user_programmatic_access_name"
]
@@ -26369,6 +27032,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -29199,6 +29863,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -29206,6 +29871,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
@@ -29255,6 +29921,71 @@
],
"docs_reference_titles": "Understanding GitHub Actions"
},
+ {
+ "action": "workflows.debugger_session_completed",
+ "description": "An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "completed_at",
+ "created_at",
+ "operation_type",
+ "started_at"
+ ]
+ },
+ {
+ "action": "workflows.debugger_session_started",
+ "description": "An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "operation_type",
+ "started_at"
+ ]
+ },
{
"action": "workflows.delete_workflow_run",
"description": "A workflow run was deleted.",
diff --git a/src/audit-logs/data/ghec/user.json b/src/audit-logs/data/ghec/user.json
index c4b66f719bf9..a35f7517e21c 100644
--- a/src/audit-logs/data/ghec/user.json
+++ b/src/audit-logs/data/ghec/user.json
@@ -307,6 +307,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -718,6 +719,40 @@
"operation_type"
]
},
+ {
+ "action": "business.add_member",
+ "description": "A member was added to an enterprise.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "created_at",
+ "name",
+ "operation_type"
+ ]
+ },
{
"action": "business.add_support_entitlee",
"description": "A support entitlement was added to a member of an enterprise.",
@@ -1069,6 +1104,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1138,6 +1174,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -1210,6 +1247,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1243,6 +1281,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -1316,7 +1355,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1758,6 +1798,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1904,6 +1945,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2019,6 +2061,38 @@
"seat_assignment"
]
},
+ {
+ "action": "copilot.code_review_organization_settings_updated",
+ "description": "Copilot code review settings were updated for an organization.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "operation_type"
+ ]
+ },
{
"action": "copilot.code_review_repository_settings_updated",
"description": "Copilot code review settings were updated for a repository.",
@@ -2505,6 +2579,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -2543,10 +2618,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -2584,6 +2661,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3550,6 +3628,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3586,6 +3665,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3620,6 +3700,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3692,6 +3773,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -4297,6 +4379,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4518,7 +4603,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -4602,6 +4688,43 @@
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
+ {
+ "action": "integration.update",
+ "description": "A GitHub App was updated.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_agent",
+ "actor_is_bot",
+ "application_client_id",
+ "created_at",
+ "integration",
+ "name",
+ "oauth_application_id",
+ "operation_type"
+ ]
+ },
{
"action": "issue_dependencies.blocked_by_add",
"description": "An issue was marked as blocked by another issue.",
@@ -6178,6 +6301,41 @@
],
"docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
},
+ {
+ "action": "oauth_application.update_token_expiration",
+ "description": "The token expiration setting for an OAuth application was updated.",
+ "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "created_at",
+ "oauth_application",
+ "oauth_application_id",
+ "operation_type"
+ ],
+ "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app"
+ },
{
"action": "oauth_authorization.create",
"description": "An authorization for an OAuth application was created.",
@@ -6284,8 +6442,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -6706,6 +6866,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6741,10 +6902,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -6812,6 +6975,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6888,6 +7052,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -6963,7 +7128,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -7558,6 +7724,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -8592,10 +8759,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -8633,7 +8802,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -8827,6 +8997,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -10569,6 +10740,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10612,6 +10784,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -10763,6 +10936,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -10844,7 +11018,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -11727,7 +11902,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11758,7 +11934,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11789,7 +11966,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11820,7 +11998,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11851,7 +12030,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11882,7 +12062,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -11913,7 +12094,8 @@
"user_id",
"user_agent",
"created_at",
- "operation_type"
+ "operation_type",
+ "sandbox_id"
]
},
{
@@ -13132,6 +13314,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -13932,6 +14115,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -14105,6 +14289,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -14270,7 +14455,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14297,12 +14482,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14328,12 +14514,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14359,6 +14546,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -14430,7 +14618,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14457,12 +14645,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14488,13 +14677,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14520,6 +14710,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -15472,6 +15663,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghes-3.17/enterprise.json b/src/audit-logs/data/ghes-3.17/enterprise.json
index 0a402974b44a..5eb83165b22d 100644
--- a/src/audit-logs/data/ghes-3.17/enterprise.json
+++ b/src/audit-logs/data/ghes-3.17/enterprise.json
@@ -415,13 +415,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -1644,6 +1647,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
@@ -1717,7 +1721,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -2106,6 +2111,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2139,6 +2145,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2403,6 +2410,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2436,6 +2444,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2682,6 +2691,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -2754,6 +2764,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -2787,6 +2798,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -2860,7 +2872,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -3836,6 +3849,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3982,6 +3996,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -5172,6 +5187,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -5359,6 +5375,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -6687,6 +6704,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -6730,6 +6748,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -7352,6 +7371,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -7388,6 +7408,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -7422,6 +7443,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -7494,6 +7516,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -8174,6 +8197,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -8395,7 +8421,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -9919,11 +9946,13 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -10102,8 +10131,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -10169,6 +10200,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -10279,7 +10311,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -10946,6 +10979,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11013,9 +11047,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -11046,6 +11082,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11114,6 +11151,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11361,6 +11399,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -11488,10 +11527,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -12432,6 +12473,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12467,10 +12509,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -12501,8 +12545,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12631,8 +12677,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12907,7 +12955,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12942,7 +12991,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13402,6 +13452,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13510,6 +13561,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13585,7 +13637,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -14918,6 +14971,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -16020,10 +16074,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -16061,7 +16117,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -17189,6 +17246,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -17868,6 +17926,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -18765,6 +18824,7 @@
"user_agent",
"created_at",
"operation_type",
+ "public_repo",
"visibility"
]
},
@@ -19416,6 +19476,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type",
"public_repo",
@@ -20420,6 +20481,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -20501,7 +20563,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -21529,7 +21592,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21562,8 +21626,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21700,7 +21766,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21961,7 +22028,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -22715,6 +22783,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -22752,6 +22821,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -22785,6 +22855,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -23349,6 +23420,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -25001,6 +25073,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -26422,6 +26495,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -26691,6 +26765,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -26856,7 +26931,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -26883,12 +26958,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -26914,12 +26990,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -26945,6 +27022,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -27016,7 +27094,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27043,12 +27121,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27074,13 +27153,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27106,6 +27186,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -28286,6 +28367,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
@@ -28873,6 +28955,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -28880,6 +28963,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.17/organization.json b/src/audit-logs/data/ghes-3.17/organization.json
index e52b65ab4c3f..1958541bd6eb 100644
--- a/src/audit-logs/data/ghes-3.17/organization.json
+++ b/src/audit-logs/data/ghes-3.17/organization.json
@@ -1445,6 +1445,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1731,6 +1732,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -1912,6 +1914,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -3339,6 +3342,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4015,6 +4019,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4051,6 +4056,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4085,6 +4091,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4765,6 +4772,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4986,7 +4996,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6110,7 +6121,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -6283,6 +6295,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -7193,6 +7206,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -7303,7 +7317,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8311,6 +8326,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8344,8 +8360,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -8376,6 +8394,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8443,9 +8462,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -8476,6 +8497,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8544,6 +8566,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9109,6 +9132,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -9142,6 +9166,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -9269,10 +9294,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -10958,6 +10985,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10993,10 +11021,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -11027,8 +11057,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -11157,8 +11189,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -11495,7 +11529,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -11530,7 +11565,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -11990,6 +12026,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12098,6 +12135,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -12173,7 +12211,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -12240,6 +12279,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -12275,6 +12315,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13040,7 +13081,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13073,7 +13114,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13105,7 +13146,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13138,7 +13179,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13397,7 +13438,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -14525,6 +14567,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -15425,10 +15468,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -15466,7 +15511,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -16594,6 +16640,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -17273,6 +17320,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19699,6 +19747,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -19780,7 +19829,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -20482,7 +20532,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -21046,6 +21097,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -21373,7 +21425,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21406,8 +21459,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21544,7 +21599,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21879,7 +21935,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -22731,6 +22788,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -22768,6 +22826,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -22877,6 +22936,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -22994,7 +23054,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -23789,6 +23850,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -26453,6 +26515,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -26460,6 +26523,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.17/user.json b/src/audit-logs/data/ghes-3.17/user.json
index 1a4923449495..716859e29392 100644
--- a/src/audit-logs/data/ghes-3.17/user.json
+++ b/src/audit-logs/data/ghes-3.17/user.json
@@ -578,6 +578,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -650,6 +651,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -683,6 +685,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -756,7 +759,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1198,6 +1202,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1344,6 +1349,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2729,6 +2735,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -2765,6 +2772,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -2799,6 +2807,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -2871,6 +2880,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -3476,6 +3486,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -3697,7 +3710,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -5029,8 +5043,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -5488,6 +5504,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5564,6 +5581,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -5639,7 +5657,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -6234,6 +6253,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -7268,10 +7288,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -7309,7 +7331,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -7503,6 +7526,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -9365,6 +9389,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -9446,7 +9471,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -11421,6 +11447,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -12221,6 +12248,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -12394,6 +12422,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -12559,7 +12588,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12586,12 +12615,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12617,12 +12647,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12648,6 +12679,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -12719,7 +12751,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12746,12 +12778,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12777,13 +12810,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12809,6 +12843,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -13761,6 +13796,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghes-3.18/enterprise.json b/src/audit-logs/data/ghes-3.18/enterprise.json
index 3fcb978d16e8..330b08cb7f93 100644
--- a/src/audit-logs/data/ghes-3.18/enterprise.json
+++ b/src/audit-logs/data/ghes-3.18/enterprise.json
@@ -415,13 +415,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -1644,6 +1647,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
@@ -1717,7 +1721,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -2106,6 +2111,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2139,6 +2145,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2403,6 +2410,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2436,6 +2444,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2682,6 +2691,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -2754,6 +2764,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -2787,6 +2798,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -2860,7 +2872,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -3836,6 +3849,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3982,6 +3996,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -4727,6 +4742,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5252,6 +5268,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -5439,6 +5456,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -6767,6 +6785,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -6810,6 +6829,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -7432,6 +7452,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -7468,6 +7489,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -7502,6 +7524,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -7574,6 +7597,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -8254,6 +8278,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -8475,7 +8502,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -9999,11 +10027,13 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -10182,8 +10212,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -10249,6 +10281,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -10359,7 +10392,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -11026,6 +11060,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11093,9 +11128,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -11126,6 +11163,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11194,6 +11232,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11441,6 +11480,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -11568,10 +11608,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -12512,6 +12554,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12547,10 +12590,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -12581,8 +12626,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12711,8 +12758,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12987,7 +13036,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13022,7 +13072,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13482,6 +13533,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13590,6 +13642,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13665,7 +13718,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -14998,6 +15052,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -16100,10 +16155,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -16141,7 +16198,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -17269,6 +17327,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -17948,6 +18007,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -18845,6 +18905,7 @@
"user_agent",
"created_at",
"operation_type",
+ "public_repo",
"visibility"
]
},
@@ -19496,6 +19557,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type",
"public_repo",
@@ -20500,6 +20562,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -20581,7 +20644,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -21683,7 +21747,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21716,8 +21781,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21854,7 +21921,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22115,7 +22183,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -22869,6 +22938,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -22906,6 +22976,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -22939,6 +23010,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -23503,6 +23575,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -25155,6 +25228,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -26576,6 +26650,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -26845,6 +26920,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -27010,7 +27086,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27037,12 +27113,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27068,12 +27145,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27099,6 +27177,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -27170,7 +27249,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27197,12 +27276,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27228,13 +27308,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -27260,6 +27341,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -28440,6 +28522,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
@@ -29027,6 +29110,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -29034,6 +29118,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.18/organization.json b/src/audit-logs/data/ghes-3.18/organization.json
index be8181bc2196..1b150d651e8d 100644
--- a/src/audit-logs/data/ghes-3.18/organization.json
+++ b/src/audit-logs/data/ghes-3.18/organization.json
@@ -1445,6 +1445,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1731,6 +1732,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -1912,6 +1914,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -2784,6 +2787,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3419,6 +3423,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4095,6 +4100,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4131,6 +4137,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4165,6 +4172,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4845,6 +4853,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5066,7 +5077,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6312,7 +6324,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -6485,6 +6498,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -7395,6 +7409,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -7538,7 +7553,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8578,6 +8594,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8611,8 +8628,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -8643,6 +8662,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8710,9 +8730,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -8743,6 +8765,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8811,6 +8834,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9376,6 +9400,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -9409,6 +9434,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -9536,10 +9562,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -11258,6 +11286,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11293,10 +11322,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -11327,8 +11358,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -11457,8 +11490,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -11795,7 +11830,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -11830,7 +11866,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12290,6 +12327,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12398,6 +12436,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -12473,7 +12512,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -12540,6 +12580,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -12575,6 +12616,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13340,7 +13382,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13373,7 +13415,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13405,7 +13447,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13438,7 +13480,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13697,7 +13739,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -14825,6 +14868,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -15725,10 +15769,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -15766,7 +15812,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -16894,6 +16941,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -17573,6 +17621,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19999,6 +20048,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -20080,7 +20130,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -20782,7 +20833,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -21420,6 +21472,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -21747,7 +21800,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21780,8 +21834,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -21918,7 +21974,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22253,7 +22310,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -23105,6 +23163,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -23142,6 +23201,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -23251,6 +23311,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -23368,7 +23429,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -24233,6 +24295,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -26897,6 +26960,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -26904,6 +26968,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.18/user.json b/src/audit-logs/data/ghes-3.18/user.json
index e3d4a23fdb66..9ed73d08f6ca 100644
--- a/src/audit-logs/data/ghes-3.18/user.json
+++ b/src/audit-logs/data/ghes-3.18/user.json
@@ -578,6 +578,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -650,6 +651,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -683,6 +685,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -756,7 +759,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1198,6 +1202,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1344,6 +1349,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2774,6 +2780,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -2810,6 +2817,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -2844,6 +2852,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -2916,6 +2925,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -3521,6 +3531,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -3742,7 +3755,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -5074,8 +5088,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -5533,6 +5549,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5609,6 +5626,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -5684,7 +5702,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -6279,6 +6298,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -7313,10 +7333,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -7354,7 +7376,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -7548,6 +7571,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -9410,6 +9434,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -9491,7 +9516,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -11466,6 +11492,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -12266,6 +12293,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -12439,6 +12467,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -12604,7 +12633,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12631,12 +12660,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12662,12 +12692,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12693,6 +12724,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -12764,7 +12796,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12791,12 +12823,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12822,13 +12855,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -12854,6 +12888,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -13806,6 +13841,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghes-3.19/enterprise.json b/src/audit-logs/data/ghes-3.19/enterprise.json
index d521c4bac40d..2387c70f32b9 100644
--- a/src/audit-logs/data/ghes-3.19/enterprise.json
+++ b/src/audit-logs/data/ghes-3.19/enterprise.json
@@ -415,13 +415,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -508,6 +511,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -1854,6 +1858,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
@@ -1927,7 +1932,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -2316,6 +2322,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2349,6 +2356,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2613,6 +2621,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2646,6 +2655,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2957,6 +2967,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3026,6 +3037,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -3098,6 +3110,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3131,6 +3144,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -3204,7 +3218,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -4180,6 +4195,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4326,6 +4342,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -5071,6 +5088,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5596,6 +5614,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -5783,6 +5802,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -5920,6 +5940,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"enterprise_role_id",
@@ -7298,6 +7319,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -7341,6 +7363,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -7963,6 +7986,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -7999,6 +8023,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8033,6 +8058,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8105,6 +8131,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -8785,6 +8812,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -9006,7 +9036,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -10678,11 +10709,13 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -10861,8 +10894,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -10928,6 +10963,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -11038,7 +11074,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -11705,6 +11742,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11772,9 +11810,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -11805,6 +11845,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11873,6 +11914,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12120,6 +12162,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -12247,10 +12290,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -13191,6 +13236,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13226,10 +13272,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -13260,8 +13308,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -13390,8 +13440,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -13666,7 +13718,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13701,7 +13754,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -14189,6 +14243,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -14224,10 +14279,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -14295,6 +14352,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -14403,6 +14461,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -14478,7 +14537,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -14909,6 +14969,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"allowed_values",
"created_at",
@@ -16013,6 +16074,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -17115,10 +17177,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -17156,7 +17220,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -18284,6 +18349,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18963,6 +19029,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19860,6 +19927,7 @@
"user_agent",
"created_at",
"operation_type",
+ "public_repo",
"visibility"
]
},
@@ -20511,6 +20579,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type",
"public_repo",
@@ -21395,6 +21464,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -21438,6 +21508,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -21589,6 +21660,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -21670,7 +21742,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -22772,7 +22845,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22805,8 +22879,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22943,7 +23019,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23204,7 +23281,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -23958,6 +24036,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -23995,6 +24074,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24028,6 +24108,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -24664,6 +24745,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -26412,6 +26494,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -27905,6 +27988,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -28214,6 +28298,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -28379,7 +28464,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28406,12 +28491,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28437,12 +28523,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28468,6 +28555,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -28539,7 +28627,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28566,12 +28654,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28597,13 +28686,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28629,6 +28719,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -29809,6 +29900,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
@@ -30396,6 +30488,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -30403,6 +30496,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.19/organization.json b/src/audit-logs/data/ghes-3.19/organization.json
index 9e0dfb21a1ad..396534e72375 100644
--- a/src/audit-logs/data/ghes-3.19/organization.json
+++ b/src/audit-logs/data/ghes-3.19/organization.json
@@ -425,6 +425,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -1655,6 +1656,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1941,6 +1943,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2122,6 +2125,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -3028,6 +3032,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3663,6 +3668,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4339,6 +4345,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4375,6 +4382,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4409,6 +4417,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -5089,6 +5098,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5310,7 +5322,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6704,7 +6717,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -6877,6 +6891,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -7787,6 +7802,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -7930,7 +7946,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -9035,6 +9052,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9068,8 +9086,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9100,6 +9120,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9167,9 +9188,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -9200,6 +9223,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9268,6 +9292,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9833,6 +9858,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -9866,6 +9892,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -9993,10 +10020,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -11715,7 +11744,8 @@
"user_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "topic"
]
},
{
@@ -11779,6 +11809,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11814,10 +11845,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -11848,8 +11881,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -11978,8 +12013,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12316,7 +12353,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12351,7 +12389,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12839,6 +12878,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12874,10 +12914,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -12945,6 +12987,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13053,6 +13096,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13128,7 +13172,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -13195,6 +13240,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13230,6 +13276,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -14108,7 +14155,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14141,7 +14188,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14173,7 +14220,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14206,7 +14253,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14465,7 +14512,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -15593,6 +15641,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -16493,10 +16542,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -16534,7 +16585,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -17662,6 +17714,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18341,6 +18394,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -20721,6 +20775,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -20764,6 +20819,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -20915,6 +20971,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -20996,7 +21053,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -21698,7 +21756,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -22336,6 +22395,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -22663,7 +22723,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22696,8 +22757,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22834,7 +22897,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23169,7 +23233,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24021,6 +24086,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24058,6 +24124,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24167,6 +24234,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -24284,7 +24352,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -25258,6 +25327,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -28034,6 +28104,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -28041,6 +28112,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.19/user.json b/src/audit-logs/data/ghes-3.19/user.json
index 4b408ede09e3..2da764234c97 100644
--- a/src/audit-logs/data/ghes-3.19/user.json
+++ b/src/audit-logs/data/ghes-3.19/user.json
@@ -307,6 +307,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -788,6 +789,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -857,6 +859,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -929,6 +932,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -962,6 +966,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -1035,7 +1040,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1477,6 +1483,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1623,6 +1630,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -3053,6 +3061,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3089,6 +3098,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3123,6 +3133,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3195,6 +3206,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -3800,6 +3812,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4021,7 +4036,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -5501,8 +5517,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -5923,6 +5941,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5958,10 +5977,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -6029,6 +6050,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6105,6 +6127,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -6180,7 +6203,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -6775,6 +6799,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -7809,10 +7834,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -7850,7 +7877,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -8044,6 +8072,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -9786,6 +9815,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9829,6 +9859,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -9980,6 +10011,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -10061,7 +10093,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -12132,6 +12165,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -12932,6 +12966,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -13105,6 +13140,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -13270,7 +13306,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13297,12 +13333,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13328,12 +13365,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13359,6 +13397,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -13430,7 +13469,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13457,12 +13496,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13488,13 +13528,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13520,6 +13561,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -14472,6 +14514,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghes-3.20/enterprise.json b/src/audit-logs/data/ghes-3.20/enterprise.json
index 41141e7d2b85..175d0e0bbea2 100644
--- a/src/audit-logs/data/ghes-3.20/enterprise.json
+++ b/src/audit-logs/data/ghes-3.20/enterprise.json
@@ -415,13 +415,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -508,6 +511,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -1887,6 +1891,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
@@ -1960,7 +1965,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -2349,6 +2355,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2382,6 +2389,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2646,6 +2654,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2679,6 +2688,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2990,6 +3000,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3059,6 +3070,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -3131,6 +3143,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3164,6 +3177,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -3237,7 +3251,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -4213,6 +4228,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4359,6 +4375,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -5104,6 +5121,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5629,6 +5647,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -5816,6 +5835,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -5953,6 +5973,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"enterprise_role_id",
@@ -7331,6 +7352,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -7374,6 +7396,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -7996,6 +8019,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8032,6 +8056,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8066,6 +8091,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8138,6 +8164,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -8818,6 +8845,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -9039,7 +9069,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -10711,11 +10742,13 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -10894,8 +10927,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -10961,6 +10996,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -11071,7 +11107,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -11738,6 +11775,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11805,9 +11843,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -11838,6 +11878,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11906,6 +11947,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12153,6 +12195,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -12280,10 +12323,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -13224,6 +13269,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13259,10 +13305,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -13293,8 +13341,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -13423,8 +13473,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -13699,7 +13751,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13734,7 +13787,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -14222,6 +14276,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -14257,10 +14312,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -14328,6 +14385,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -14436,6 +14494,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -14511,7 +14570,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -14942,6 +15002,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"allowed_values",
"created_at",
@@ -16046,6 +16107,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -17148,10 +17210,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -17189,7 +17253,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -18317,6 +18382,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18996,6 +19062,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19893,6 +19960,7 @@
"user_agent",
"created_at",
"operation_type",
+ "public_repo",
"visibility"
]
},
@@ -20544,6 +20612,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type",
"public_repo",
@@ -21428,6 +21497,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -21471,6 +21541,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -21622,6 +21693,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -21703,7 +21775,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -22805,7 +22878,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22838,8 +22912,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22976,7 +23052,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23237,7 +23314,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -23991,6 +24069,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24028,6 +24107,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24061,6 +24141,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -24697,6 +24778,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -26445,6 +26527,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -27938,6 +28021,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -28247,6 +28331,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -28412,7 +28497,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28439,12 +28524,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28470,12 +28556,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28501,6 +28588,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -28572,7 +28660,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28599,12 +28687,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28630,13 +28719,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -28662,6 +28752,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -29842,6 +29933,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
@@ -30429,6 +30521,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -30436,6 +30529,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.20/organization.json b/src/audit-logs/data/ghes-3.20/organization.json
index dbd370519e0b..5b7313601621 100644
--- a/src/audit-logs/data/ghes-3.20/organization.json
+++ b/src/audit-logs/data/ghes-3.20/organization.json
@@ -425,6 +425,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -1688,6 +1689,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1974,6 +1976,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2155,6 +2158,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -2965,6 +2969,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3600,6 +3605,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4276,6 +4282,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4312,6 +4319,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4346,6 +4354,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -5026,6 +5035,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5247,7 +5259,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6641,7 +6654,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -6814,6 +6828,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -7724,6 +7739,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -7867,7 +7883,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8972,6 +8989,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9005,8 +9023,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9037,6 +9057,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9104,9 +9125,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -9137,6 +9160,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9205,6 +9229,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9770,6 +9795,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -9803,6 +9829,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -9930,10 +9957,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -11652,7 +11681,8 @@
"user_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "topic"
]
},
{
@@ -11716,6 +11746,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -11751,10 +11782,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -11785,8 +11818,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -11915,8 +11950,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12253,7 +12290,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12288,7 +12326,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12776,6 +12815,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12811,10 +12851,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -12882,6 +12924,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12990,6 +13033,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13065,7 +13109,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -13132,6 +13177,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13167,6 +13213,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -14045,7 +14092,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14078,7 +14125,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14110,7 +14157,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14143,7 +14190,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14402,7 +14449,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -15530,6 +15578,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -16430,10 +16479,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -16471,7 +16522,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -17599,6 +17651,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18278,6 +18331,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -20658,6 +20712,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -20701,6 +20756,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -20852,6 +20908,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -20933,7 +20990,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -21635,7 +21693,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -22273,6 +22332,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -22600,7 +22660,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22633,8 +22694,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -22771,7 +22834,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23106,7 +23170,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -23958,6 +24023,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -23995,6 +24061,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24104,6 +24171,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -24221,7 +24289,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -25195,6 +25264,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -27971,6 +28041,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -27978,6 +28049,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.20/user.json b/src/audit-logs/data/ghes-3.20/user.json
index 54d72dab2725..44db7f4fc469 100644
--- a/src/audit-logs/data/ghes-3.20/user.json
+++ b/src/audit-logs/data/ghes-3.20/user.json
@@ -307,6 +307,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -821,6 +822,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -890,6 +892,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -962,6 +965,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -995,6 +999,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -1068,7 +1073,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1510,6 +1516,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1656,6 +1663,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -3086,6 +3094,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3122,6 +3131,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3156,6 +3166,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3228,6 +3239,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -3833,6 +3845,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4054,7 +4069,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -5534,8 +5550,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -5956,6 +5974,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -5991,10 +6010,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -6062,6 +6083,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6138,6 +6160,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -6213,7 +6236,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -6808,6 +6832,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -7842,10 +7867,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -7883,7 +7910,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -8077,6 +8105,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -9819,6 +9848,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9862,6 +9892,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -10013,6 +10044,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -10094,7 +10126,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -12165,6 +12198,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -12965,6 +12999,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -13138,6 +13173,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -13303,7 +13339,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13330,12 +13366,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13361,12 +13398,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13392,6 +13430,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -13463,7 +13502,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13490,12 +13529,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13521,13 +13561,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -13553,6 +13594,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -14505,6 +14547,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghes-3.21/enterprise.json b/src/audit-logs/data/ghes-3.21/enterprise.json
index d4c5d9e56406..74402136c677 100644
--- a/src/audit-logs/data/ghes-3.21/enterprise.json
+++ b/src/audit-logs/data/ghes-3.21/enterprise.json
@@ -415,13 +415,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -508,6 +511,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -2094,6 +2098,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
@@ -2134,6 +2139,41 @@
"operation_type"
]
},
+ {
+ "action": "business.members_limit_warning",
+ "description": "An enterprise is approaching its members limit.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "count",
+ "created_at",
+ "limit",
+ "name",
+ "operation_type"
+ ]
+ },
{
"action": "business.organizations_limit_reached",
"description": "An enterprise has reached its organizations limit.",
@@ -2343,7 +2383,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -2768,6 +2809,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2801,6 +2843,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -3065,6 +3108,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -3098,6 +3142,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -3409,6 +3454,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3478,6 +3524,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -3550,6 +3597,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3583,6 +3631,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -3656,7 +3705,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -4632,6 +4682,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4778,6 +4829,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -5593,6 +5645,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -5631,10 +5684,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -5672,6 +5727,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -5705,6 +5761,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6097,6 +6154,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -6284,6 +6342,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -6421,6 +6480,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"enterprise_role_id",
@@ -7799,6 +7859,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -7842,6 +7903,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -8464,6 +8526,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8500,6 +8563,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8534,6 +8598,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8606,6 +8671,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -9286,6 +9352,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -9507,7 +9576,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -11432,11 +11502,13 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -11615,8 +11687,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -11682,6 +11756,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -11792,7 +11867,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -12459,6 +12535,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12526,9 +12603,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -12559,6 +12638,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12627,6 +12707,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12874,6 +12955,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -13001,10 +13083,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -13979,6 +14063,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -14014,10 +14099,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -14048,8 +14135,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -14178,8 +14267,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -14454,7 +14545,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -14489,7 +14581,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -14977,6 +15070,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -15012,10 +15106,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -15083,6 +15179,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -15191,6 +15288,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -15266,7 +15364,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -15697,6 +15796,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"allowed_values",
"created_at",
@@ -16801,6 +16901,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -17903,10 +18004,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -17944,7 +18047,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -19072,6 +19176,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -19751,6 +19856,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -20648,6 +20754,7 @@
"user_agent",
"created_at",
"operation_type",
+ "public_repo",
"visibility"
]
},
@@ -21299,6 +21406,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type",
"public_repo",
@@ -22183,6 +22291,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -22226,6 +22335,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -22377,6 +22487,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -22458,7 +22569,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -23560,7 +23672,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23593,8 +23706,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23731,7 +23846,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -24068,7 +24184,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24716,6 +24833,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -24903,6 +25021,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24940,6 +25059,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24973,6 +25093,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -25609,6 +25730,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -27357,6 +27479,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -28865,6 +28988,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -29174,6 +29298,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -29339,7 +29464,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29366,12 +29491,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29397,12 +29523,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29428,6 +29555,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -29499,7 +29627,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29526,12 +29654,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29557,13 +29686,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29589,6 +29719,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -30769,6 +30900,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
@@ -31356,6 +31488,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -31363,6 +31496,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.21/organization.json b/src/audit-logs/data/ghes-3.21/organization.json
index 0d70e6106f08..d19d5cc6aec7 100644
--- a/src/audit-logs/data/ghes-3.21/organization.json
+++ b/src/audit-logs/data/ghes-3.21/organization.json
@@ -425,6 +425,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -595,6 +596,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -629,6 +631,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -733,6 +736,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -1860,6 +1864,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -2146,6 +2151,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2327,6 +2333,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -3207,6 +3214,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -3245,10 +3253,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3286,6 +3296,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3319,6 +3330,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3821,6 +3833,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4497,6 +4510,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4533,6 +4547,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4567,6 +4582,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -5247,6 +5263,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5468,7 +5487,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6924,7 +6944,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -7097,6 +7118,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -8007,6 +8029,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -8150,7 +8173,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8820,6 +8844,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -8852,6 +8877,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9352,6 +9378,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9385,8 +9412,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9417,6 +9446,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9484,9 +9514,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -9517,6 +9549,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9585,6 +9618,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10045,6 +10079,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10221,6 +10256,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -10254,6 +10290,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -10381,10 +10418,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -12137,7 +12176,8 @@
"user_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "topic"
]
},
{
@@ -12201,6 +12241,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12236,10 +12277,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -12270,8 +12313,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12400,8 +12445,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12738,7 +12785,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12773,7 +12821,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13261,6 +13310,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13296,10 +13346,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -13367,6 +13419,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13475,6 +13528,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13550,7 +13604,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -13617,6 +13672,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13652,6 +13708,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -14565,7 +14622,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14598,7 +14655,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14630,7 +14687,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14663,7 +14720,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14922,7 +14979,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -16050,6 +16108,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -16950,10 +17009,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -16991,7 +17052,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -18119,6 +18181,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18798,6 +18861,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19301,6 +19365,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
@@ -19334,6 +19399,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
@@ -21244,6 +21310,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -21287,6 +21354,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -21438,6 +21506,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -21519,7 +21588,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -22221,7 +22291,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -23008,6 +23079,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -23335,7 +23407,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23368,8 +23441,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23506,7 +23581,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23917,7 +23993,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24739,6 +24816,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -24926,6 +25004,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -24963,6 +25042,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25072,6 +25152,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -25189,7 +25270,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -26163,6 +26245,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -28954,6 +29037,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -28961,6 +29045,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.21/user.json b/src/audit-logs/data/ghes-3.21/user.json
index 66b82f3add73..380168b1894a 100644
--- a/src/audit-logs/data/ghes-3.21/user.json
+++ b/src/audit-logs/data/ghes-3.21/user.json
@@ -307,6 +307,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -1069,6 +1070,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1138,6 +1140,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -1210,6 +1213,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1243,6 +1247,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -1316,7 +1321,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1758,6 +1764,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1904,6 +1911,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2471,6 +2479,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -2509,10 +2518,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -2550,6 +2561,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3516,6 +3528,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3552,6 +3565,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3586,6 +3600,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3658,6 +3673,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -4263,6 +4279,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4484,7 +4503,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6217,8 +6237,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -6639,6 +6661,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6674,10 +6697,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -6745,6 +6770,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6821,6 +6847,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -6896,7 +6923,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -7491,6 +7519,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -8525,10 +8554,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -8566,7 +8597,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -8760,6 +8792,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -10502,6 +10535,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10545,6 +10579,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -10696,6 +10731,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -10777,7 +10813,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -12848,6 +12885,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -13648,6 +13686,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -13821,6 +13860,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -13986,7 +14026,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14013,12 +14053,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14044,12 +14085,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14075,6 +14117,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -14146,7 +14189,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14173,12 +14216,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14204,13 +14248,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14236,6 +14281,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -15188,6 +15234,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/ghes-3.22/enterprise.json b/src/audit-logs/data/ghes-3.22/enterprise.json
index da5bf87de046..780528b4b32d 100644
--- a/src/audit-logs/data/ghes-3.22/enterprise.json
+++ b/src/audit-logs/data/ghes-3.22/enterprise.json
@@ -449,13 +449,16 @@
"audit_log_stream_sink_details",
"created_at",
"new_azure_blob_container",
+ "new_datadog_site",
"new_event_hub_instance",
"new_gc_bucket",
"new_s3_arn_role",
"new_s3_bucket",
"new_splunk_domain",
"new_splunk_port",
+ "oauth_application_id",
"old_azure_blob_container",
+ "old_datadog_site",
"old_event_hub_instance",
"old_gc_bucket",
"old_s3_arn_role",
@@ -542,6 +545,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -2162,6 +2166,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"name",
"operation_type"
@@ -2202,6 +2207,41 @@
"operation_type"
]
},
+ {
+ "action": "business.members_limit_warning",
+ "description": "An enterprise is approaching its members limit.",
+ "docs_reference_links": "N/A",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "actor_is_bot",
+ "count",
+ "created_at",
+ "limit",
+ "name",
+ "operation_type"
+ ]
+ },
{
"action": "business.organizations_limit_reached",
"description": "An enterprise has reached its organizations limit.",
@@ -2411,7 +2451,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -2836,6 +2877,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -2869,6 +2911,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -3133,6 +3176,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -3166,6 +3210,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise"
@@ -3477,6 +3522,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3546,6 +3592,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -3618,6 +3665,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -3651,6 +3699,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -3724,7 +3773,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -4700,6 +4750,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4846,6 +4897,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -5695,6 +5747,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -5733,10 +5786,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -5774,6 +5829,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -5807,6 +5863,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6199,6 +6256,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -6386,6 +6444,7 @@
"actor_is_bot",
"created_at",
"domain_name",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type"
@@ -6523,6 +6582,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"enterprise_role_id",
@@ -7901,6 +7961,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"message",
"oauth_application_id",
"operation_type",
@@ -7944,6 +8005,7 @@
"actor_is_bot",
"api_request_body",
"created_at",
+ "large_group_warning",
"oauth_application_id",
"operation_type",
"query_string",
@@ -8566,6 +8628,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8602,6 +8665,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -8636,6 +8700,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -8708,6 +8773,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -9388,6 +9454,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -9609,7 +9678,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -11567,11 +11637,13 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
@@ -11750,8 +11822,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -11817,6 +11891,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -11927,7 +12002,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -12594,6 +12670,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12661,9 +12738,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -12694,6 +12773,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12762,6 +12842,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13009,6 +13090,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -13136,10 +13218,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -14114,6 +14198,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -14149,10 +14234,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -14183,8 +14270,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -14313,8 +14402,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -14589,7 +14680,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -14624,7 +14716,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -15112,6 +15205,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -15147,10 +15241,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -15218,6 +15314,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -15326,6 +15423,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -15401,7 +15499,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -15832,6 +15931,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"allowed_values",
"created_at",
@@ -16936,6 +17036,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -18038,10 +18139,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -18079,7 +18182,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -19207,6 +19311,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -19886,6 +19991,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -20783,6 +20889,7 @@
"user_agent",
"created_at",
"operation_type",
+ "public_repo",
"visibility"
]
},
@@ -21434,6 +21541,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type",
"public_repo",
@@ -22318,6 +22426,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -22361,6 +22470,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -22512,6 +22622,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -22593,7 +22704,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -23695,7 +23807,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23728,8 +23841,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23866,7 +23981,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -24203,7 +24319,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24851,6 +24968,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -25038,6 +25156,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25075,6 +25194,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25108,6 +25228,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -25744,6 +25865,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -27492,6 +27614,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -29000,6 +29123,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -29309,6 +29433,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -29474,7 +29599,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29501,12 +29626,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29532,12 +29658,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29563,6 +29690,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -29634,7 +29762,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29661,12 +29789,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29692,13 +29821,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -29724,6 +29854,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -30904,6 +31035,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
@@ -31491,6 +31623,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -31498,6 +31631,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.22/organization.json b/src/audit-logs/data/ghes-3.22/organization.json
index 37b5038161d1..00c4103541e5 100644
--- a/src/audit-logs/data/ghes-3.22/organization.json
+++ b/src/audit-logs/data/ghes-3.22/organization.json
@@ -459,6 +459,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -629,6 +630,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -663,6 +665,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -767,6 +770,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -1894,6 +1898,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -2180,6 +2185,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2395,6 +2401,7 @@
"actor_is_bot",
"created_at",
"excluded_paths",
+ "oauth_application_id",
"operation_type",
"owner_type",
"public_repo",
@@ -3309,6 +3316,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -3347,10 +3355,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3388,6 +3398,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3421,6 +3432,7 @@
"user_id",
"user_agent",
"access_level",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3923,6 +3935,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner",
"owner_type",
@@ -4599,6 +4612,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -4635,6 +4649,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -4669,6 +4684,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -5349,6 +5365,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -5570,7 +5589,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -7026,7 +7046,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization"
},
@@ -7199,6 +7220,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing repository management policies in your enterprise"
@@ -8109,6 +8131,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization"
@@ -8252,7 +8275,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "team"
+ "team",
+ "user_programmatic_access_name"
]
},
{
@@ -8922,6 +8946,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -8954,6 +8979,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9518,6 +9544,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9551,8 +9578,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -9583,6 +9612,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9650,9 +9680,11 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization"
},
@@ -9683,6 +9715,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -9751,6 +9784,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10211,6 +10245,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10387,6 +10422,7 @@
"actor_is_bot",
"created_at",
"issuer",
+ "oauth_application_id",
"operation_type",
"sso_url"
]
@@ -10420,6 +10456,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization"
@@ -10547,10 +10584,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization"
},
@@ -12303,7 +12342,8 @@
"user_agent",
"actor_is_bot",
"created_at",
- "operation_type"
+ "operation_type",
+ "topic"
]
},
{
@@ -12367,6 +12407,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -12402,10 +12443,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -12436,8 +12479,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12566,8 +12611,10 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
@@ -12904,7 +12951,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -12939,7 +12987,8 @@
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -13427,6 +13476,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13462,10 +13512,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -13533,6 +13585,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -13641,6 +13694,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -13716,7 +13770,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -13783,6 +13838,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -13818,6 +13874,7 @@
"actor_is_bot",
"created_at",
"from_business",
+ "oauth_application_id",
"operation_type",
"to_business"
],
@@ -14731,7 +14788,7 @@
},
{
"action": "organization_moderators.add_team",
- "description": "N/A",
+ "description": "A team was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14764,7 +14821,7 @@
},
{
"action": "organization_moderators.add_user",
- "description": "N/A",
+ "description": "A user was added as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14796,7 +14853,7 @@
},
{
"action": "organization_moderators.remove_team",
- "description": "N/A",
+ "description": "A team was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14829,7 +14886,7 @@
},
{
"action": "organization_moderators.remove_user",
- "description": "N/A",
+ "description": "A user was removed as an organization moderator.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -15088,7 +15145,8 @@
"owner",
"owner_id",
"owner_type",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Permissions of custom organization roles"
},
@@ -16216,6 +16274,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
@@ -17116,10 +17175,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -17157,7 +17218,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -18285,6 +18347,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -18964,6 +19027,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "topic",
"user_programmatic_access_name"
]
},
@@ -19467,6 +19531,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
@@ -19500,6 +19565,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"public_repo"
]
@@ -21410,6 +21476,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -21453,6 +21520,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -21604,6 +21672,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -21685,7 +21754,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -22387,7 +22457,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
]
},
{
@@ -23248,6 +23319,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
],
@@ -23575,7 +23647,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23608,8 +23681,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -23746,7 +23821,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "public_repo"
+ "public_repo",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Defining custom patterns for secret scanning"
},
@@ -24157,7 +24233,8 @@
"oauth_application_id",
"operation_type",
"public_repo",
- "topic"
+ "topic",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Push protection"
},
@@ -24979,6 +25056,7 @@
"user_id",
"user_agent",
"active",
+ "actor_is_agent",
"actor_is_bot",
"alert_id",
"alert_number",
@@ -25166,6 +25244,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25203,6 +25282,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "reason",
"topic",
"user_programmatic_access_name"
]
@@ -25312,6 +25392,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "oauth_application_id",
"operation_type",
"owner"
],
@@ -25429,7 +25510,8 @@
"oauth_application_id",
"operation_type",
"owner",
- "role_permissions"
+ "role_permissions",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "Managing custom repository roles for an organization"
},
@@ -25584,6 +25666,78 @@
],
"docs_reference_titles": "Manage secret scanning alerts"
},
+ {
+ "action": "secret_scanning_alert.metadata_create",
+ "description": "Metadata was added to a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
+ {
+ "action": "secret_scanning_alert.metadata_remove",
+ "description": "Metadata was removed from a secret scanning alert.",
+ "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning",
+ "fields": [
+ "@timestamp",
+ "_document_id",
+ "action",
+ "actor",
+ "actor_id",
+ "business",
+ "business_id",
+ "hashed_token",
+ "org",
+ "org_id",
+ "programmatic_access_type",
+ "repo",
+ "repo_id",
+ "repository",
+ "repository_id",
+ "request_access_security_header",
+ "request_id",
+ "token_id",
+ "token_scopes",
+ "user",
+ "user_id",
+ "user_agent",
+ "created_at",
+ "multi_repo",
+ "number",
+ "publicly_leaked",
+ "secret_type",
+ "secret_type_display_name"
+ ],
+ "docs_reference_titles": "Manage secret scanning alerts"
+ },
{
"action": "secret_scanning_alert.public_leak",
"description": "A secret scanning alert was leaked in a public repo.",
@@ -26403,6 +26557,7 @@
"source",
"source_slug",
"started_at",
+ "topic",
"type",
"type_slug"
],
@@ -29194,6 +29349,7 @@
"head_branch",
"head_sha",
"name",
+ "oauth_application_id",
"operation_type",
"public_repo",
"run_attempt",
@@ -29201,6 +29357,7 @@
"started_at",
"topic",
"trigger_id",
+ "user_programmatic_access_name",
"workflow_id",
"workflow_run_id"
],
diff --git a/src/audit-logs/data/ghes-3.22/user.json b/src/audit-logs/data/ghes-3.22/user.json
index 1ebf20afcb1d..4ad7d06fde4a 100644
--- a/src/audit-logs/data/ghes-3.22/user.json
+++ b/src/audit-logs/data/ghes-3.22/user.json
@@ -341,6 +341,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_enabled",
"budget_limit_type",
@@ -1103,6 +1104,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1172,6 +1174,7 @@
"actor_is_bot",
"created_at",
"name",
+ "oauth_application_id",
"operation_type",
"policy"
],
@@ -1244,6 +1247,7 @@
"created_at",
"limit",
"name",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
@@ -1277,6 +1281,7 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"name",
"oauth_application_id",
"operation_type"
@@ -1350,7 +1355,8 @@
"created_at",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise"
},
@@ -1792,6 +1798,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -1938,6 +1945,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"operation_type",
@@ -2539,6 +2547,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
@@ -2577,10 +2586,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -2618,6 +2629,7 @@
"alert_number",
"created_at",
"number",
+ "oauth_application_id",
"operation_type",
"public_repo"
],
@@ -3584,6 +3596,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3620,6 +3633,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -3654,6 +3668,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"name",
@@ -3726,6 +3741,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"key",
@@ -4331,6 +4347,9 @@
"actor_is_bot",
"application_client_id",
"created_at",
+ "events_added",
+ "events_removed",
+ "events_unchanged",
"integration",
"name",
"operation_type",
@@ -4552,7 +4571,8 @@
"integration",
"name",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation"
},
@@ -6318,8 +6338,10 @@
"user_agent",
"actor_is_bot",
"created_at",
+ "integration",
"oauth_application_name",
- "operation_type"
+ "operation_type",
+ "topic"
],
"docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
},
@@ -6740,6 +6762,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6775,10 +6798,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization"
},
@@ -6846,6 +6871,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -6922,6 +6948,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"user_programmatic_access_name"
@@ -6997,7 +7024,8 @@
"created_at",
"oauth_application_id",
"operation_type",
- "user_programmatic_access_name"
+ "user_programmatic_access_name",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -7592,6 +7620,7 @@
"actor_is_bot",
"created_at",
"explanation",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -8626,10 +8655,12 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
],
"docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views"
},
@@ -8667,7 +8698,8 @@
"project_id",
"project_kind",
"project_name",
- "public_project"
+ "public_project",
+ "user_programmatic_access_name"
]
},
{
@@ -8861,6 +8893,7 @@
"fingerprint",
"key",
"operation_type",
+ "public_repo",
"read_only",
"title"
],
@@ -10603,6 +10636,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_agent",
"actor_is_bot",
"created_at",
"oauth_application_id",
@@ -10646,6 +10680,7 @@
"oauth_application_id",
"operation_type",
"public_repo",
+ "user_programmatic_access_name",
"visibility"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository"
@@ -10797,6 +10832,7 @@
"actor_is_agent",
"actor_is_bot",
"created_at",
+ "default_workflow_permissions_value",
"oauth_application_id",
"operation_type",
"public_repo",
@@ -10878,7 +10914,8 @@
"operation_type",
"public_repo",
"user_programmatic_access_name",
- "visibility"
+ "visibility",
+ "workflow_permission_can_approve_pr_value"
],
"docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests"
},
@@ -12949,6 +12986,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
],
"docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories"
@@ -13749,6 +13787,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"oauth_application_id",
"operation_type",
@@ -13922,6 +13961,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"created_at",
"operation_type"
]
@@ -14087,7 +14127,7 @@
},
{
"action": "user.disable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14114,12 +14154,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.disable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14145,12 +14186,13 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type"
]
},
{
"action": "user.disable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was disabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14176,6 +14218,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -14247,7 +14290,7 @@
},
{
"action": "user.enable_collaborators_only",
- "description": "N/A",
+ "description": "The interaction limit for collaborators only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14274,12 +14317,13 @@
"user_agent",
"created_at",
"oauth_application_id",
- "operation_type"
+ "operation_type",
+ "user_programmatic_access_name"
]
},
{
"action": "user.enable_contributors_only",
- "description": "N/A",
+ "description": "The interaction limit for prior contributors only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14305,13 +14349,14 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
},
{
"action": "user.enable_sockpuppet_disallowed",
- "description": "N/A",
+ "description": "The interaction limit for existing users only was enabled for a personal account.",
"docs_reference_links": "N/A",
"fields": [
"@timestamp",
@@ -14337,6 +14382,7 @@
"user_id",
"user_agent",
"created_at",
+ "oauth_application_id",
"operation_type",
"user_programmatic_access_name"
]
@@ -15289,6 +15335,7 @@
"user",
"user_id",
"user_agent",
+ "actor_is_bot",
"blocked_user",
"created_at",
"oauth_application_id",
diff --git a/src/audit-logs/data/shared/entries.json b/src/audit-logs/data/shared/entries.json
index 77da93f771fa..fd7f619182e6 100644
--- a/src/audit-logs/data/shared/entries.json
+++ b/src/audit-logs/data/shared/entries.json
@@ -1 +1 @@
-[{"action":"account.billing_date_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account.plan_change","description":"The account's plan changed.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/about-billing-for-plans","docs_reference_titles":"How GitHub billing works","fieldsIndex":1},{"action":"actions_cache.delete","description":"A GitHub Actions cache was deleted using the REST API.","docs_reference_links":"N/A","fieldsIndex":2},{"action":"advisory_credit.accept","description":"Credit was accepted for a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/editing-a-repository-security-advisory","docs_reference_titles":"Editing a repository security advisory","fieldsIndex":3},{"action":"advisory_credit.create","description":"Someone was added to the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":4},{"action":"advisory_credit.decline","description":"Credit was declined for a security advisory.","docs_reference_links":"N/A","fieldsIndex":5},{"action":"advisory_credit.destroy","description":"Someone was removed from the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":6},{"action":"artifact.destroy","description":"A workflow run artifact was manually deleted.","docs_reference_links":"N/A","fieldsIndex":7},{"action":"auto_approve_personal_access_token_requests.disable","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources. See also: personal_access_token.auto_approve_grant_requests_disabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"auto_approve_personal_access_token_requests.enable","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval. See also: personal_access_token.auto_approve_grant_requests_enabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"billing.budget_create","description":"A billing budget was created for a business or organization. Includes details about the budget limit, alerting preferences, and recipients.","docs_reference_links":"N/A","fieldsIndex":8},{"action":"billing.budget_delete","description":"A billing budget was deleted for a business or organization. Includes details about the removed budget and any alerting settings.","docs_reference_links":"N/A","fieldsIndex":9},{"action":"billing.budget_update","description":"A billing budget was updated for a business or organization. Includes details about the updated limit and alerting settings.","docs_reference_links":"N/A","fieldsIndex":10},{"action":"billing.change_billing_type","description":"The way the account pays for GitHub was changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/adding-or-editing-a-payment-method","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":11},{"action":"billing.change_email","description":"The billing email address changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/setting-your-billing-email","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":12},{"action":"billing.cost_center_create","description":"A cost center was created for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_delete","description":"A cost center was deleted from a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_resource_added","description":"A resource was added to a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_resource_removed","description":"A resource was removed from a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_update","description":"A cost center was updated for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing_customer.azure_subscription_linked","description":"Azure subscription has been linked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing_customer.azure_subscription_unlinked","description":"Azure subscription has been unlinked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing.lock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":1},{"action":"billing.overage_policy_updated","description":"The premium request paid usage policy for your GitHub account was changed.","docs_reference_links":"/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage","docs_reference_titles":"Optimizing your budget configuration","fieldsIndex":15},{"action":"billing.unlock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":16},{"action":"checks.auto_trigger_disabled","description":"Automatic creation of check suites was disabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.auto_trigger_enabled","description":"Automatic creation of check suites was enabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.delete_logs","description":"Logs in a check suite were deleted.","docs_reference_links":"N/A","fieldsIndex":18},{"action":"code_scanning.alert_appeared_in_branch","description":"Existing code scanning alerts appeared in a branch.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_fixed","description":"Code scanning alerts were fixed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_outdated","description":"Code scanning alerts were closed as outdated (all configurations they were detected in were deleted).","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":20},{"action":"code_scanning.alert_closed_by_user","description":"Code scanning alerts were manually dismissed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":21},{"action":"code_scanning.alert_closure_approved","description":"Dismissal of code scanning alerts was approved.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_denied","description":"Dismissal of code scanning alerts was denied.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_requested","description":"Dismissal of code scanning alerts was requested.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_created","description":"Code scanning alerts were seen for the first time.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reappeared","description":"Code scanning alerts that were previously fixed reappeared.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reopened_by_user","description":"Code scanning alerts that were previously dismissed were reopened.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":23},{"action":"codespaces.allow_permissions","description":"A codespace using custom permissions from its devcontainer.json file was launched.","docs_reference_links":"N/A","fieldsIndex":24},{"action":"codespaces.attempted_to_create_from_prebuild","description":"An attempt to create a codespace from a prebuild was made.","docs_reference_links":"N/A","fieldsIndex":25},{"action":"codespaces.business_enablement_updated","description":"Enterprise setting for Codespaces ownership was updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":26},{"action":"codespaces.connect","description":"Credentials for a codespace were refreshed.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.create","description":"A codespace was created","docs_reference_links":"/codespaces/developing-in-codespaces/creating-a-codespace-for-a-repository","docs_reference_titles":"Creating a codespace for a repository","fieldsIndex":27},{"action":"codespaces.destroy","description":"A user deleted a codespace.","docs_reference_links":"/codespaces/developing-in-codespaces/deleting-a-codespace","docs_reference_titles":"Deleting a codespace","fieldsIndex":28},{"action":"codespaces.export_environment","description":"A codespace was exported to a branch on GitHub.","docs_reference_links":"N/A","fieldsIndex":29},{"action":"codespaces.policy_group_created","description":"Policies were applied to codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_deleted","description":"Policies were removed from codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_updated","description":"Policies were updated for codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.restore","description":"A codespace was restored.","docs_reference_links":"N/A","fieldsIndex":30},{"action":"codespaces.start_environment","description":"A codespace was started.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.suspend_environment","description":"A codespace was stopped.","docs_reference_links":"N/A","fieldsIndex":31},{"action":"codespaces.trusted_repositories_access_update","description":"A personal account's access and security setting for Codespaces were updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":11},{"action":"commit_comment.destroy","description":"A commit comment was deleted.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"commit_comment.update","description":"A commit comment was updated.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"copilot.access_revoked","description":"Copilot access was revoked for the organization or enterprise due to its Copilot subscription ending, an issue with billing the entity, the entity being marked spammy, or the entity being suspended.","docs_reference_links":"N/A","fieldsIndex":33},{"action":"copilot.cfb_org_settings_changed","description":"Copilot feature settings were changed at the organization level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.cfb_seat_added","description":"A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_created","description":"A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.","docs_reference_links":"/copilot/overview-of-github-copilot/about-github-copilot-for-business","docs_reference_titles":"What is GitHub Copilot?","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_refreshed","description":"A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_reused","description":"A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":35},{"action":"copilot.cfb_seat_assignment_unassigned","description":"A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_cancelled","description":"A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":36},{"action":"copilot.cfb_seat_cancelled_by_staff","description":"A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":37},{"action":"copilot.cfb_seat_management_changed","description":"The seat management setting was changed at the organization level to either enable or disable Copilot access for all members of the organization, or to enable Copilot access for selected members or teams.","docs_reference_links":"N/A","fieldsIndex":38},{"action":"copilot.code_review_repository_settings_updated","description":"Copilot code review settings were updated for a repository.","docs_reference_links":"N/A","fieldsIndex":39},{"action":"copilot.content_exclusion_changed","description":"The excluded paths for GitHub Copilot were updated.","docs_reference_links":"N/A","fieldsIndex":40},{"action":"copilot.custom_instructions_created","description":"Copilot custom instructions were created for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.custom_instructions_updated","description":"Copilot custom instructions were updated for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.memory_user_opt_out","description":"A user opted out of Copilot Memory.","docs_reference_links":"N/A","fieldsIndex":42},{"action":"copilot.plan_changed","description":"The plan for GitHub Copilot was updated.","docs_reference_links":"/billing/managing-billing-for-github-copilot/about-billing-for-github-copilot","docs_reference_titles":"GitHub Copilot licenses","fieldsIndex":43},{"action":"copilot.plan_downgrade_scheduled","description":"The plan for GitHub Copilot was scheduled to be downgraded.","docs_reference_links":"N/A","fieldsIndex":44},{"action":"copilot.swe_agent_firewall_allowlist_updated","description":"Firewall allowlist for Copilot coding agent was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.swe_agent_mcp_config_updated","description":"MCP Configuration for Copilot coding agent was updated for a specific repository.","docs_reference_links":"N/A","fieldsIndex":45},{"action":"copilot.swe_agent_repo_disabled","description":"Specific repositories were disabled from using Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enabled","description":"Specific repositories were enabled to use Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enablement_updated","description":"Copilot coding agent access was updated for the organization's or user's repositories.","docs_reference_links":"N/A","fieldsIndex":47},{"action":"custom_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"custom_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_property_definition.create","description":"A new custom property definition was created.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.destroy","description":"A custom property definition was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.update","description":"A custom property definition was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":50},{"action":"custom_property_value.create","description":"A repository's custom property value was manually set for the first time.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.destroy","description":"A repository's custom property value was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.update","description":"A repository's custom property value was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":52},{"action":"dependabot_alerts.disable","description":"Dependabot alerts were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":11},{"action":"dependabot_alerts.enable","description":"Dependabot alerts were enabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_closure_request.approve","description":"Dismissal of Dependabot alerts was approved.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":54},{"action":"dependabot_closure_request.cancel","description":"Dismissal request for Dependabot alerts was canceled.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":55},{"action":"dependabot_closure_request.create","description":"Dismissal of Dependabot alerts was requested.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":56},{"action":"dependabot_closure_request.deny","description":"Dismissal of Dependabot alerts was denied.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":57},{"action":"dependabot_repository_access.default_access_level_updated","description":"The default repository access for Dependabot was updated.","docs_reference_links":"N/A","fieldsIndex":58},{"action":"dependabot_repository_access.repositories_updated","description":"The repositories that Dependabot can access were updated.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates.disable","description":"Dependabot security updates were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependabot_security_updates.enable","description":"Dependabot security updates were enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.disable","description":" Dependabot security updates were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.enable","description":"Dependabot security updates were enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph.disable","description":"The dependency graph was disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependency_graph.enable","description":"The dependency graph was enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph_new_repos.disable","description":"The dependency graph was disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependency_graph_new_repos.enable","description":"The dependency graph was enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"discussion_comment.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion_comment.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":59},{"action":"enterprise_announcement.create","description":"A global announcement banner was created for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise#creating-a-global-announcement-banner","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":60},{"action":"enterprise_announcement.destroy","description":"A global announcement banner was removed from the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":61},{"action":"enterprise_announcement.update","description":"A global announcement banner was updated for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":62},{"action":"enterprise_installation.create","description":"The GitHub App associated with a GitHub Connect connection was created.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":15},{"action":"enterprise_installation.destroy","description":"The GitHub App associated with a GitHub Connect connection was deleted.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":63},{"action":"environment.add_protection_rule","description":"A GitHub Actions deployment protection rule was created via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":64},{"action":"environment.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":65},{"action":"environment.create_actions_secret","description":"A secret was created for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":66},{"action":"environment.create_actions_variable","description":"A variable was created for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":66},{"action":"environment.delete","description":"An environment was deleted.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deleting-an-environment","docs_reference_titles":"Managing environments for deployment","fieldsIndex":67},{"action":"environment.remove_actions_secret","description":"A secret was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":68},{"action":"environment.remove_actions_variable","description":"A variable was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":68},{"action":"environment.remove_protection_rule","description":"A GitHub Actions deployment protection rule was deleted via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":69},{"action":"environment.update_actions_secret","description":"A secret was updated for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":66},{"action":"environment.update_actions_variable","description":"A variable was updated for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":66},{"action":"environment.update_protection_rule","description":"A GitHub Actions deployment protection rule was updated via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":70},{"action":"git.clone","description":"A repository was cloned. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"git.fetch","description":"Changes were fetched from a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"git.push","description":"Changes were pushed to a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"github_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":72},{"action":"github_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":16},{"action":"github_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":72},{"action":"hook.active_changed","description":"A hook's active status was updated.","docs_reference_links":"N/A","fieldsIndex":73},{"action":"hook.config_changed","description":"A hook's configuration was changed.","docs_reference_links":"N/A","fieldsIndex":74},{"action":"hook.create","description":"A new hook was added.","docs_reference_links":"/get-started/exploring-integrations/about-webhooks","docs_reference_titles":"About webhooks","fieldsIndex":75},{"action":"hook.destroy","description":"A hook was deleted.","docs_reference_links":"N/A","fieldsIndex":74},{"action":"hook.events_changed","description":"A hook's configured events were changed.","docs_reference_links":"N/A","fieldsIndex":76},{"action":"integration.create","description":"A GitHub App was created.","docs_reference_links":"N/A","fieldsIndex":77},{"action":"integration.destroy","description":"A GitHub App was deleted.","docs_reference_links":"N/A","fieldsIndex":78},{"action":"integration.generate_client_secret","description":"N/A","docs_reference_links":"N/A","fieldsIndex":79},{"action":"integration_installation.create","description":"A GitHub App was installed.","docs_reference_links":"/apps/using-github-apps/authorizing-github-apps","docs_reference_titles":"/apps/using-github-apps/authorizing-github-apps","fieldsIndex":80},{"action":"integration_installation.destroy","description":"A GitHub App was uninstalled.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":81},{"action":"integration_installation.repositories_added","description":"Repositories were added to a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":82},{"action":"integration_installation.repositories_removed","description":"Repositories were removed from a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":83},{"action":"integration_installation_request.close","description":"A request to install a GitHub App was either approved or denied by an owner, or canceled by the member who opened the request.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":84},{"action":"integration_installation_request.create","description":"A member requested that an owner install a GitHub App.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":85},{"action":"integration_installation.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":86},{"action":"integration_installation.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":86},{"action":"integration_installation.version_updated","description":"Permissions for a GitHub App were updated.","docs_reference_links":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","docs_reference_titles":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","fieldsIndex":86},{"action":"integration.manager_added","description":"A member of an enterprise or organization was added as a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","fieldsIndex":87},{"action":"integration.manager_removed","description":"A member of an enterprise or organization was removed from being a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","fieldsIndex":87},{"action":"integration.remove_client_secret","description":"A client secret for a GitHub App was removed.","docs_reference_links":"N/A","fieldsIndex":78},{"action":"integration.revoke_all_tokens","description":"All user tokens for a GitHub App were requested to be revoked.","docs_reference_links":"N/A","fieldsIndex":88},{"action":"integration.revoke_tokens","description":"Token(s) for a GitHub App were revoked.","docs_reference_links":"N/A","fieldsIndex":88},{"action":"integration.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":79},{"action":"integration.transfer","description":"Ownership of a GitHub App was transferred to another user or organization.","docs_reference_links":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","docs_reference_titles":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","fieldsIndex":89},{"action":"integration.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":88},{"action":"ip_allow_list.disable","description":"An IP allow list was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.disable_for_installed_apps","description":"An IP allow list was disabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable","description":"An IP allow list was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_for_installed_apps","description":"An IP allow list was enabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list_entry.create","description":"An IP address was added to an IP allow list.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"ip_allow_list_entry.destroy","description":"An IP address was deleted from an IP allow list.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"ip_allow_list_entry.update","description":"An IP address or its description was changed.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_comment.destroy","description":"A comment on an issue was deleted from the repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.pinned","description":"A comment on an issue was pinned to a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.unpinned","description":"A comment on an issue was unpinned from a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.update","description":"A comment on an issue (other than the initial one) changed.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_dependencies.blocked_by_add","description":"An issue was marked as blocked by another issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue_dependencies.blocked_by_remove","description":"The blocked by relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue_dependencies.blocking_add","description":"An issue was marked as blocking another issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue_dependencies.blocking_remove","description":"The blocking relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue.destroy","description":"An issue was deleted from the repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/deleting-an-issue","docs_reference_titles":"Deleting an issue","fieldsIndex":92},{"action":"issue.pinned","description":"An issue was pinned to a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":93},{"action":"issue.transfer","description":"An issue was transferred to another repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/transferring-an-issue-to-another-repository","docs_reference_titles":"Transferring an issue to another repository","fieldsIndex":94},{"action":"issue_type.create","description":"An issue type was created.","docs_reference_links":"N/A","fieldsIndex":95},{"action":"issue_type.destroy","description":"An issue type was deleted.","docs_reference_links":"N/A","fieldsIndex":96},{"action":"issue_type.update","description":"An issue type was updated.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"issue.unpinned","description":"An issue was unpinned from a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":93},{"action":"issues.deletes_disabled","description":"The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"issues.deletes_enabled","description":"The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"issues.deletes_policy_cleared","description":"An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"marketplace_agreement_signature.create","description":"The GitHub Marketplace Developer Agreement was signed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"marketplace_listing.approve","description":"A listing was approved for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.change_category","description":"A category for a listing for an app in GitHub Marketplace was changed.","docs_reference_links":"N/A","fieldsIndex":99},{"action":"marketplace_listing.create","description":"A listing for an app in GitHub Marketplace was created.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.delist","description":"A listing was removed from GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":100},{"action":"marketplace_listing.redraft","description":"A listing was sent back to draft state.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.reject","description":"A listing was not accepted for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"mcp_registry.allowlist_assign","description":"An MCP registry allowlist was assigned to an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":101},{"action":"mcp_registry.allowlist_remove_assignment","description":"An MCP registry allowlist assignment was removed from an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":101},{"action":"members_can_create_pages.disable","description":"The ability for members to publish GitHub Pages sites was disabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_pages.enable","description":"The ability for members to publish GitHub Pages sites was enabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.disable","description":"The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.enable","description":"The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":1},{"action":"members_can_create_public_pages.disable","description":"The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_public_pages.enable","description":"The ability for members to publish public GitHub Pages was enabled Members can publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_delete_repos.clear","description":"An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.disable","description":"The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.enable","description":"The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"members_can_view_dependency_insights.clear","description":"An enterprise owner cleared the policy setting for viewing dependency insights in any organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"members_can_view_dependency_insights.disable","description":"The ability for enterprise members to view dependency insights was disabled. Members cannot view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"members_can_view_dependency_insights.enable","description":"The ability for enterprise members to view dependency insights was enabled. Members can view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":11},{"action":"merge_queue.pull_request_dequeued","description":"A pull request was removed from a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.pull_request_queue_jump","description":"A pull request was moved ahead in a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.queue_cleared","description":"A merge queue was cleared.","docs_reference_links":"N/A","fieldsIndex":102},{"action":"merge_queue.update_settings","description":"The settings for a merge queue were updated.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"metered_billing_configuration.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"migration.create","description":"A migration file was created for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance.","docs_reference_links":"N/A","fieldsIndex":104},{"action":"migration.destroy_file","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was deleted.","docs_reference_links":"N/A","fieldsIndex":104},{"action":"migration.download","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was downloaded.","docs_reference_links":"N/A","fieldsIndex":104},{"action":"network_configuration.create","description":"A network configuration for a hosted compute service was created.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":105},{"action":"network_configuration.delete","description":"A network configuration for a hosted compute service was deleted.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":106},{"action":"network_configuration.update","description":"A network configuration for a hosted compute service was updated.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":107},{"action":"oauth_application.create","description":"An OAuth application was created.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.destroy","description":"An OAuth application was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.generate_client_secret","description":"An OAuth application's secret key was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.remove_client_secret","description":"An OAuth application's secret key was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.reset_secret","description":"The secret key for an OAuth application was reset.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":109},{"action":"oauth_application.revoke_all_tokens","description":"All user tokens for an OAuth application were requested to be revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.revoke_tokens","description":"Token(s) for an OAuth application were revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.transfer","description":"An OAuth application was transferred from one account to another.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"org.accept_business_invitation","description":"An invitation sent to an organization to join an enterprise was accepted.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":15},{"action":"org.add_billing_manager","description":"A billing manager was added to an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","fieldsIndex":15},{"action":"org.add_disallowed_two_factor_method","description":"An organization prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":110},{"action":"org.add_member","description":"A user joined an organization.","docs_reference_links":"N/A","fieldsIndex":111},{"action":"org.add_outside_collaborator","description":"An outside collaborator was added to a repository.","docs_reference_links":"N/A","fieldsIndex":112},{"action":"org.add_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":113},{"action":"org.advanced_security_disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_disabled_on_all_repos","description":"GitHub Advanced Security was disabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.advanced_security_enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_enabled_on_all_repos","description":"GitHub Advanced Security was enabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.advanced_security_entity_policy_update","description":"An enterprise owner updated the GitHub Advanced Security access policy for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":114},{"action":"org.advanced_security_policy_selected_member_disabled","description":"An enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.advanced_security_policy_selected_member_enabled","description":"An enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_disabled","description":"Third-party application access for outside collaborators was disabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests#enabling-or-disabling-integration-access-requests","docs_reference_titles":"Limiting OAuth app and GitHub App access requests and installations","fieldsIndex":0},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_enabled","description":"Third-party application access for outside collaborators was enabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","fieldsIndex":0},{"action":"org.archive","description":"The organization was archived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.audit_log_export","description":"An export of the organization audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","fieldsIndex":115},{"action":"org.audit_log_git_event_export","description":"An export of the organization's Git events was created.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","fieldsIndex":116},{"action":"org.billing_signup_error","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.block_user","description":"An organization owner blocked a user from accessing the organization's repositories.","docs_reference_links":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","fieldsIndex":117},{"action":"org.cancel_business_invitation","description":"An invitation for an organization to join an enterprise was revoked","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":118},{"action":"org.cancel_invitation","description":"An invitation sent to a user to join an organization was revoked.","docs_reference_links":"N/A","fieldsIndex":119},{"action":"org.clear_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_quality_entity_policy_update","description":"An organization owner updated the Code Quality entity policy for repositories owned by the organization.","docs_reference_links":"N/A","fieldsIndex":114},{"action":"org.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_disabled","description":"Scanning inactive repositories was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_enabled","description":"Scanning inactive repositories was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"org.codeql_disabled","description":"Code scanning using the default setup was disabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":11},{"action":"org.codeql_enabled","description":"Code scanning using the default setup was enabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":1},{"action":"org.codespaces_access_updated","description":"Access to use Codespaces on internal and private repositories was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","fieldsIndex":122},{"action":"org.codespaces_ownership_updated","description":"Ownership and payment for codespaces was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":123},{"action":"org.codespaces_team_access_allowed","description":"A team has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":124},{"action":"org.codespaces_team_access_revoked","description":"A team has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":124},{"action":"org.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to all other repositories in an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":32},{"action":"org.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to all other repositories in an organization was revoked.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":121},{"action":"org.codespaces_user_access_allowed","description":"A user has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.codespaces_user_access_revoked","description":"A user has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.config.disable_collaborators_only","description":"The interaction limit for collaborators only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":11},{"action":"org.config.disable_contributors_only","description":"The interaction limit for prior contributors only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.enable_collaborators_only","description":"The interaction limit for collaborators only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":16},{"action":"org.config.enable_contributors_only","description":"The interaction limit for prior contributors only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":16},{"action":"org.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","fieldsIndex":53},{"action":"org.confirm_business_invitation","description":"An invitation for an organization to join an enterprise was confirmed.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":125},{"action":"org.connect_usage_metrics_export","description":"Server statistics were exported for the organization.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":0},{"action":"org.create","description":"An organization was created.","docs_reference_links":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","docs_reference_titles":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","fieldsIndex":1},{"action":"org.create_actions_secret","description":"A GitHub Actions secret was created for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.create_actions_variable","description":"A GitHub Actions variable was created for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.create_integration_secret","description":"A Codespaces or Dependabot secret was created for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org_credential_authorization.deauthorize","description":"A member removed the SSO (SAML or OIDC) authorization from a credential that had access to your organization.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on","docs_reference_titles":"Authorizing a personal access token for use with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.grant","description":"A member authorized credentials for use with SAML or OIDC single sign-on.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on","docs_reference_titles":"Authenticating with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.revoke","description":"An owner revoked authorized credentials.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":129},{"action":"org.delete","description":"An organization was deleted by a user or staff.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.delete_custom_image","description":"A custom image was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":16},{"action":"org.delete_custom_image_version","description":"A custom image version was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":53},{"action":"org.disable_member_team_creation_permission","description":"Team creation was limited to owners.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":53},{"action":"org.disable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were disabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.disable_reader_discussion_creation_permission","description":"An organization owner limited discussion creation to users with at least triage permission in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.disable_saml","description":"SAML single sign-on was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":130},{"action":"org.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":15},{"action":"org.disable_two_factor_requirement","description":"A two-factor authentication requirement was disabled for the organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_disabled","description":"An organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_enabled","description":"An organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.enable_member_team_creation_permission","description":"Team creation by members was allowed.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":11},{"action":"org.enable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were enabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.enable_reader_discussion_creation_permission","description":"An organization owner allowed users with read access to create discussions in an organization","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.enable_saml","description":"SAML single sign-on was enabled for the organization.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/enabling-and-testing-saml-single-sign-on-for-your-organization","docs_reference_titles":"Enabling and testing SAML single sign-on for your organization","fieldsIndex":130},{"action":"org.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":15},{"action":"org.enable_two_factor_requirement","description":"Two-factor authentication is now required for the organization.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":11},{"action":"org.integration_manager_added","description":"An organization owner granted a member access to manage all GitHub Apps owned by an organization.","docs_reference_links":"N/A","fieldsIndex":131},{"action":"org.integration_manager_removed","description":"An organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.","docs_reference_links":"N/A","fieldsIndex":131},{"action":"org.invite_member","description":"A new user was invited to join an organization.","docs_reference_links":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","fieldsIndex":119},{"action":"org.invite_to_business","description":"An organization was invited to join an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_limit_warning","description":"An organization is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":132},{"action":"org.oauth_app_access_approved","description":"Access to an organization was granted for an OAuth App.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","fieldsIndex":133},{"action":"org.oauth_app_access_blocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.oauth_app_access_denied","description":"Access was disabled for an OAuth App that was previously approved.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","fieldsIndex":133},{"action":"org.oauth_app_access_requested","description":"An organization member requested that an owner grant an OAuth App access to an organization.","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.oauth_app_access_unblocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.rate_limited_invites","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recovery_code_failed","description":"An organization owner failed to sign into a organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":134},{"action":"org.recovery_code_used","description":"An organization owner successfully signed into an organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":15},{"action":"org.recovery_codes_downloaded","description":"An organization owner downloaded the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_generated","description":"An organization owner generated the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_printed","description":"An organization owner printed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_viewed","description":"An organization owner viewed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-an-organization","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":63},{"action":"org.remove_actions_secret","description":"A GitHub Actions secret was removed from an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":135},{"action":"org.remove_actions_variable","description":"A GitHub Actions variable was removed from an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":135},{"action":"org.remove_billing_manager","description":"A billing manager was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":53},{"action":"org.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an organization.","docs_reference_links":"N/A","fieldsIndex":110},{"action":"org.remove_integration_secret","description":"A Codespaces or Dependabot secret was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":136},{"action":"org.remove_member","description":"A member was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_outside_collaborator","description":"An outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":137},{"action":"org.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-an-organization","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":53},{"action":"org.rename","description":"An organization was renamed.","docs_reference_links":"N/A","fieldsIndex":138},{"action":"org.required_workflow_create","description":"Triggered when a required workflow is created.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_delete","description":"Triggered when a required workflow is deleted.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_update","description":"Triggered when a required workflow is updated.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.restore_member","description":"An organization member was restored.","docs_reference_links":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","fieldsIndex":1},{"action":"org.revoke_external_identity","description":"A member's linked identity was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.revoke_sso_session","description":"A member's SAML session was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.runner_group_created","description":"A self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#creating-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":139},{"action":"org.runner_group_removed","description":"A self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_renamed","description":"A self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"org.runner_group_runner_removed","description":"The REST API was used to remove a self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":142},{"action":"org.runner_group_runners_added","description":"A self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_runners_updated","description":"A runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":140},{"action":"org.runner_group_updated","description":"The configuration of a self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":139},{"action":"org.runner_group_visiblity_updated","description":"The visibility of a self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":143},{"action":"org.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":11},{"action":"org_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":16},{"action":"org_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":11},{"action":"org_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org.secret_scanning_custom_pattern_push_protection_disabled","description":"Push protection for a custom pattern for secret scanning was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org.secret_scanning_custom_pattern_push_protection_enabled","description":"Push protection for a custom pattern for secret scanning was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_custom_message_disabled","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_custom_message_enabled","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_custom_message_updated","description":"The custom message triggered by an attempted push to a push-protected repository was updated for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_disable","description":"Push protection for secret scanning was disabled.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":11},{"action":"org.secret_scanning_push_protection_enable","description":"Push protection for secret scanning was enabled.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_disable","description":"Push protection for secret scanning was disabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_enable","description":"Push protection for secret scanning was enabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":144},{"action":"org_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":145},{"action":"org.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the CodeQL pull request alerts page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"org.security_center_export_coverage","description":"A CSV export was requested on the Coverage page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.security_center_export_overview_dashboard","description":"A CSV export was requested on the Overview Dashboard page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"org.security_center_export_risk","description":"A CSV export was requested on the Risk page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"org.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"org.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":149},{"action":"org.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":16},{"action":"org.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":11},{"action":"org.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","fieldsIndex":150},{"action":"org.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":151},{"action":"org.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in an organization was changed.","docs_reference_links":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","fieldsIndex":152},{"action":"org.set_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","fieldsIndex":53},{"action":"org.set_fork_pr_workflows_policy","description":"The policy for workflows on private repository forks was changed.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":150},{"action":"org.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":53},{"action":"org.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":153},{"action":"org.transfer","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":154},{"action":"org.transfer_outgoing","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":154},{"action":"org.unarchive","description":"The organization was unarchived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.unblock_user","description":"A user was unblocked from an organization.","docs_reference_links":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","fieldsIndex":117},{"action":"org.update_actions_secret","description":"A GitHub Actions secret was updated for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.update_actions_settings","description":"An organization owner or site administrator updated GitHub Actions policy settings for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","fieldsIndex":155},{"action":"org.update_actions_variable","description":"A GitHub Actions variable was updated for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.update_custom_images_policy","description":"The enterprise updated GitHub Actions custom image policy settings for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":156},{"action":"org.update_default_repository_permission","description":"The default repository permission level for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":157},{"action":"org.update_immutable_releases_settings_policy","description":"The settings policy for immutable releases was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":158},{"action":"org.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org.update_member","description":"A person's role was changed from owner to member or member to owner.","docs_reference_links":"N/A","fieldsIndex":157},{"action":"org.update_member_repository_creation_permission","description":"The create repository permission for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":159},{"action":"org.update_member_repository_invitation_permission","description":"An organization owner changed the policy setting for organization members inviting outside collaborators to repositories.","docs_reference_links":"/organizations/managing-organization-settings/setting-permissions-for-adding-outside-collaborators","docs_reference_titles":"Setting permissions for adding outside collaborators","fieldsIndex":160},{"action":"org.update_new_repository_default_branch_setting","description":"The name of the default branch was changed for new repositories in the organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.update_repo_self_hosted_runners_policy","description":"The repository self-hosted runners policy was updated","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","fieldsIndex":161},{"action":"org.update_saml_provider_settings","description":"An organization's SAML provider settings were updated.","docs_reference_links":"N/A","fieldsIndex":130},{"action":"org.update_terms_of_service","description":"An organization changed between the Standard Terms of Service and the GitHub Customer Agreement.","docs_reference_links":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","docs_reference_titles":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","fieldsIndex":11},{"action":"organization_custom_property_value.create","description":"An organization's custom property value was manually set for the first time.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":162},{"action":"organization_custom_property_value.destroy","description":"An organization's custom property value was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":162},{"action":"organization_default_label.create","description":"A default label was created for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","fieldsIndex":1},{"action":"organization_default_label.destroy","description":"A default label was deleted for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","fieldsIndex":15},{"action":"organization_default_label.update","description":"A default label was edited for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","fieldsIndex":15},{"action":"organization_domain.approve","description":"A domain was approved for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","fieldsIndex":163},{"action":"organization_domain.create","description":"A domain was added to an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":163},{"action":"organization_domain.destroy","description":"A domain was removed from an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","fieldsIndex":163},{"action":"organization_domain.verify","description":"A domain was verified for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":163},{"action":"organization_moderators.add_team","description":"N/A","docs_reference_links":"N/A","fieldsIndex":124},{"action":"organization_moderators.add_user","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_moderators.remove_team","description":"N/A","docs_reference_links":"N/A","fieldsIndex":124},{"action":"organization_moderators.remove_user","description":"N/A","docs_reference_links":"N/A","fieldsIndex":53},{"action":"organization_projects_change.clear","description":"An enterprise owner cleared the policy setting for organization-wide project boards in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":11},{"action":"organization_projects_change.disable","description":"Organization projects were disabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_projects_change.enable","description":"Organization projects were enabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_role.assign","description":"An organization role was assigned to a user or team.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":164},{"action":"organization_role.create","description":"A custom organization role was created in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":165},{"action":"organization_role.destroy","description":"A custom organization role was deleted in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":166},{"action":"organization_role.revoke","description":"A user or team was unassigned an organization role.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":164},{"action":"organization_role.update","description":"A custom organization role was edited in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":167},{"action":"organization_wide_project_base_role.update","description":"An organization's default project base role was updated.","docs_reference_links":"N/A","fieldsIndex":168},{"action":"packages.package_deleted","description":"An entire package was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":169},{"action":"packages.package_published","description":"A package was published or republished to an organization.","docs_reference_links":"N/A","fieldsIndex":170},{"action":"packages.package_version_deleted","description":"A specific package version was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":171},{"action":"packages.package_version_published","description":"A specific package version was published or republished to a package.","docs_reference_links":"N/A","fieldsIndex":172},{"action":"pages_protected_domain.create","description":"A GitHub Pages verified domain was created for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":173},{"action":"pages_protected_domain.delete","description":"A GitHub Pages verified domain was deleted from an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":173},{"action":"pages_protected_domain.verify","description":"A GitHub Pages domain was verified for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":173},{"action":"payment_method.create","description":"A new payment method was added, such as a new credit card or PayPal account.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.remove","description":"A payment method was removed.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.update","description":"An existing payment method was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_granted","description":"A fine-grained personal access token was granted access to resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":174},{"action":"personal_access_token.access_restriction_disabled","description":"The configured restriction for access to resources via personal access tokens was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_restriction_enabled","description":"The configured restriction for access to resources via personal access tokens was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_revoked","description":"A fine-grained personal access token was revoked. The token can still read public organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","fieldsIndex":175},{"action":"personal_access_token.auto_approve_grant_requests_disabled","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_enabled","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.expiration_limit_set","description":"A personal access token expiration limit was set.","docs_reference_links":"N/A","fieldsIndex":176},{"action":"personal_access_token.expiration_limit_unset","description":"A personal access token expiration limit was unset.","docs_reference_links":"N/A","fieldsIndex":177},{"action":"personal_access_token.request_cancelled","description":"A pending request for a fine-grained personal access token to access organization resources was canceled.","docs_reference_links":"N/A","fieldsIndex":178},{"action":"personal_access_token.request_created","description":"Triggered when a fine-grained personal access token was created to access organization resources and the organization requires approval before the token can access organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":179},{"action":"personal_access_token.request_denied","description":"A request for a fine-grained personal access token to access organization resources was denied.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":180},{"action":"prebuild_configuration.create","description":"A GitHub Codespaces prebuild configuration for a repository was created.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"prebuild_configuration.destroy","description":"A GitHub Codespaces prebuild configuration for a repository was deleted.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"prebuild_configuration.run_triggered","description":"A user initiated a run of a GitHub Codespaces prebuild configuration for a repository branch.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"prebuild_configuration.update","description":"A GitHub Codespaces prebuild configuration for a repository was edited.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"premium_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"premium_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"premium_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"private_repository_forking.clear","description":"An enterprise owner cleared the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"private_repository_forking.disable","description":"An enterprise owner disabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are never allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"private_repository_forking.enable","description":"An enterprise owner enabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are always allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":182},{"action":"private_vulnerability_reporting.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"profile_picture.update","description":"A profile picture was updated.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile","docs_reference_titles":"Personalize your profile","fieldsIndex":183},{"action":"project.access","description":"A project board visibility was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project_base_role.update","description":"A project's base role was updated.","docs_reference_links":"N/A","fieldsIndex":184},{"action":"project.close","description":"A project board was closed.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/closing-a-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":185},{"action":"project_collaborator.add","description":"A collaborator was added to a project.","docs_reference_links":"N/A","fieldsIndex":186},{"action":"project_collaborator.remove","description":"A collaborator was removed from a project.","docs_reference_links":"N/A","fieldsIndex":186},{"action":"project_collaborator.update","description":"A project collaborator's permission level was changed.","docs_reference_links":"N/A","fieldsIndex":186},{"action":"project.create","description":"A project board was created.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project.delete","description":"A project board was deleted.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project_field.create","description":"A field was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields","fieldsIndex":53},{"action":"project_field.delete","description":"A field was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","fieldsIndex":188},{"action":"project.link","description":"A repository was linked to a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.open","description":"A project board was reopened.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/reopening-a-closed-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":185},{"action":"project.rename","description":"A project board was renamed.","docs_reference_links":"N/A","fieldsIndex":189},{"action":"project.unlink","description":"A repository was unlinked from a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.update_org_permission","description":"The project's base-level permission for all organization members was changed or removed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"project.update_team_permission","description":"A team's project board permission level was changed or when a team was added or removed from a project board.","docs_reference_links":"N/A","fieldsIndex":190},{"action":"project.update_user_permission","description":"A user was added to or removed from a project board or had their permission level changed.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project_view.create","description":"A view was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":53},{"action":"project_view.delete","description":"A view was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":11},{"action":"project.visibility_private","description":"A project's visibility was changed from public to private.","docs_reference_links":"N/A","fieldsIndex":191},{"action":"project.visibility_public","description":"A project's visibility was changed from private to public.","docs_reference_links":"N/A","fieldsIndex":192},{"action":"protected_branch.authorized_users_teams","description":"The users, teams, or integrations allowed to bypass a branch protection were changed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","fieldsIndex":193},{"action":"protected_branch.branch_allowances","description":"A protected branch allowance was given to a specific user, team or integration.","docs_reference_links":"N/A","fieldsIndex":194},{"action":"protected_branch.create","description":"Branch protection was enabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.destroy","description":"Branch protection was disabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.dismiss_stale_reviews","description":"Enforcement of dismissing stale pull requests was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":196},{"action":"protected_branch.dismissal_restricted_users_teams","description":"Enforcement of restricting users and/or teams who can dismiss reviews was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":197},{"action":"protected_branch.policy_override","description":"A branch protection requirement was overridden by a repository administrator.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.rejected_ref_update","description":"A branch update attempt was rejected.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.update_admin_enforced","description":"Branch protection was enforced for repository administrators.","docs_reference_links":"N/A","fieldsIndex":199},{"action":"protected_branch.update_allow_deletions_enforcement_level","description":"Branch deletion was enabled or disabled for a protected branch.","docs_reference_links":"N/A","fieldsIndex":200},{"action":"protected_branch.update_allow_force_pushes_enforcement_level","description":"Force pushes were enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":201},{"action":"protected_branch.update_ignore_approvals_from_contributors","description":"Ignoring of approvals from contributors to a pull request was enabled or disabled for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":202},{"action":"protected_branch.update_linear_history_requirement_enforcement_level","description":"Required linear commit history was enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":203},{"action":"protected_branch.update_lock_allows_fetch_and_merge","description":"Fork syncing was enabled or disabled for a read-only branch","docs_reference_links":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":204},{"action":"protected_branch.update_lock_branch_enforcement_level","description":"The enforcement of a branch lock was updated.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":205},{"action":"protected_branch.update_merge_queue_enforcement_level","description":"Enforcement of the merge queue was modified for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","fieldsIndex":206},{"action":"protected_branch.update_name","description":"A branch name pattern was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":207},{"action":"protected_branch.update_pull_request_reviews_enforcement_level","description":"Enforcement of required pull request reviews was updated for a branch. Can be 0 (deactivated), 1 (non-admins), or 2 (everyone).","docs_reference_links":"N/A","fieldsIndex":208},{"action":"protected_branch.update_require_code_owner_review","description":"Enforcement of required code owner review was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":209},{"action":"protected_branch.update_require_last_push_approval","description":"Someone other than the person who pushed the last code-modifying commit to the branch must approve pull requests for the branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","fieldsIndex":210},{"action":"protected_branch.update_required_approving_review_count","description":"Enforcement of the required number of approvals before merging was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":211},{"action":"protected_branch.update_required_status_checks_enforcement_level","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":212},{"action":"protected_branch.update_signature_requirement_enforcement_level","description":"Enforcement of required commit signing was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":213},{"action":"protected_branch.update_strict_required_status_checks_policy","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":214},{"action":"public_key.create","description":"An SSH key was added to a user account or a deploy key was added to a repository.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","fieldsIndex":215},{"action":"public_key.delete","description":"An SSH key was removed from a user account or a deploy key was removed from a repository.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","fieldsIndex":216},{"action":"public_key.unverification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":217},{"action":"public_key.unverify","description":"A user account's SSH key or a repository's deploy key was unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":218},{"action":"public_key.update","description":"A user account's SSH key or a repository's deploy key was updated.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verify","description":"A user account's SSH key or a repository's deploy key was verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"pull_request.close","description":"A pull request was closed without being merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/closing-a-pull-request","docs_reference_titles":"Closing a pull request","fieldsIndex":219},{"action":"pull_request.converted_to_draft","description":"A pull request was converted to a draft.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#converting-a-pull-request-to-a-draft","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.create","description":"A pull request was created.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request","docs_reference_titles":"Creating a pull request","fieldsIndex":221},{"action":"pull_request.create_review_request","description":"A review was requested on a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.in_progress","description":"A pull request was marked as in progress.","docs_reference_links":"N/A","fieldsIndex":223},{"action":"pull_request.indirect_merge","description":"A pull request was considered merged because the pull request's commits were merged into the target branch.","docs_reference_links":"N/A","fieldsIndex":219},{"action":"pull_request.merge","description":"A pull request was merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/merging-a-pull-request","docs_reference_titles":"Merging a pull request","fieldsIndex":219},{"action":"pull_request.ready_for_review","description":"A pull request was marked as ready for review.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#marking-a-pull-request-as-ready-for-review","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.rebase","description":"A pull request was rebased.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request.remove_review_request","description":"A review request was removed from a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.reopen","description":"A pull request was reopened after previously being closed.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request_review_comment.create","description":"A review comment was added to a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":224},{"action":"pull_request_review_comment.delete","description":"A review comment on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":225},{"action":"pull_request_review_comment.update","description":"A review comment on a pull request was changed.","docs_reference_links":"N/A","fieldsIndex":226},{"action":"pull_request_review.delete","description":"A review on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":227},{"action":"pull_request_review.dismiss","description":"A review on a pull request was dismissed.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/dismissing-a-pull-request-review","docs_reference_titles":"Dismissing a pull request review","fieldsIndex":227},{"action":"pull_request_review.submit","description":"A review on a pull request was submitted.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-proposed-changes-in-a-pull-request#submitting-your-review","docs_reference_titles":"Reviewing proposed changes in a pull request","fieldsIndex":227},{"action":"repo.access","description":"The visibility of a repository changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","fieldsIndex":228},{"action":"repo.actions_enabled","description":"GitHub Actions was enabled for a repository.","docs_reference_links":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","docs_reference_titles":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","fieldsIndex":229},{"action":"repo.add_member","description":"A collaborator was added to a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/inviting-collaborators-to-a-personal-repository","docs_reference_titles":"Inviting collaborators to a personal repository","fieldsIndex":230},{"action":"repo.add_topic","description":"A topic was added to a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","fieldsIndex":231},{"action":"repo.advanced_security_disabled","description":"GitHub Advanced Security was disabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.advanced_security_enabled","description":"GitHub Advanced Security was enabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.archived","description":"A repository was archived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.change_merge_setting","description":"Pull request merge options were changed for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_analysis_deleted","description":"Code scanning analysis for a repository was deleted.","docs_reference_links":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","docs_reference_titles":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","fieldsIndex":235},{"action":"repo.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_configuration_for_branch_deleted","description":"A code scanning configuration for a branch of a repository was deleted.","docs_reference_links":"/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch","docs_reference_titles":"Resolving code scanning alerts","fieldsIndex":236},{"action":"repo.code_scanning_delegated_alert_dismissal_disabled","description":"Prevention of direct alert dismissal for code scanning was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_delegated_alert_dismissal_enabled","description":"Prevention of direct alert dismissal for code scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.codeql_disabled","description":"Code scanning using the default setup was disabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":231},{"action":"repo.codeql_enabled","description":"Code scanning using the default setup was enabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":237},{"action":"repo.codeql_updated","description":"Code scanning using the default setup was updated for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":237},{"action":"repo.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to this repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to this repository was revoked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.config.disable_collaborators_only","description":"The interaction limit for collaborators only was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":238},{"action":"repo.config.disable_contributors_only","description":"The interaction limit for prior contributors only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":239},{"action":"repo.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":238},{"action":"repo.config.enable_collaborators_only","description":"The interaction limit for collaborators only was enabled in a repository Users that are not collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":32},{"action":"repo.config.enable_contributors_only","description":"The interaction limit for prior contributors only was enabled in a repository Users that are not prior contributors, collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":104},{"action":"repo.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users was enabled in a repository New users aren't able to interact with a repository for a set duration Existing users of the repository, contributors, collaborators or organization members are able to interact with a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":18},{"action":"repo.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","fieldsIndex":32},{"action":"repo.create","description":"A repository was created.","docs_reference_links":"/repositories/creating-and-managing-repositories/creating-a-new-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/creating-a-new-repository","fieldsIndex":240},{"action":"repo.create_actions_secret","description":"A GitHub Actions secret was created for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.create_actions_variable","description":"A GitHub Actions variable was created for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.create_integration_secret","description":"A Codespaces or Dependabot secret was created for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.destroy","description":"A repository was deleted.","docs_reference_links":"/repositories/creating-and-managing-repositories/deleting-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/deleting-a-repository","fieldsIndex":240},{"action":"repo.download_zip","description":"A source code archive of a repository was downloaded as a ZIP file.","docs_reference_links":"/repositories/working-with-files/using-files/downloading-source-code-archives","docs_reference_titles":"/repositories/working-with-files/using-files/downloading-source-code-archives","fieldsIndex":233},{"action":"repo.immutable_releases_settings_disabled","description":"The setting for immutable releases was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.immutable_releases_settings_enabled","description":"The setting for immutable releases was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_cname","description":"A GitHub Pages custom domain was modified in a repository.","docs_reference_links":"N/A","fieldsIndex":243},{"action":"repo.pages_create","description":"A GitHub Pages site was created.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_destroy","description":"A GitHub Pages site was deleted.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_disabled","description":"HTTPS redirects were disabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_enabled","description":"HTTPS redirects were enabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_private","description":"A GitHub Pages site visibility was changed to private.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_public","description":"A GitHub Pages site visibility was changed to public.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_soft_delete","description":"A GitHub Pages site was soft-deleted because its owner's plan changed.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.pages_soft_delete_restore","description":"A GitHub Pages site that was previously soft-deleted was restored.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_source","description":"A GitHub Pages source was modified.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":245},{"action":"repo.remove_actions_secret","description":"A GitHub Actions secret was deleted for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":246},{"action":"repo.remove_actions_variable","description":"A GitHub Actions variable was deleted for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":246},{"action":"repo.remove_integration_secret","description":"A Codespaces or Dependabot secret was deleted for a repository.","docs_reference_links":"N/A","fieldsIndex":247},{"action":"repo.remove_member","description":"A collaborator was removed from a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/removing-a-collaborator-from-a-personal-repository","docs_reference_titles":"Removing a collaborator from a personal repository","fieldsIndex":233},{"action":"repo.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":32},{"action":"repo.remove_topic","description":"A topic was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repo.rename","description":"A repository was renamed.","docs_reference_links":"/repositories/creating-and-managing-repositories/renaming-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/renaming-a-repository","fieldsIndex":248},{"action":"repo.rename_branch","description":"A branch was renamed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","fieldsIndex":249},{"action":"repo.restore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"repo.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"repo.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":149},{"action":"repo.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":250},{"action":"repo.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":251},{"action":"repo.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","fieldsIndex":252},{"action":"repo.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","fieldsIndex":252},{"action":"repo.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","fieldsIndex":253},{"action":"repo.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","fieldsIndex":233},{"action":"repo.set_fork_pr_workflows_policy","description":"Triggered when the policy for workflows on private repository forks is changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","fieldsIndex":252},{"action":"repo.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":233},{"action":"repo.staff_unlock","description":"An enterprise owner or GitHub staff (with permission from a repository administrator) temporarily unlocked the repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.transfer","description":"A user accepted a request to receive a transferred repository.","docs_reference_links":"/repositories/creating-and-managing-repositories/transferring-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/transferring-a-repository","fieldsIndex":254},{"action":"repo.transfer_outgoing","description":"A repository was transferred to another repository network.","docs_reference_links":"N/A","fieldsIndex":255},{"action":"repo.transfer_start","description":"A user sent a request to transfer a repository to another user or organization.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.unarchived","description":"A repository was unarchived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.update_actions_access_settings","description":"The setting to control how a repository was used by GitHub Actions workflows in other repositories was changed.","docs_reference_links":"N/A","fieldsIndex":256},{"action":"repo.update_actions_secret","description":"A GitHub Actions secret was updated for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.update_actions_settings","description":"A repository administrator changed GitHub Actions policy settings for a repository.","docs_reference_links":"N/A","fieldsIndex":257},{"action":"repo.update_actions_variable","description":"A GitHub Actions variable was updated for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.update_default_branch","description":"The default branch for a repository was changed.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.update_member","description":"A user's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":258},{"action":"repository_advisory.close","description":"Someone closed a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/about-repository-security-advisories","docs_reference_titles":"Repository security advisories","fieldsIndex":32},{"action":"repository_advisory.cve_request","description":"Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.github_broadcast","description":"GitHub made a security advisory public in the GitHub Advisory Database.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"repository_advisory.github_withdraw","description":"GitHub withdrew a security advisory that was published in error.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"repository_advisory.open","description":"Someone opened a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.publish","description":"Someone published a security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.reopen","description":"Someone reopened as draft security advisory.","docs_reference_links":"N/A","fieldsIndex":259},{"action":"repository_advisory.update","description":"Someone edited a draft or published security advisory.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"repository_branch_protection_evaluation.disable","description":"Branch protections were disabled for the repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_branch_protection_evaluation.enable","description":"Branch protections were enabled for this repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_code_security.disable","description":"Code security was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_code_security.enable","description":"Code security was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_content_analysis.disable","description":"Data use settings were disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_content_analysis.enable","description":"Data use settings were enabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_dependency_graph_autosubmit.disable","description":"Automatic dependency submission was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph_autosubmit.enable","description":"Automatic dependency submission was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph.disable","description":"The dependency graph was disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea, tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":231},{"action":"repository_dependency_graph.enable","description":"The dependency graph was enabled for a private repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_updates_self_hosted.disabled","description":"Dependency updates on self-hosted runners was disabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":238},{"action":"repository_dependency_updates_self_hosted.enabled","description":"Dependency updates on self-hosted runners was enabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":231},{"action":"repository_image.create","description":"An image to represent a repository was uploaded.","docs_reference_links":"N/A","fieldsIndex":260},{"action":"repository_image.destroy","description":"An image to represent a repository was deleted.","docs_reference_links":"N/A","fieldsIndex":260},{"action":"repository_invitation.accept","description":"An invitation to join a repository was accepted.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_invitation.cancel","description":"An invitation to join a repository was canceled.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_invitation.create","description":"An invitation to join a repository was sent.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_invitation.reject","description":"An invitation to join a repository was declined.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_limit.reached","description":"An organization has reached their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":263},{"action":"repository_limit.warning","description":"An organization is approaching their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":264},{"action":"repository_malware_alerts.disable","description":"Dependabot malware alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_malware_alerts.enable","description":"Dependabot malware alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_projects_change.clear","description":"The repository projects policy was removed for an organization, or all organizations in the enterprise Organization owners can now control their repository projects settings.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":0},{"action":"repository_projects_change.disable","description":"Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_projects_change.enable","description":"Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_ruleset.create","description":"A repository ruleset was created.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","fieldsIndex":265},{"action":"repository_ruleset.destroy","description":"A repository ruleset was deleted.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","fieldsIndex":265},{"action":"repository_ruleset.update","description":"A repository ruleset was edited.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","fieldsIndex":266},{"action":"repository_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":104},{"action":"repository_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":104},{"action":"repository_secret_scanning.disable","description":"Secret scanning was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":231},{"action":"repository_secret_scanning.enable","description":"Secret scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.disabled","description":"Metadata for secret scanning alerts has been disabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.enabled","description":"Metadata for secret scanning alerts has been enabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":104},{"action":"repository_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":102},{"action":"repository_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":234},{"action":"repository_secret_scanning_push_protection.disable","description":"Secret scanning push protection was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection.enable","description":"Secret scanning push protection was enabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_security_configuration.applied","description":"A code security configuration was applied to a repository.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_configuration.failed","description":"A code security configuration failed to attach to the repository.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_configuration.removed","description":"A code security configuration was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_configuration.removed_by_settings_change","description":"A code security configuration was removed due to a change in repository or enterprise settings.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_updates.disable","description":"Dependabot security updates was disabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_security_updates.enable","description":"Dependabot security updates was enabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_visibility_change.clear","description":"The repository visibility change setting was cleared for an organization or enterprise.","docs_reference_links":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-changes-to-repository-visibility","docs_reference_titles":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"repository_visibility_change.disable","description":"The ability for enterprise members to update a repository's visibility was disabled. Members are unable to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"repository_visibility_change.enable","description":"The ability for enterprise members to update a repository's visibility was enabled. Members are able to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"repository_vulnerability_alert.assign","description":"A user was assigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_vulnerability_alert.auto_dismiss","description":"A Dependabot alert was automatically dismissed because its metadata matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":269},{"action":"repository_vulnerability_alert.auto_reopen","description":"A previously auto-dismissed Dependabot alert was automatically reopened because its metadata no longer matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":269},{"action":"repository_vulnerability_alert.create","description":"GitHub created a Dependabot alert because the repository uses a vulnerable dependency.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":270},{"action":"repository_vulnerability_alert.dismiss","description":"A Dependabot alert was manually dismissed.","docs_reference_links":"N/A","fieldsIndex":271},{"action":"repository_vulnerability_alert.reintroduce","description":"A Dependabot alert was automatically reopened because the repository resumed use of a vulnerable dependency.","docs_reference_links":"N/A","fieldsIndex":270},{"action":"repository_vulnerability_alert.reopen","description":"A Dependabot alert was manually reopened.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_vulnerability_alert.resolve","description":"Changes were pushed to update and resolve a Dependabot alert in a project dependency.","docs_reference_links":"N/A","fieldsIndex":270},{"action":"repository_vulnerability_alert.unassign","description":"A user was unassigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":272},{"action":"repository_vulnerability_alert.withdraw","description":"A Dependabot alert was withdrawn.","docs_reference_links":"N/A","fieldsIndex":273},{"action":"repository_vulnerability_alerts.authorized_users_teams","description":"The list of people or teams authorized to receive Dependabot alerts for the repository was updated.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","fieldsIndex":234},{"action":"repository_vulnerability_alerts_auto_dismissal.disable","description":"Automatic dismissal of low-impact Dependabot alerts was disabled for the repository.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"repository_vulnerability_alerts_auto_dismissal.enable","description":"Automatic dismissal of low-impact Dependabot alerts was enabled for the repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_vulnerability_alerts.disable","description":"Dependabot alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_vulnerability_alerts.enable","description":"Dependabot alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"required_status_check.create","description":"A status check was marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":274},{"action":"required_status_check.destroy","description":"A status check was no longer marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":274},{"action":"restrict_notification_delivery.disable","description":"Email notification restrictions for an organization or enterprise were disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":275},{"action":"restrict_notification_delivery.enable","description":"Email notification restrictions for an organization or enterprise were enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":276},{"action":"role.create","description":"A new custom repository role was created.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":277},{"action":"role.destroy","description":"A custom repository role was deleted.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":278},{"action":"role.update","description":"A custom repository role was edited.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":279},{"action":"secret_scanning_alert.assign","description":"A user was assigned to a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.create","description":"GitHub detected a secret and created a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.delete","description":"A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":281},{"action":"secret_scanning_alert.public_leak","description":"A secret scanning alert was leaked in a public repo.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.reopen","description":"A secret scanning alert was reopened.","docs_reference_links":"N/A","fieldsIndex":282},{"action":"secret_scanning_alert.report","description":"A leaked secret was reported to the secret's provider by secret scanning.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning/resolving-alerts","docs_reference_titles":"Resolving alerts from secret scanning","fieldsIndex":283},{"action":"secret_scanning_alert.resolve","description":"A secret scanning alert was resolved.","docs_reference_links":"N/A","fieldsIndex":282},{"action":"secret_scanning_alert.revoke","description":"A secret scanning alert was revoked.","docs_reference_links":"N/A","fieldsIndex":284},{"action":"secret_scanning_alert.unassign","description":"A user was unassigned from a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.validate","description":"A secret scanning alert was validated.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":285},{"action":"secret_scanning_closure_request.approve","description":"A request to close a secret scanning alert was approved by a user.","docs_reference_links":"N/A","fieldsIndex":286},{"action":"secret_scanning_closure_request.cancel","description":"N/A","docs_reference_links":"A reqeust to close a secret scanning alert was canceled by a user.","docs_reference_titles":"A, reqeust, to, close, a, secret, scanning, alert, was, canceled, by, a, user.","fieldsIndex":56},{"action":"secret_scanning_closure_request.create","description":"N/A","docs_reference_links":"A user requested to close a secret scanning alert.","docs_reference_titles":"A, user, requested, to, close, a, secret, scanning, alert.","fieldsIndex":287},{"action":"secret_scanning_closure_request.deny","description":"A request to close a secret scanning alert was denied by a user.","docs_reference_links":"N/A","fieldsIndex":286},{"action":"secret_scanning.disable","description":"Secret scanning was disabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":11},{"action":"secret_scanning.enable","description":"Secret scanning was enabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.disable","description":"Secret scanning was disabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.enable","description":"Secret scanning was enabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_push_protection.bypass","description":"Triggered when a user bypasses the push protection on a secret detected by secret scanning.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#bypassing-push-protection-for-a-secret","docs_reference_titles":"Push protection","fieldsIndex":288},{"action":"secret_scanning_push_protection_request.approve","description":"A request to bypass secret scanning push protection was approved by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":289},{"action":"secret_scanning_push_protection_request.cancel","description":"A user canceled a request to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":290},{"action":"secret_scanning_push_protection_request.complete","description":"A user pushed a commit containing a secret for which there is an approved secret scanning push protection bypass request.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":290},{"action":"secret_scanning_push_protection_request.deny","description":"A request to bypass secret scanning push protection was denied by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":291},{"action":"secret_scanning_push_protection_request.request","description":"A user requested to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":292},{"action":"secret_scanning_scan.completed","description":"A secret scanning scan has completed on this repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":293},{"action":"security_configuration.create","description":"A security configuration was created","docs_reference_links":"N/A","fieldsIndex":294},{"action":"security_configuration_default.delete","description":"A default security configuration setting for new repositories was removed.","docs_reference_links":"N/A","fieldsIndex":295},{"action":"security_configuration_default.update","description":"A default security configuration setting for new repositories was updated.","docs_reference_links":"N/A","fieldsIndex":295},{"action":"security_configuration.delete","description":"A security configuration was deleted","docs_reference_links":"N/A","fieldsIndex":294},{"action":"security_configuration_policy.update","description":"A security configuration policy was updated","docs_reference_links":"N/A","fieldsIndex":296},{"action":"security_configuration.update","description":"A security configuration was updated","docs_reference_links":"N/A","fieldsIndex":297},{"action":"sponsors.agreement_sign","description":"A GitHub Sponsors agreement was signed on behalf of an organization.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"sponsors.custom_amount_settings_change","description":"Custom amounts for GitHub Sponsors were enabled or disabled, or the suggested custom amount was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":298},{"action":"sponsors.fiscal_host_change","description":"The fiscal host for a GitHub Sponsors listing was updated.","docs_reference_links":"N/A","fieldsIndex":299},{"action":"sponsors.invoiced_agreement_sign","description":"An agreement for invoiced billing for GitHub Sponsors was signed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","fieldsIndex":0},{"action":"sponsors.repo_funding_links_file_action","description":"The FUNDING file in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","fieldsIndex":300},{"action":"sponsors.sponsor_sponsorship_cancel","description":"A sponsorship was canceled.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Downgrading a sponsorship","fieldsIndex":301},{"action":"sponsors.sponsor_sponsorship_create","description":"A sponsorship was created, by sponsoring an account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":302},{"action":"sponsors.sponsor_sponsorship_payment_complete","description":"After you sponsor an account and a payment has been processed, the sponsorship payment was marked as complete.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":302},{"action":"sponsors.sponsor_sponsorship_preference_change","description":"The option to receive email updates from a sponsored account was changed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","fieldsIndex":301},{"action":"sponsors.sponsor_sponsorship_tier_change","description":"A sponsorship was upgraded or downgraded.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/upgrading-a-sponsorship, /billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Upgrading a sponsorship, Downgrading a sponsorship","fieldsIndex":302},{"action":"sponsors.sponsored_developer_approve","description":"A GitHub Sponsors account was approved.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":299},{"action":"sponsors.sponsored_developer_create","description":"A GitHub Sponsors account was created.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":303},{"action":"sponsors.sponsored_developer_disable","description":"A GitHub Sponsors account was disabled.","docs_reference_links":"N/A","fieldsIndex":299},{"action":"sponsors.sponsored_developer_profile_update","description":"The profile for GitHub Sponsors account was edited.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","fieldsIndex":303},{"action":"sponsors.sponsored_developer_redraft","description":"A GitHub Sponsors account was returned to draft state from approved state.","docs_reference_links":"N/A","fieldsIndex":299},{"action":"sponsors.sponsored_developer_request_approval","description":"An application for GitHub Sponsors was submitted for approval.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":299},{"action":"sponsors.sponsored_developer_tier_description_update","description":"The description for a sponsorship tier was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":304},{"action":"sponsors.sponsors_patreon_user_create","description":"A Patreon account was linked to a user account for use with GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","fieldsIndex":305},{"action":"sponsors.sponsors_patreon_user_destroy","description":"A Patreon account for use with GitHub Sponsors was unlinked from a user account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/unlinking-your-patreon-account-from-your-github-account","docs_reference_titles":"Unlinking your Patreon account from GitHub","fieldsIndex":305},{"action":"sponsors.update_tier_repository","description":"A GitHub Sponsors tier changed access for a repository.","docs_reference_links":"N/A","fieldsIndex":304},{"action":"sponsors.update_tier_welcome_message","description":"The welcome message for a GitHub Sponsors tier for an organization was updated.","docs_reference_links":"N/A","fieldsIndex":304},{"action":"sponsors.withdraw_agreement_signature","description":"A signature was withdrawn from a GitHub Sponsors agreement that applies to an organization.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"ssh_certificate_authority.create","description":"An SSH certificate authority for an organization or enterprise was created.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":306},{"action":"ssh_certificate_authority.destroy","description":"An SSH certificate authority for an organization or enterprise was deleted.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":306},{"action":"ssh_certificate_requirement.disable","description":"The requirement for members to use SSH certificates to access an organization resources was disabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"ssh_certificate_requirement.enable","description":"The requirement for members to use SSH certificates to access an organization resources was enabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"staff.dependabot_debug_credentials_generated","description":"Dependabot encrypted config was read.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"staff.set_domain_token_expiration","description":"The verification code expiry time for an organization or enterprise domain was set.","docs_reference_links":"N/A","fieldsIndex":307},{"action":"staff.unverify_domain","description":"An organization or enterprise domain was unverified.","docs_reference_links":"N/A","fieldsIndex":308},{"action":"staff.verify_domain","description":"An organization or enterprise domain was verified.","docs_reference_links":"N/A","fieldsIndex":309},{"action":"sub_issues.parent_issue_add","description":"A parent issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"sub_issues.parent_issue_remove","description":"A parent issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"sub_issues.sub_issue_add","description":"A sub-issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"sub_issues.sub_issue_remove","description":"A sub-issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"team.add_member","description":"A member of an organization was added to a team.","docs_reference_links":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","fieldsIndex":310},{"action":"team.add_repository","description":"A team was given access and permissions to a repository.","docs_reference_links":"N/A","fieldsIndex":311},{"action":"team.add_to_organization","description":"A team was added to an organization.","docs_reference_links":"N/A","fieldsIndex":312},{"action":"team.change_parent_team","description":"A child team was created or a child team's parent was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","docs_reference_titles":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","fieldsIndex":310},{"action":"team.change_privacy","description":"A team's privacy level was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/changing-team-visibility","docs_reference_titles":"/organizations/organizing-members-into-teams/changing-team-visibility","fieldsIndex":310},{"action":"team.create","description":"A new team is created.","docs_reference_links":"N/A","fieldsIndex":310},{"action":"team.demote_maintainer","description":"A user was demoted from a team maintainer to a team member.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","fieldsIndex":310},{"action":"team.destroy","description":"A team was deleted.","docs_reference_links":"N/A","fieldsIndex":310},{"action":"team_group_mapping.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team_group_mapping.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team_group_mapping.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team.members_limit_warning","description":"A team is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.organization_assignments_limit_reached","description":"A team has reached its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.organization_assignments_limit_warning","description":"A team is approaching its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.promote_maintainer","description":"A user was promoted from a team member to a team maintainer.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","fieldsIndex":310},{"action":"team.remove_from_organization","description":"A team was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":312},{"action":"team.remove_member","description":"An organization member was removed from a team.","docs_reference_links":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","fieldsIndex":310},{"action":"team.remove_repository","description":"A repository was removed from a team's control.","docs_reference_links":"N/A","fieldsIndex":315},{"action":"team.rename","description":"A team's name was changed.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team_sync_tenant.disabled","description":"Team synchronization with a tenant was disabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.enabled","description":"Team synchronization with a tenant was enabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.update_okta_credentials","description":"The Okta credentials for team synchronization with a tenant were changed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"team.update_repository_permission","description":"A team's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":317},{"action":"user_content_edit.delete","description":"Triggered when a user content edit is deleted.","docs_reference_links":"N/A","fieldsIndex":318},{"action":"vulnerability_alert_rule.create","description":"A Dependabot rule was created.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"vulnerability_alert_rule.delete","description":"A Dependabot rule was deleted.","docs_reference_links":"N/A","fieldsIndex":320},{"action":"vulnerability_alert_rule.disable","description":"A Dependabot rule was disabled for a single repository or disabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"vulnerability_alert_rule.enable","description":"A Dependabot rule was enabled for a single repository or enabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"vulnerability_alert_rule.force_disable","description":"A Dependabot rule was enabled for an organization and cannot be disabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":322},{"action":"vulnerability_alert_rule.force_enable","description":"A Dependabot rule was disabled for an organization and cannot be enabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":322},{"action":"vulnerability_alert_rule.update","description":"A Dependabot rule's conditions, actions, or metadata changed.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"workflows.actions_policy_violation","description":"A workflow run produced one or more workflow execution protection policy violations.","docs_reference_links":"N/A","fieldsIndex":323},{"action":"workflows.approve_workflow_job","description":"A workflow job was approved.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":324},{"action":"workflows.bypass_protection_rules","description":"N/A","docs_reference_links":"N/A","fieldsIndex":325},{"action":"workflows.cancel_workflow_run","description":"A workflow run was cancelled.","docs_reference_links":"/actions/managing-workflow-runs/canceling-a-workflow","docs_reference_titles":"Canceling a workflow run","fieldsIndex":326},{"action":"workflows.comment_workflow_job","description":"N/A","docs_reference_links":"N/A","fieldsIndex":327},{"action":"workflows.completed_workflow_run","description":"A workflow status changed to completed. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/monitoring-and-troubleshooting-workflows/viewing-workflow-run-history","docs_reference_titles":"Viewing workflow run history","fieldsIndex":328},{"action":"workflows.created_workflow_run","description":"A workflow run was create. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/learn-github-actions/understanding-github-actions#create-an-example-workflow","docs_reference_titles":"Understanding GitHub Actions","fieldsIndex":329},{"action":"workflows.delete_workflow_run","description":"A workflow run was deleted.","docs_reference_links":"/actions/managing-workflow-runs/deleting-a-workflow-run","docs_reference_titles":"Deleting a workflow run","fieldsIndex":330},{"action":"workflows.disable_workflow","description":"A workflow was disabled.","docs_reference_links":"N/A","fieldsIndex":331},{"action":"workflows.enable_workflow","description":"A workflow was enabled, after previously being disabled by disable_workflow.","docs_reference_links":"N/A","fieldsIndex":331},{"action":"workflows.pin_workflow","description":"A workflow was pinned.","docs_reference_links":"N/A","fieldsIndex":332},{"action":"workflows.prepared_workflow_job","description":"A workflow job was started. Includes the list of secrets that were provided to the job. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/using-workflows/events-that-trigger-workflows","docs_reference_titles":"Events that trigger workflows","fieldsIndex":333},{"action":"workflows.reject_workflow_job","description":"A workflow job was rejected.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":334},{"action":"workflows.rerun_workflow_run","description":"A workflow run was re-run.","docs_reference_links":"/actions/managing-workflow-runs/re-running-workflows-and-jobs","docs_reference_titles":"Re-running workflows and jobs","fieldsIndex":335},{"action":"workflows.unpin_workflow","description":"A workflow was unpinned after previously being pinned.","docs_reference_links":"N/A","fieldsIndex":332},{"action":"account_recovery_token.confirm","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.recover","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"billing.update_bill_cycle_day","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.add_admin","description":"An enterprise owner was added to an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":336},{"action":"business.add_billing_manager","description":"A billing manager was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"business.add_support_entitlee","description":"A support entitlement was added to a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":337},{"action":"business.remove_admin","description":"An enterprise owner was removed from an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":336},{"action":"business.remove_billing_manager","description":"A billing manager was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"business.remove_member","description":"A member was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":338},{"action":"business.remove_support_entitlee","description":"A support entitlement was removed from a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":336},{"action":"business.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the \"CodeQL pull request alerts\" page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"business.security_center_export_coverage","description":"A CSV export was requested on the \"Coverage\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.security_center_export_overview_dashboard","description":"A CSV export was requested on the \"Overview Dashboard\" page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"business.security_center_export_risk","description":"A CSV export was requested on the \"Risk\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":337},{"action":"business.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":13},{"action":"business.set_actions_fork_pr_approvals_policy","description":"The policy for requiring approvals for workflows from public forks was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":339},{"action":"business.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-private-repositories","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":340},{"action":"business.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-artifact-and-log-retention-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":341},{"action":"business.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-workflow-permissions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":13},{"action":"business.set_fork_pr_workflows_policy","description":"The policy for fork pull request workflows was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":340},{"action":"business.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":13},{"action":"gist.create","description":"A gist was created.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"gist.destroy","description":"A gist was deleted.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"gist.visibility_change","description":"The visibility of a gist was updated.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"git_signing_ssh_public_key.create","description":"An SSH key was added to a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":343},{"action":"git_signing_ssh_public_key.delete","description":"An SSH key was removed from a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":344},{"action":"gpg_key.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":345},{"action":"gpg_key.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":345},{"action":"marketplace_listing_plan.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"marketplace_listing_plan.publish","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"marketplace_listing_plan.retire","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"marketplace_listing_plan.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"mcp_registry.allowlist_add_server","description":"A server was added to an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":347},{"action":"mcp_registry.allowlist_create","description":"An MCP registry allowlist was created.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"mcp_registry.allowlist_delete","description":"An MCP registry allowlist was deleted.","docs_reference_links":"N/A","fieldsIndex":349},{"action":"mcp_registry.allowlist_remove_server","description":"A server was removed from an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":347},{"action":"mcp_registry.allowlist_set_server_entries","description":"Entries were set for a server in an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":350},{"action":"mcp_registry.allowlist_update","description":"An MCP registry allowlist was updated.","docs_reference_links":"N/A","fieldsIndex":351},{"action":"mcp_registry.settings_update","description":"An MCP policy setting for the business was updated.","docs_reference_links":"N/A","fieldsIndex":352},{"action":"oauth_access.create","description":"An OAuth access token was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, /authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, Managing your personal access tokens","fieldsIndex":353},{"action":"oauth_access.destroy","description":"An OAuth access token was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","fieldsIndex":354},{"action":"oauth_access.regenerate","description":"An OAuth access token was regenerated.","docs_reference_links":"N/A","fieldsIndex":353},{"action":"oauth_access.revoke","description":"An OAuth access token was revoked.","docs_reference_links":"N/A","fieldsIndex":355},{"action":"oauth_access.update","description":"An OAuth access token was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"oauth_authorization.create","description":"An authorization for an OAuth application was created.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":353},{"action":"oauth_authorization.destroy","description":"An authorization for an OAuth application was deleted.","docs_reference_links":"/apps/using-github-apps/reviewing-your-authorized-integrations","docs_reference_titles":"Reviewing and revoking authorization of GitHub Apps","fieldsIndex":356},{"action":"oauth_authorization.update","description":"An authorization for an OAuth application was updated.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":357},{"action":"passkey.register","description":"A new passkey was added.","docs_reference_links":"N/A","fieldsIndex":358},{"action":"passkey.remove","description":"A new passkey was removed.","docs_reference_links":"N/A","fieldsIndex":358},{"action":"personal_access_token.create","description":"Triggered when you create a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":359},{"action":"personal_access_token.credential_regenerated","description":"Triggered when you regenerate a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":360},{"action":"personal_access_token.credential_revoked","description":"A fine-grained personal access token was revoked by GitHub Advanced Security.","docs_reference_links":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","docs_reference_titles":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","fieldsIndex":361},{"action":"personal_access_token.destroy","description":"Triggered when you delete a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":362},{"action":"personal_access_token.update","description":"A fine-grained personal access token was updated.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","fieldsIndex":363},{"action":"repo.temporary_access_granted","description":"Temporary access was enabled for a repository.","docs_reference_links":"/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise","docs_reference_titles":"Accessing user-owned repositories in your enterprise","fieldsIndex":104},{"action":"sandbox.add_port","description":"A forwarded port was added to a sandbox.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.create","description":"A sandbox was created.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.delete","description":"A sandbox was deleted.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.generate_token","description":"A token was generated for a sandbox.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.remove_port","description":"A forwarded port was removed from a sandbox.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.resume","description":"A sandbox was resumed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.stop","description":"A sandbox was stopped.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"security_key.register","description":"A security key was registered for an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"security_key.remove","description":"A security key was removed from an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"social_identity.linked","description":"A user linked a social identity to their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"social_identity.unlinked","description":"A user unlinked a social identity from their account.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"social_identity.unlinked_all","description":"A user unlinked all social identities from their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sponsors.sponsored_developer_update_newsletter_send","description":"Triggered when you send an email update to your sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","fieldsIndex":15},{"action":"sponsors.waitlist_join","description":"You join the waitlist to join GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":303},{"action":"successor_invitation.accept","description":"Triggered when you accept a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.cancel","description":"Triggered when you cancel a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.create","description":"Triggered when you create a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.decline","description":"Triggered when you decline a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"successor_invitation.revoke","description":"Triggered when you revoke a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":364},{"action":"trusted_device.register","description":"A new trusted device was added.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"trusted_device.remove","description":"A trusted device was removed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.abort","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.complete","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.ignore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_approve","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_decline","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.start","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_account_recovery.two_factor_destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.add_factor","description":"A secondary authentication factor was added to a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.disabled","description":"Two-factor authentication was disabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/disabling-two-factor-authentication-for-your-personal-account","docs_reference_titles":"Disabling two-factor authentication for your personal account","fieldsIndex":15},{"action":"two_factor_authentication.enabled","description":"Two-factor authentication was enabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"Configuring two-factor authentication","fieldsIndex":15},{"action":"two_factor_authentication.password_reset_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.recovery_codes_regenerated","description":"Two factor recovery codes were regenerated for a user account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_authentication.remove_factor","description":"A secondary authentication factor was removed from a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.sign_in_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.update_fallback","description":"The two-factor authentication fallback for a user account was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.add_email","description":"An email address was added to a user account.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/adding-an-email-address-to-your-github-account","docs_reference_titles":"Adding an email address to your GitHub account","fieldsIndex":365},{"action":"user.async_delete","description":"An asynchronous job was started to destroy a user account, eventually triggering a user.delete event.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.audit_log_export","description":"Audit log entries were exported.","docs_reference_links":"N/A","fieldsIndex":115},{"action":"user.block_user","description":"A user was blocked by another user.","docs_reference_links":"N/A","fieldsIndex":117},{"action":"user.change_password","description":"A user changed their password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.codespaces_trusted_repo_access_granted","description":"Triggered when you allow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":366},{"action":"user.codespaces_trusted_repo_access_revoked","description":"Triggered when you disallow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":120},{"action":"user.create","description":"A new user account was created.","docs_reference_links":"N/A","fieldsIndex":367},{"action":"user.create_integration_secret","description":"A user secret for Codespaces was created.","docs_reference_links":"N/A","fieldsIndex":368},{"action":"user.creation_rate_limit_exceeded","description":"The rate of creation of user accounts, applications, issues, pull requests or other resources exceeded the configured rate limits, or too many users were followed too quickly.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"user.delete","description":"A user account was destroyed by an asynchronous job.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.demote","description":"A site administrator was demoted to an ordinary user account.","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.destroy","description":"A user deleted his or her account, triggering user.async_delete.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.device_verification_failure","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_requested","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_success","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.disable_collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.disable_contributors_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.disable_sockpuppet_disallowed","description":"N/A","docs_reference_links":"N/A","fieldsIndex":369},{"action":"user_email.confirm_claim","description":"An enterprise managed user claimed an email address.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_email.mark_as_unclaimed","description":"N/A","docs_reference_links":"An enterprise managed user unclaimed an email address.","docs_reference_titles":"An, GitHub Help Documentation, managed, user, unclaimed, an, email, address.","fieldsIndex":15},{"action":"user.enable_collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.enable_contributors_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":369},{"action":"user.enable_sockpuppet_disallowed","description":"N/A","docs_reference_links":"N/A","fieldsIndex":369},{"action":"user.failed_login","description":"A user tried to sign in with an incorrect username, password, or two-factor authentication code.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.forgot_password","description":"A user requested a password reset.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","fieldsIndex":370},{"action":"user.grant_github_developer","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.hide_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now hidden.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.login","description":"A user signed in.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.logout","description":"A user signed out.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.new_device_used","description":"A user signed in from a new device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.promote","description":"An ordinary user account was promoted to a site administrator.","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.recreate","description":"A user's account was restored.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.remove_email","description":"An email address was removed from a user account.","docs_reference_links":"N/A","fieldsIndex":365},{"action":"user.remove_integration_secret","description":"A user secret for Codespaces was deleted.","docs_reference_links":"N/A","fieldsIndex":372},{"action":"user.rename","description":"A username was changed.","docs_reference_links":"N/A","fieldsIndex":373},{"action":"user.reset_password","description":"A user reset their account password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_session.country_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.show_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now shown.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device","description":"A user signed in from an unrecognized device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device_and_location","description":"A user signed in from an unrecognized device and location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_status.destroy","description":"Triggered when you clear the status on your profile.","docs_reference_links":"N/A","fieldsIndex":374},{"action":"user_status.update","description":"Triggered when you set or change the status on your profile.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile#setting-a-status","docs_reference_titles":"Personalize your profile","fieldsIndex":375},{"action":"user.suspend","description":"A user account was suspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.toggle_warn_private_email","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.two_factor_challenge_failure","description":"A 2FA challenge issued for a user account failed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_challenge_success","description":"A 2FA challenge issued for a user account succeeded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recover","description":"A user used their 2FA recovery codes.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_downloaded","description":"A user downloaded 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_printed","description":"A user printed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_viewed","description":"A user viewed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_requested","description":"A user was prompted for a two-factor authentication code.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","fieldsIndex":15},{"action":"user.unblock_user","description":"A user was unblocked by another user.","docs_reference_links":"N/A","fieldsIndex":376},{"action":"user.unsuspend","description":"A user account was unsuspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.update_integration_secret","description":"A user secret for Codespaces was updated.","docs_reference_links":"N/A","fieldsIndex":368},{"action":"user.update_new_repository_default_branch_setting","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"api.request","description":"An API request was made to an endpoint for the enterprise, or an enterprise owned resource. This event is only included if API Request Events is enabled in the enterprise's audit log settings. This event is only available via audit log streaming.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise#enabling-audit-log-streaming-of-api-requests","docs_reference_titles":"Streaming the audit log for your enterprise","fieldsIndex":377},{"action":"audit_log_streaming.check","description":"A manual check of the endpoint configured for audit log streaming was performed.","docs_reference_links":"N/A","fieldsIndex":378},{"action":"audit_log_streaming.create","description":"An endpoint was added for audit log streaming.","docs_reference_links":"N/A","fieldsIndex":379},{"action":"audit_log_streaming.destroy","description":"An audit log streaming endpoint was deleted.","docs_reference_links":"N/A","fieldsIndex":380},{"action":"audit_log_streaming.update","description":"An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.","docs_reference_links":"N/A","fieldsIndex":381},{"action":"business.add_disallowed_two_factor_method","description":"An enterprise prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":382},{"action":"business.add_organization","description":"An organization was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":383},{"action":"business_advanced_security.disabled","description":"GitHub Advanced Security was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.disabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was disabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.enabled","description":"GitHub Advanced Security was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was enabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.advanced_security_metered_usage_lock","description":"Enablement for Advanced Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.advanced_security_metered_usage_unlock","description":"Enablement for Advanced Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.advanced_security_policy_update","description":"An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":384},{"action":"business.advanced_security_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business_advanced_security.user_namespace_repos_disabled","description":"GitHub Advanced Security was disabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.user_namespace_repos_enabled","description":"GitHub Advanced Security was enabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.audit_log_export","description":"An export of the enterprise audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":115},{"action":"business.audit_log_git_event_export","description":"An export of the enterprise's Git events was created.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":116},{"action":"business.cancel_admin_invitation","description":"An invitation for someone to be an owner of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.cancel_billing_manager_invitation","description":"An invitation for someone to be an billing manager of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":386},{"action":"business.cancel_trial","description":"The trial of GitHub Enterprise Cloud was canceled.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.change_seats_plan_type","description":"The seats plan type was changed for an enterprise.","docs_reference_links":"N/A","fieldsIndex":387},{"action":"business.clear_actions_settings","description":"An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":388},{"action":"business.clear_default_repository_permission","description":"An enterprise owner cleared the base repository permission policy setting for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":13},{"action":"business.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an enterprise.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.clear_members_can_create_repos","description":"An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":389},{"action":"business.code_quality_access_policy_update","description":"The policy for Code Quality access was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_quality_enablement_policy_update","description":"The policy for Code Quality enablement was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_scanning_ai_findings_policy_update","description":"The policy for Code scanning AI findings was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_scanning_autofix_policy_update","description":"The policy for Code scanning autofix was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_scanning_autofix_third_party_tools_policy_update","description":"The policy for Code scanning autofix third party tools was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":384},{"action":"business.code_security_enablement_policy_update","description":"The policy for Code Security enablement was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":384},{"action":"business.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.connect_usage_metrics_export","description":"Server statistics were exported for the enterprise.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":337},{"action":"business.convert_trial","description":"The enterprise account on a trial of GitHub Enterprise Cloud was upgraded to a paid enterprise account.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.create","description":"An enterprise was created.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.create_trial","description":"A trial of GitHub Enterprise Cloud began.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.delete","description":"The enterprise was deleted.","docs_reference_links":"/admin/overview/deleting-an-enterprise-account","docs_reference_titles":"Deleting an enterprise account","fieldsIndex":337},{"action":"business.delete_custom_image","description":"A custom image was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":13},{"action":"business.delete_custom_image_version","description":"A custom image version was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":13},{"action":"business_dependabot_alerts.disable","description":"Dependabot alerts were disabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts.enable","description":"Dependabot alerts were enabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business.dependabot_alerts_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.disable_oidc","description":"OIDC single sign-on was disabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.disable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was disabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.disable_saml","description":"SAML single sign-on was disabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was disabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.disable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.enable_oidc","description":"OIDC single sign-on was enabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.enable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enable_saml","description":"SAML single sign-on was enabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was enabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.enable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.enterprise_server_license_download","description":"A GitHub Enterprise Server license was downloaded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enterprise_teams_limit_reached","description":"An enterprise has reached its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.enterprise_teams_limit_warning","description":"An enterprise is approaching its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.expire_trial","description":"The trial of GitHub Enterprise Cloud expired.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.github_models_billing_disabled","description":"GitHub Models billing was disabled for the business.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.github_models_billing_enabled","description":"GitHub Models billing was enabled for the business.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.import_license_usage","description":"License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.","docs_reference_links":"/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage","docs_reference_titles":"Syncing license usage from GitHub Enterprise Server to Cloud","fieldsIndex":392},{"action":"business.invite_admin","description":"An invitation for someone to be an enterprise owner of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.invite_billing_manager","description":"An invitation for someone to be a billing manager of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.invite_unaffiliated_member","description":"An invitation for someone to join an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.members_can_update_protected_branches.clear","description":"An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.","docs_reference_links":"N/A","fieldsIndex":388},{"action":"business.members_limit_reached","description":"An enterprise has reached its members limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.organizations_limit_reached","description":"An enterprise has reached its organizations limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.organizations_limit_warning","description":"An enterprise is approaching its organizations limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.proxy_security_header_disabled","description":"The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_enabled","description":"The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_unsatisfied","description":"A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.recovery_code_failed","description":"An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":393},{"action":"business.recovery_code_used","description":"An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":337},{"action":"business.recovery_codes_downloaded","description":"An enterprise owner downloaded the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.recovery_codes_generated","description":"An enterprise owner generated the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.recovery_codes_printed","description":"An enterprise owner printed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.recovery_codes_viewed","description":"An enterprise owner viewed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an enterprise.","docs_reference_links":"N/A","fieldsIndex":394},{"action":"business.remove_organization","description":"An organization was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"business.rename_slug","description":"The slug for the enterprise URL was renamed.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.restore","description":"The deleted enterprise was restored.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.revoke_external_identity","description":"The external identity for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.revoke_sso_session","description":"The SAML single sign-on session for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.create","description":"An enterprise-level custom pattern was created for secret scanning.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":11},{"action":"business_secret_scanning_custom_pattern.delete","description":"An enterprise-level custom pattern was removed from secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern.publish","description":"An enterprise-level custom pattern was published for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.update","description":"Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning.disable","description":"Secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.disabled_for_new_repos","description":"Secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.enable","description":"Secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.enabled_for_new_repos","description":"Secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.disable","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.enable","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.update","description":"The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.disable","description":"Push protection for secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":0},{"action":"business_secret_scanning_push_protection.disabled_for_new_repos","description":"Push protection for secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.enable","description":"Push protection for secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.enabled_for_new_repos","description":"Push protection for secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":144},{"action":"business_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":145},{"action":"business.secret_scanning_repo_admin_settings_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.trial_email_verification_failed","description":"A trial email verification attempt failed for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.trial_email_verification_requested","description":"A trial email verification resend was requested for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.trial_email_verification_sent","description":"A trial email verification was sent for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.trial_email_verified","description":"The trial email was successfully verified for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.update_actions_settings","description":"An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":396},{"action":"business.update_default_repository_permission","description":"The base repository permission setting was updated for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":397},{"action":"business.update_emu_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":398},{"action":"business.update_member_repository_creation_permission","description":"The repository creation setting was updated for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":399},{"action":"business.update_member_repository_invitation_permission","description":"The policy setting for enterprise members inviting outside collaborators to repositories was updated.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-inviting-outside-collaborators-to-repositories","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":400},{"action":"business.update_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":401},{"action":"business.update_saml_provider_settings","description":"The SAML single sign-on provider settings for an enterprise were updated.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.update_unaffiliated_users_policy","description":"The policy for removing user accounts when removing the last organization membership was updated.","docs_reference_links":"/admin/enforcing-policies/enforcing-policies-for-your-enterprise/control-offboarding","docs_reference_titles":"Controlling user offboarding with the unaffiliated users policy","fieldsIndex":402},{"action":"business.upgrade_from_organization","description":"The organization was upgraded to an enterprise account.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/upgrading-your-accounts-plan#upgrading-your-organizations-plan","docs_reference_titles":"Upgrading your account's plan","fieldsIndex":337},{"action":"copilot.cfb_enterprise_org_enablement_changed","description":"The Copilot enablement policy changed at the enterprise level to either allow or disable access for all organizations, or to allow access for selected organizations.","docs_reference_links":"N/A","fieldsIndex":403},{"action":"copilot.cfb_enterprise_settings_changed","description":"Copilot feature settings were changed at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.clickwrap_save_event","description":"The GitHub Copilot Product Terms or Pre-Release Preview Terms were accepted.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.enterprise_enablement_changed","description":"Copilot access was enabled or disabled at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":403},{"action":"enterprise.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","fieldsIndex":11},{"action":"enterprise_domain.approve","description":"A domain was approved for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#approving-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":163},{"action":"enterprise_domain.create","description":"A domain was added to an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":163},{"action":"enterprise_domain.destroy","description":"A domain was removed from an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#removing-an-approved-or-verified-domain","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":404},{"action":"enterprise_domain.verify","description":"A domain was verified for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":163},{"action":"enterprise.register_self_hosted_runner","description":"A new GitHub Actions self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":15},{"action":"enterprise.remove_self_hosted_runner","description":"A GitHub Actions self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":11},{"action":"enterprise_role.assign","description":"An enterprise role was assigned to a user or enterprise team.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":405},{"action":"enterprise_role.create","description":"A custom enterprise role was created in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":406},{"action":"enterprise_role.destroy","description":"A custom enterprise role was deleted in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":406},{"action":"enterprise_role.revoke","description":"A user or enterprise team was unassigned an enterprise role.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":407},{"action":"enterprise_role.update","description":"A custom enterprise role was edited in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":408},{"action":"enterprise.runner_group_created","description":"A GitHub Actions self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":409},{"action":"enterprise.runner_group_removed","description":"A GitHub Actions self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":410},{"action":"enterprise.runner_group_renamed","description":"A GitHub Actions self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"enterprise.runner_group_runner_removed","description":"The REST API was used to remove a GitHub Actions self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":411},{"action":"enterprise.runner_group_runners_added","description":"A GitHub Actions self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":410},{"action":"enterprise.runner_group_runners_updated","description":"A GitHub Actions runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":410},{"action":"enterprise.runner_group_updated","description":"The configuration of a GitHub Actions self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":409},{"action":"enterprise.runner_group_visiblity_updated","description":"The visibility of a GitHub Actions self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":143},{"action":"enterprise.self_hosted_runner_offline","description":"The GitHub Actions runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"enterprise.self_hosted_runner_online","description":"The GitHub Actions runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"enterprise.self_hosted_runner_updated","description":"The GitHub Actions runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":149},{"action":"enterprise_team.add_member","description":"A new member was added to the enterprise team or an IdP group linked to an enterprise team, or an IdP group was linked to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":412},{"action":"enterprise_team.copilot_assignment","description":"A license for GitHub Copilot was assigned to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":413},{"action":"enterprise_team.copilot_unassignment","description":"A license for GitHub Copilot was unassigned from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":413},{"action":"enterprise_team.create","description":"A new enterprise team was created.","docs_reference_links":"N/A","fieldsIndex":412},{"action":"enterprise_team.destroy","description":"An enterprise team was deleted.","docs_reference_links":"N/A","fieldsIndex":413},{"action":"enterprise_team.remove_member","description":"A member was removed from the enterprise team or an IdP group linked to an enterprise team, or an IdP group was unlinked from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":412},{"action":"enterprise_team.rename","description":"The name of an enterprise team was changed.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"external_group.add_member","description":"A user was added to an external group.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"external_group.delete","description":"An external group was deleted.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.link","description":"An external group was linked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.provision","description":"An external group was created.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.remove_member","description":"A user was removed from an external group.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"external_group.scim_api_failure","description":"Failed external group SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":418},{"action":"external_group.scim_api_success","description":"Successful external group SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":419},{"action":"external_group.unlink","description":"An external group was unlinked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.update","description":"An external group was updated.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.update_display_name","description":"An external group's display name was updated.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_identity.deprovision","description":"An external identity was deprovisioned, suspending the linked GitHub user.","docs_reference_links":"N/A","fieldsIndex":420},{"action":"external_identity.provision","description":"An external identity was created and linked to a GitHub user.","docs_reference_links":"N/A","fieldsIndex":420},{"action":"external_identity.scim_api_failure","description":"Failed external identity SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":421},{"action":"external_identity.scim_api_success","description":"Successful external identity SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":422},{"action":"external_identity.update","description":"An external identity was updated.","docs_reference_links":"N/A","fieldsIndex":420},{"action":"ip_allow_list.disable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_user_level_enforcement","description":"IP allow list user level enforcement was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_user_level_enforcement","description":"IP allow list user level enforcement was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.update_ip_allowlist_configuration","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_custom_property_definition.create","description":"A new organization custom property definition was created.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":423},{"action":"organization_custom_property_definition.destroy","description":"An organization custom property definition was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":424},{"action":"organization_custom_property_definition.update","description":"An organization custom property definition was updated.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":425},{"action":"personal_access_token.access_restriction_reset","description":"The configured restriction for access to resources via personal access tokens was reset and delegated to organizations.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_reset","description":"Triggered when the enterprise delegates to the organizations when to require approval for fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.disable","description":"SSO lockdown for users was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.enable","description":"SSO lockdown for users was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.disable","description":"Automatic redirects for users to single sign-on (SSO) was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.enable","description":"Automatic redirects for users to single sign-on (SSO) was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.user_access_reinstated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":426},{"action":"copilot.user_access_revoked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":426},{"action":"discussion_post.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"discussion_post_reply.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":428},{"action":"discussion_post_reply.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":429},{"action":"discussion_post.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"oauth_application.suspend","description":"N/A","docs_reference_links":"N/A","fieldsIndex":108},{"action":"oauth_application.unsuspend","description":"An OAuth application was unsuspended for a user or organization account.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"org.async_delete","description":"A user initiated a background job to delete an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recreate","description":"An organization was restored.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.transform","description":"A user account was converted into an organization.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-personal-account/converting-a-user-into-an-organization","docs_reference_titles":"Converting a user into an organization","fieldsIndex":430},{"action":"repo.collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":431},{"action":"repo.disk_archive","description":"A repository was archived on disk.","docs_reference_links":"/repositories/archiving-a-github-repository/archiving-repositories","docs_reference_titles":"/repositories/archiving-a-github-repository/archiving-repositories","fieldsIndex":0},{"action":"repo.hide_from_discovery","description":"N/A","docs_reference_links":"N/A","fieldsIndex":432},{"action":"repo.noindex","description":"N/A","docs_reference_links":"N/A","fieldsIndex":432},{"action":"repo.override_unlock","description":"The repository was unlocked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.pages_build","description":"N/A","docs_reference_links":"N/A","fieldsIndex":433},{"action":"repo.require_login","description":"N/A","docs_reference_links":"N/A","fieldsIndex":434},{"action":"team_discussions.clear","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.correct_password_from_unrecognized_device","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_device_and_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.flag_as_large_scale_contributor","description":"A user account was flagged as a large scale contributor. Only contributions from public repositories the user owns will be shown in their contribution graph, in order to prevent timeouts.","docs_reference_links":"N/A","fieldsIndex":360},{"action":"user.minimize_comment","description":"A comment made by a user was minimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"user.partial_two_factor_email_followup","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.remove_large_scale_contributor_flag","description":"A user account was no longer flagged as a large scale contributor.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.report_abuse","description":"N/A","docs_reference_links":"N/A","fieldsIndex":234},{"action":"user.report_content","description":"Triggered when you report an issue or pull request, or a comment on an issue, pull request, or commit.","docs_reference_links":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","docs_reference_titles":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","fieldsIndex":0},{"action":"user.sign_in_from_unrecognized_location","description":"A user signed in from an unrecognized location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.unminimize_comment","description":"A comment made by a user was unminimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"copilot.knowledge_base_created","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_deleted","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_updated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"actions_policy.evaluate","description":"N/A","docs_reference_links":"N/A","fieldsIndex":245}]
\ No newline at end of file
+[{"action":"account.billing_date_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account.plan_change","description":"The account's plan changed.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/about-billing-for-plans","docs_reference_titles":"How GitHub billing works","fieldsIndex":1},{"action":"actions_cache.delete","description":"A GitHub Actions cache was deleted using the REST API.","docs_reference_links":"N/A","fieldsIndex":2},{"action":"advisory_credit.accept","description":"Credit was accepted for a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/editing-a-repository-security-advisory","docs_reference_titles":"Editing a repository security advisory","fieldsIndex":3},{"action":"advisory_credit.create","description":"Someone was added to the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":4},{"action":"advisory_credit.decline","description":"Credit was declined for a security advisory.","docs_reference_links":"N/A","fieldsIndex":5},{"action":"advisory_credit.destroy","description":"Someone was removed from the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":6},{"action":"artifact.destroy","description":"A workflow run artifact was manually deleted.","docs_reference_links":"N/A","fieldsIndex":7},{"action":"auto_approve_personal_access_token_requests.disable","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources. See also: personal_access_token.auto_approve_grant_requests_disabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"auto_approve_personal_access_token_requests.enable","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval. See also: personal_access_token.auto_approve_grant_requests_enabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"billing.budget_create","description":"A billing budget was created for a business or organization. Includes details about the budget limit, alerting preferences, and recipients.","docs_reference_links":"N/A","fieldsIndex":8},{"action":"billing.budget_delete","description":"A billing budget was deleted for a business or organization. Includes details about the removed budget and any alerting settings.","docs_reference_links":"N/A","fieldsIndex":9},{"action":"billing.budget_update","description":"A billing budget was updated for a business or organization. Includes details about the updated limit and alerting settings.","docs_reference_links":"N/A","fieldsIndex":10},{"action":"billing.change_billing_type","description":"The way the account pays for GitHub was changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/adding-or-editing-a-payment-method","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":11},{"action":"billing.change_email","description":"The billing email address changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/setting-your-billing-email","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":12},{"action":"billing.cost_center_create","description":"A cost center was created for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_delete","description":"A cost center was deleted from a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_resource_added","description":"A resource was added to a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_resource_removed","description":"A resource was removed from a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_update","description":"A cost center was updated for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing_customer.azure_subscription_linked","description":"Azure subscription has been linked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing_customer.azure_subscription_unlinked","description":"Azure subscription has been unlinked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing.lock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":1},{"action":"billing.overage_policy_updated","description":"The premium request paid usage policy for your GitHub account was changed.","docs_reference_links":"/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage","docs_reference_titles":"Optimizing your budget configuration","fieldsIndex":15},{"action":"billing.unlock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":16},{"action":"checks.auto_trigger_disabled","description":"Automatic creation of check suites was disabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.auto_trigger_enabled","description":"Automatic creation of check suites was enabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.delete_logs","description":"Logs in a check suite were deleted.","docs_reference_links":"N/A","fieldsIndex":18},{"action":"code_scanning.alert_appeared_in_branch","description":"Existing code scanning alerts appeared in a branch.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_fixed","description":"Code scanning alerts were fixed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_outdated","description":"Code scanning alerts were closed as outdated (all configurations they were detected in were deleted).","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":20},{"action":"code_scanning.alert_closed_by_user","description":"Code scanning alerts were manually dismissed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":21},{"action":"code_scanning.alert_closure_approved","description":"Dismissal of code scanning alerts was approved.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_denied","description":"Dismissal of code scanning alerts was denied.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_requested","description":"Dismissal of code scanning alerts was requested.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_created","description":"Code scanning alerts were seen for the first time.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reappeared","description":"Code scanning alerts that were previously fixed reappeared.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reopened_by_user","description":"Code scanning alerts that were previously dismissed were reopened.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":23},{"action":"codespaces.allow_permissions","description":"A codespace using custom permissions from its devcontainer.json file was launched.","docs_reference_links":"N/A","fieldsIndex":24},{"action":"codespaces.attempted_to_create_from_prebuild","description":"An attempt to create a codespace from a prebuild was made.","docs_reference_links":"N/A","fieldsIndex":25},{"action":"codespaces.business_enablement_updated","description":"Enterprise setting for Codespaces ownership was updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":26},{"action":"codespaces.connect","description":"Credentials for a codespace were refreshed.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.create","description":"A codespace was created","docs_reference_links":"/codespaces/developing-in-codespaces/creating-a-codespace-for-a-repository","docs_reference_titles":"Creating a codespace for a repository","fieldsIndex":27},{"action":"codespaces.destroy","description":"A user deleted a codespace.","docs_reference_links":"/codespaces/developing-in-codespaces/deleting-a-codespace","docs_reference_titles":"Deleting a codespace","fieldsIndex":28},{"action":"codespaces.export_environment","description":"A codespace was exported to a branch on GitHub.","docs_reference_links":"N/A","fieldsIndex":29},{"action":"codespaces.policy_group_created","description":"Policies were applied to codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_deleted","description":"Policies were removed from codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_updated","description":"Policies were updated for codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.restore","description":"A codespace was restored.","docs_reference_links":"N/A","fieldsIndex":30},{"action":"codespaces.start_environment","description":"A codespace was started.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.suspend_environment","description":"A codespace was stopped.","docs_reference_links":"N/A","fieldsIndex":31},{"action":"codespaces.trusted_repositories_access_update","description":"A personal account's access and security setting for Codespaces were updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":1},{"action":"commit_comment.destroy","description":"A commit comment was deleted.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"commit_comment.update","description":"A commit comment was updated.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"copilot.access_revoked","description":"Copilot access was revoked for the organization or enterprise due to its Copilot subscription ending, an issue with billing the entity, the entity being marked spammy, or the entity being suspended.","docs_reference_links":"N/A","fieldsIndex":33},{"action":"copilot.cfb_org_settings_changed","description":"Copilot feature settings were changed at the organization level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.cfb_seat_added","description":"A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_created","description":"A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.","docs_reference_links":"/copilot/overview-of-github-copilot/about-github-copilot-for-business","docs_reference_titles":"What is GitHub Copilot?","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_refreshed","description":"A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_reused","description":"A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":35},{"action":"copilot.cfb_seat_assignment_unassigned","description":"A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_cancelled","description":"A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":36},{"action":"copilot.cfb_seat_cancelled_by_staff","description":"A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":37},{"action":"copilot.cfb_seat_management_changed","description":"The seat management setting was changed at the organization level to either enable or disable Copilot access for all members of the organization, or to enable Copilot access for selected members or teams.","docs_reference_links":"N/A","fieldsIndex":38},{"action":"copilot.code_review_organization_settings_updated","description":"Copilot code review settings were updated for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.code_review_repository_settings_updated","description":"Copilot code review settings were updated for a repository.","docs_reference_links":"N/A","fieldsIndex":39},{"action":"copilot.content_exclusion_changed","description":"The excluded paths for GitHub Copilot were updated.","docs_reference_links":"N/A","fieldsIndex":40},{"action":"copilot.custom_instructions_created","description":"Copilot custom instructions were created for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.custom_instructions_updated","description":"Copilot custom instructions were updated for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.memory_user_opt_out","description":"A user opted out of Copilot Memory.","docs_reference_links":"N/A","fieldsIndex":42},{"action":"copilot.plan_changed","description":"The plan for GitHub Copilot was updated.","docs_reference_links":"/billing/managing-billing-for-github-copilot/about-billing-for-github-copilot","docs_reference_titles":"GitHub Copilot licenses","fieldsIndex":43},{"action":"copilot.plan_downgrade_scheduled","description":"The plan for GitHub Copilot was scheduled to be downgraded.","docs_reference_links":"N/A","fieldsIndex":44},{"action":"copilot.swe_agent_firewall_allowlist_updated","description":"Firewall allowlist for Copilot coding agent was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.swe_agent_mcp_config_updated","description":"MCP Configuration for Copilot coding agent was updated for a specific repository.","docs_reference_links":"N/A","fieldsIndex":45},{"action":"copilot.swe_agent_repo_disabled","description":"Specific repositories were disabled from using Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enabled","description":"Specific repositories were enabled to use Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enablement_updated","description":"Copilot coding agent access was updated for the organization's or user's repositories.","docs_reference_links":"N/A","fieldsIndex":47},{"action":"custom_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"custom_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_property_definition.create","description":"A new custom property definition was created.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.destroy","description":"A custom property definition was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.update","description":"A custom property definition was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":50},{"action":"custom_property_value.create","description":"A repository's custom property value was manually set for the first time.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.destroy","description":"A repository's custom property value was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.update","description":"A repository's custom property value was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":52},{"action":"dependabot_alerts.disable","description":"Dependabot alerts were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":11},{"action":"dependabot_alerts.enable","description":"Dependabot alerts were enabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_closure_request.approve","description":"Dismissal of Dependabot alerts was approved.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":54},{"action":"dependabot_closure_request.cancel","description":"Dismissal request for Dependabot alerts was canceled.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":54},{"action":"dependabot_closure_request.create","description":"Dismissal of Dependabot alerts was requested.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":55},{"action":"dependabot_closure_request.deny","description":"Dismissal of Dependabot alerts was denied.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":55},{"action":"dependabot_repository_access.default_access_level_updated","description":"The default repository access for Dependabot was updated.","docs_reference_links":"N/A","fieldsIndex":56},{"action":"dependabot_repository_access.repositories_updated","description":"The repositories that Dependabot can access were updated.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates.disable","description":"Dependabot security updates were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependabot_security_updates.enable","description":"Dependabot security updates were enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.disable","description":" Dependabot security updates were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.enable","description":"Dependabot security updates were enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph.disable","description":"The dependency graph was disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependency_graph.enable","description":"The dependency graph was enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph_new_repos.disable","description":"The dependency graph was disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependency_graph_new_repos.enable","description":"The dependency graph was enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"discussion_comment.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion_comment.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":57},{"action":"enterprise_announcement.create","description":"A global announcement banner was created for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise#creating-a-global-announcement-banner","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":58},{"action":"enterprise_announcement.destroy","description":"A global announcement banner was removed from the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":46},{"action":"enterprise_announcement.update","description":"A global announcement banner was updated for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":59},{"action":"enterprise_installation.create","description":"The GitHub App associated with a GitHub Connect connection was created.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":15},{"action":"enterprise_installation.destroy","description":"The GitHub App associated with a GitHub Connect connection was deleted.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":60},{"action":"environment.add_protection_rule","description":"A GitHub Actions deployment protection rule was created via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":61},{"action":"environment.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":62},{"action":"environment.create_actions_secret","description":"A secret was created for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":63},{"action":"environment.create_actions_variable","description":"A variable was created for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":63},{"action":"environment.delete","description":"An environment was deleted.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deleting-an-environment","docs_reference_titles":"Managing environments for deployment","fieldsIndex":64},{"action":"environment.remove_actions_secret","description":"A secret was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":65},{"action":"environment.remove_actions_variable","description":"A variable was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":65},{"action":"environment.remove_protection_rule","description":"A GitHub Actions deployment protection rule was deleted via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":66},{"action":"environment.update_actions_secret","description":"A secret was updated for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":63},{"action":"environment.update_actions_variable","description":"A variable was updated for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":63},{"action":"environment.update_protection_rule","description":"A GitHub Actions deployment protection rule was updated via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":67},{"action":"git.clone","description":"A repository was cloned. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":68},{"action":"git.fetch","description":"Changes were fetched from a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":68},{"action":"git.push","description":"Changes were pushed to a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":68},{"action":"github_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":69},{"action":"github_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":53},{"action":"github_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":69},{"action":"hook.active_changed","description":"A hook's active status was updated.","docs_reference_links":"N/A","fieldsIndex":70},{"action":"hook.config_changed","description":"A hook's configuration was changed.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"hook.create","description":"A new hook was added.","docs_reference_links":"/get-started/exploring-integrations/about-webhooks","docs_reference_titles":"About webhooks","fieldsIndex":72},{"action":"hook.destroy","description":"A hook was deleted.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"hook.events_changed","description":"A hook's configured events were changed.","docs_reference_links":"N/A","fieldsIndex":73},{"action":"integration.create","description":"A GitHub App was created.","docs_reference_links":"N/A","fieldsIndex":74},{"action":"integration.destroy","description":"A GitHub App was deleted.","docs_reference_links":"N/A","fieldsIndex":75},{"action":"integration.generate_client_secret","description":"N/A","docs_reference_links":"N/A","fieldsIndex":76},{"action":"integration_installation.create","description":"A GitHub App was installed.","docs_reference_links":"/apps/using-github-apps/authorizing-github-apps","docs_reference_titles":"/apps/using-github-apps/authorizing-github-apps","fieldsIndex":77},{"action":"integration_installation.destroy","description":"A GitHub App was uninstalled.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":78},{"action":"integration_installation.repositories_added","description":"Repositories were added to a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":79},{"action":"integration_installation.repositories_removed","description":"Repositories were removed from a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":80},{"action":"integration_installation_request.close","description":"A request to install a GitHub App was either approved or denied by an owner, or canceled by the member who opened the request.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":81},{"action":"integration_installation_request.create","description":"A member requested that an owner install a GitHub App.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":82},{"action":"integration_installation.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":83},{"action":"integration_installation.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":83},{"action":"integration_installation.version_updated","description":"Permissions for a GitHub App were updated.","docs_reference_links":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","docs_reference_titles":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","fieldsIndex":84},{"action":"integration.manager_added","description":"A member of an enterprise or organization was added as a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","fieldsIndex":85},{"action":"integration.manager_removed","description":"A member of an enterprise or organization was removed from being a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","fieldsIndex":85},{"action":"integration.remove_client_secret","description":"A client secret for a GitHub App was removed.","docs_reference_links":"N/A","fieldsIndex":75},{"action":"integration.revoke_all_tokens","description":"All user tokens for a GitHub App were requested to be revoked.","docs_reference_links":"N/A","fieldsIndex":86},{"action":"integration.revoke_tokens","description":"Token(s) for a GitHub App were revoked.","docs_reference_links":"N/A","fieldsIndex":86},{"action":"integration.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":87},{"action":"integration.transfer","description":"Ownership of a GitHub App was transferred to another user or organization.","docs_reference_links":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","docs_reference_titles":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","fieldsIndex":88},{"action":"integration.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":86},{"action":"integration.update","description":"A GitHub App was updated.","docs_reference_links":"N/A","fieldsIndex":76},{"action":"ip_allow_list.disable","description":"An IP allow list was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.disable_for_installed_apps","description":"An IP allow list was disabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable","description":"An IP allow list was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_for_installed_apps","description":"An IP allow list was enabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list_entry.create","description":"An IP address was added to an IP allow list.","docs_reference_links":"N/A","fieldsIndex":89},{"action":"ip_allow_list_entry.destroy","description":"An IP address was deleted from an IP allow list.","docs_reference_links":"N/A","fieldsIndex":89},{"action":"ip_allow_list_entry.update","description":"An IP address or its description was changed.","docs_reference_links":"N/A","fieldsIndex":89},{"action":"issue_comment.destroy","description":"A comment on an issue was deleted from the repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.pinned","description":"A comment on an issue was pinned to a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.unpinned","description":"A comment on an issue was unpinned from a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.update","description":"A comment on an issue (other than the initial one) changed.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_dependencies.blocked_by_add","description":"An issue was marked as blocked by another issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_dependencies.blocked_by_remove","description":"The blocked by relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_dependencies.blocking_add","description":"An issue was marked as blocking another issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_dependencies.blocking_remove","description":"The blocking relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue.destroy","description":"An issue was deleted from the repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/deleting-an-issue","docs_reference_titles":"Deleting an issue","fieldsIndex":91},{"action":"issue.pinned","description":"An issue was pinned to a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":92},{"action":"issue.transfer","description":"An issue was transferred to another repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/transferring-an-issue-to-another-repository","docs_reference_titles":"Transferring an issue to another repository","fieldsIndex":93},{"action":"issue_type.create","description":"An issue type was created.","docs_reference_links":"N/A","fieldsIndex":94},{"action":"issue_type.destroy","description":"An issue type was deleted.","docs_reference_links":"N/A","fieldsIndex":95},{"action":"issue_type.update","description":"An issue type was updated.","docs_reference_links":"N/A","fieldsIndex":96},{"action":"issue.unpinned","description":"An issue was unpinned from a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":92},{"action":"issues.deletes_disabled","description":"The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"issues.deletes_enabled","description":"The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"issues.deletes_policy_cleared","description":"An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"marketplace_agreement_signature.create","description":"The GitHub Marketplace Developer Agreement was signed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"marketplace_listing.approve","description":"A listing was approved for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"marketplace_listing.change_category","description":"A category for a listing for an app in GitHub Marketplace was changed.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.create","description":"A listing for an app in GitHub Marketplace was created.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"marketplace_listing.delist","description":"A listing was removed from GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":99},{"action":"marketplace_listing.redraft","description":"A listing was sent back to draft state.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"marketplace_listing.reject","description":"A listing was not accepted for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"mcp_registry.allowlist_assign","description":"An MCP registry allowlist was assigned to an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":100},{"action":"mcp_registry.allowlist_remove_assignment","description":"An MCP registry allowlist assignment was removed from an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":100},{"action":"members_can_create_pages.disable","description":"The ability for members to publish GitHub Pages sites was disabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_pages.enable","description":"The ability for members to publish GitHub Pages sites was enabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.disable","description":"The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.enable","description":"The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_public_pages.disable","description":"The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_public_pages.enable","description":"The ability for members to publish public GitHub Pages was enabled Members can publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_delete_repos.clear","description":"An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.disable","description":"The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.enable","description":"The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_view_dependency_insights.clear","description":"An enterprise owner cleared the policy setting for viewing dependency insights in any organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"members_can_view_dependency_insights.disable","description":"The ability for enterprise members to view dependency insights was disabled. Members cannot view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"members_can_view_dependency_insights.enable","description":"The ability for enterprise members to view dependency insights was enabled. Members can view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":11},{"action":"merge_queue.pull_request_dequeued","description":"A pull request was removed from a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.pull_request_queue_jump","description":"A pull request was moved ahead in a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.queue_cleared","description":"A merge queue was cleared.","docs_reference_links":"N/A","fieldsIndex":101},{"action":"merge_queue.update_settings","description":"The settings for a merge queue were updated.","docs_reference_links":"N/A","fieldsIndex":102},{"action":"metered_billing_configuration.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"migration.create","description":"A migration file was created for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"migration.destroy_file","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was deleted.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"migration.download","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was downloaded.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"network_configuration.create","description":"A network configuration for a hosted compute service was created.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":104},{"action":"network_configuration.delete","description":"A network configuration for a hosted compute service was deleted.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":105},{"action":"network_configuration.update","description":"A network configuration for a hosted compute service was updated.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":106},{"action":"oauth_application.create","description":"An OAuth application was created.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.destroy","description":"An OAuth application was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.generate_client_secret","description":"An OAuth application's secret key was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.remove_client_secret","description":"An OAuth application's secret key was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.reset_secret","description":"The secret key for an OAuth application was reset.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.revoke_all_tokens","description":"All user tokens for an OAuth application were requested to be revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.revoke_tokens","description":"Token(s) for an OAuth application were revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.transfer","description":"An OAuth application was transferred from one account to another.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.update_token_expiration","description":"The token expiration setting for an OAuth application was updated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"org.accept_business_invitation","description":"An invitation sent to an organization to join an enterprise was accepted.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":15},{"action":"org.add_billing_manager","description":"A billing manager was added to an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","fieldsIndex":11},{"action":"org.add_disallowed_two_factor_method","description":"An organization prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":109},{"action":"org.add_member","description":"A user joined an organization.","docs_reference_links":"N/A","fieldsIndex":110},{"action":"org.add_outside_collaborator","description":"An outside collaborator was added to a repository.","docs_reference_links":"N/A","fieldsIndex":111},{"action":"org.add_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"org.advanced_security_disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_disabled_on_all_repos","description":"GitHub Advanced Security was disabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.advanced_security_enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_enabled_on_all_repos","description":"GitHub Advanced Security was enabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.advanced_security_entity_policy_update","description":"An enterprise owner updated the GitHub Advanced Security access policy for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":113},{"action":"org.advanced_security_policy_selected_member_disabled","description":"An enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.advanced_security_policy_selected_member_enabled","description":"An enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_disabled","description":"Third-party application access for outside collaborators was disabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests#enabling-or-disabling-integration-access-requests","docs_reference_titles":"Limiting OAuth app and GitHub App access requests and installations","fieldsIndex":0},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_enabled","description":"Third-party application access for outside collaborators was enabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","fieldsIndex":0},{"action":"org.archive","description":"The organization was archived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.audit_log_export","description":"An export of the organization audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","fieldsIndex":114},{"action":"org.audit_log_git_event_export","description":"An export of the organization's Git events was created.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","fieldsIndex":115},{"action":"org.billing_signup_error","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.block_user","description":"An organization owner blocked a user from accessing the organization's repositories.","docs_reference_links":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","fieldsIndex":116},{"action":"org.cancel_business_invitation","description":"An invitation for an organization to join an enterprise was revoked","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":117},{"action":"org.cancel_invitation","description":"An invitation sent to a user to join an organization was revoked.","docs_reference_links":"N/A","fieldsIndex":118},{"action":"org.clear_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_quality_entity_policy_update","description":"An organization owner updated the Code Quality entity policy for repositories owned by the organization.","docs_reference_links":"N/A","fieldsIndex":113},{"action":"org.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_disabled","description":"Scanning inactive repositories was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_enabled","description":"Scanning inactive repositories was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":119},{"action":"org.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org.codeql_disabled","description":"Code scanning using the default setup was disabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":11},{"action":"org.codeql_enabled","description":"Code scanning using the default setup was enabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":1},{"action":"org.codespaces_access_updated","description":"Access to use Codespaces on internal and private repositories was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","fieldsIndex":121},{"action":"org.codespaces_ownership_updated","description":"Ownership and payment for codespaces was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":122},{"action":"org.codespaces_team_access_allowed","description":"A team has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"org.codespaces_team_access_revoked","description":"A team has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"org.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to all other repositories in an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":32},{"action":"org.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to all other repositories in an organization was revoked.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":120},{"action":"org.codespaces_user_access_allowed","description":"A user has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.codespaces_user_access_revoked","description":"A user has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.config.disable_collaborators_only","description":"The interaction limit for collaborators only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":1},{"action":"org.config.disable_contributors_only","description":"The interaction limit for prior contributors only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":124},{"action":"org.config.enable_collaborators_only","description":"The interaction limit for collaborators only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":53},{"action":"org.config.enable_contributors_only","description":"The interaction limit for prior contributors only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":53},{"action":"org.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","fieldsIndex":53},{"action":"org.confirm_business_invitation","description":"An invitation for an organization to join an enterprise was confirmed.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":125},{"action":"org.connect_usage_metrics_export","description":"Server statistics were exported for the organization.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":0},{"action":"org.create","description":"An organization was created.","docs_reference_links":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","docs_reference_titles":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","fieldsIndex":1},{"action":"org.create_actions_secret","description":"A GitHub Actions secret was created for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.create_actions_variable","description":"A GitHub Actions variable was created for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.create_integration_secret","description":"A Codespaces or Dependabot secret was created for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org_credential_authorization.deauthorize","description":"A member removed the SSO (SAML or OIDC) authorization from a credential that had access to your organization.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on","docs_reference_titles":"Authorizing a personal access token for use with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.grant","description":"A member authorized credentials for use with SAML or OIDC single sign-on.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on","docs_reference_titles":"Authenticating with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.revoke","description":"An owner revoked authorized credentials.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":129},{"action":"org.delete","description":"An organization was deleted by a user or staff.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.delete_custom_image","description":"A custom image was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":53},{"action":"org.delete_custom_image_version","description":"A custom image version was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":53},{"action":"org.disable_member_team_creation_permission","description":"Team creation was limited to owners.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":53},{"action":"org.disable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were disabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.disable_reader_discussion_creation_permission","description":"An organization owner limited discussion creation to users with at least triage permission in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.disable_saml","description":"SAML single sign-on was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":130},{"action":"org.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":11},{"action":"org.disable_two_factor_requirement","description":"A two-factor authentication requirement was disabled for the organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_disabled","description":"An organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_enabled","description":"An organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.enable_member_team_creation_permission","description":"Team creation by members was allowed.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":53},{"action":"org.enable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were enabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.enable_reader_discussion_creation_permission","description":"An organization owner allowed users with read access to create discussions in an organization","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.enable_saml","description":"SAML single sign-on was enabled for the organization.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/enabling-and-testing-saml-single-sign-on-for-your-organization","docs_reference_titles":"Enabling and testing SAML single sign-on for your organization","fieldsIndex":131},{"action":"org.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":15},{"action":"org.enable_two_factor_requirement","description":"Two-factor authentication is now required for the organization.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":11},{"action":"org.integration_manager_added","description":"An organization owner granted a member access to manage all GitHub Apps owned by an organization.","docs_reference_links":"N/A","fieldsIndex":132},{"action":"org.integration_manager_removed","description":"An organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.","docs_reference_links":"N/A","fieldsIndex":132},{"action":"org.invite_member","description":"A new user was invited to join an organization.","docs_reference_links":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","fieldsIndex":118},{"action":"org.invite_to_business","description":"An organization was invited to join an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_limit_warning","description":"An organization is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.oauth_app_access_approved","description":"Access to an organization was granted for an OAuth App.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","fieldsIndex":134},{"action":"org.oauth_app_access_blocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":134},{"action":"org.oauth_app_access_denied","description":"Access was disabled for an OAuth App that was previously approved.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","fieldsIndex":134},{"action":"org.oauth_app_access_requested","description":"An organization member requested that an owner grant an OAuth App access to an organization.","docs_reference_links":"N/A","fieldsIndex":134},{"action":"org.oauth_app_access_unblocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":134},{"action":"org.rate_limited_invites","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recovery_code_failed","description":"An organization owner failed to sign into a organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":135},{"action":"org.recovery_code_used","description":"An organization owner successfully signed into an organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":15},{"action":"org.recovery_codes_downloaded","description":"An organization owner downloaded the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_generated","description":"An organization owner generated the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_printed","description":"An organization owner printed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_viewed","description":"An organization owner viewed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-an-organization","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":60},{"action":"org.remove_actions_secret","description":"A GitHub Actions secret was removed from an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":136},{"action":"org.remove_actions_variable","description":"A GitHub Actions variable was removed from an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":136},{"action":"org.remove_billing_manager","description":"A billing manager was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":53},{"action":"org.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an organization.","docs_reference_links":"N/A","fieldsIndex":109},{"action":"org.remove_integration_secret","description":"A Codespaces or Dependabot secret was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":137},{"action":"org.remove_member","description":"A member was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_outside_collaborator","description":"An outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":138},{"action":"org.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-an-organization","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":53},{"action":"org.rename","description":"An organization was renamed.","docs_reference_links":"N/A","fieldsIndex":139},{"action":"org.required_workflow_create","description":"Triggered when a required workflow is created.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_delete","description":"Triggered when a required workflow is deleted.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_update","description":"Triggered when a required workflow is updated.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.restore_member","description":"An organization member was restored.","docs_reference_links":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","fieldsIndex":1},{"action":"org.revoke_external_identity","description":"A member's linked identity was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.revoke_sso_session","description":"A member's SAML session was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.runner_group_created","description":"A self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#creating-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_removed","description":"A self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"org.runner_group_renamed","description":"A self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":142},{"action":"org.runner_group_runner_removed","description":"The REST API was used to remove a self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":143},{"action":"org.runner_group_runners_added","description":"A self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"org.runner_group_runners_updated","description":"A runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":141},{"action":"org.runner_group_updated","description":"The configuration of a self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_visiblity_updated","description":"The visibility of a self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":144},{"action":"org.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":119},{"action":"org.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":11},{"action":"org_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":53},{"action":"org_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":53},{"action":"org_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":1},{"action":"org_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org.secret_scanning_custom_pattern_push_protection_disabled","description":"Push protection for a custom pattern for secret scanning was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org.secret_scanning_custom_pattern_push_protection_enabled","description":"Push protection for a custom pattern for secret scanning was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":1},{"action":"org_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_custom_message_disabled","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_custom_message_enabled","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_custom_message_updated","description":"The custom message triggered by an attempted push to a push-protected repository was updated for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_disable","description":"Push protection for secret scanning was disabled.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":11},{"action":"org.secret_scanning_push_protection_enable","description":"Push protection for secret scanning was enabled.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_disable","description":"Push protection for secret scanning was disabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_enable","description":"Push protection for secret scanning was enabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":145},{"action":"org_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":146},{"action":"org.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the CodeQL pull request alerts page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.security_center_export_coverage","description":"A CSV export was requested on the Coverage page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"org.security_center_export_overview_dashboard","description":"A CSV export was requested on the Overview Dashboard page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.security_center_export_risk","description":"A CSV export was requested on the Risk page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"org.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"org.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"org.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":150},{"action":"org.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":53},{"action":"org.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":53},{"action":"org.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","fieldsIndex":151},{"action":"org.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":151},{"action":"org.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in an organization was changed.","docs_reference_links":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","fieldsIndex":152},{"action":"org.set_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","fieldsIndex":153},{"action":"org.set_fork_pr_workflows_policy","description":"The policy for workflows on private repository forks was changed.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":151},{"action":"org.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":154},{"action":"org.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":155},{"action":"org.transfer","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":156},{"action":"org.transfer_outgoing","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":156},{"action":"org.unarchive","description":"The organization was unarchived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.unblock_user","description":"A user was unblocked from an organization.","docs_reference_links":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","fieldsIndex":116},{"action":"org.update_actions_secret","description":"A GitHub Actions secret was updated for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.update_actions_settings","description":"An organization owner or site administrator updated GitHub Actions policy settings for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","fieldsIndex":157},{"action":"org.update_actions_variable","description":"A GitHub Actions variable was updated for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.update_custom_images_policy","description":"The enterprise updated GitHub Actions custom image policy settings for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":158},{"action":"org.update_default_repository_permission","description":"The default repository permission level for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":159},{"action":"org.update_immutable_releases_settings_policy","description":"The settings policy for immutable releases was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":160},{"action":"org.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org.update_member","description":"A person's role was changed from owner to member or member to owner.","docs_reference_links":"N/A","fieldsIndex":159},{"action":"org.update_member_repository_creation_permission","description":"The create repository permission for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":161},{"action":"org.update_member_repository_invitation_permission","description":"An organization owner changed the policy setting for organization members inviting outside collaborators to repositories.","docs_reference_links":"/organizations/managing-organization-settings/setting-permissions-for-adding-outside-collaborators","docs_reference_titles":"Setting permissions for adding outside collaborators","fieldsIndex":162},{"action":"org.update_new_repository_default_branch_setting","description":"The name of the default branch was changed for new repositories in the organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.update_repo_self_hosted_runners_policy","description":"The repository self-hosted runners policy was updated","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","fieldsIndex":163},{"action":"org.update_saml_provider_settings","description":"An organization's SAML provider settings were updated.","docs_reference_links":"N/A","fieldsIndex":131},{"action":"org.update_terms_of_service","description":"An organization changed between the Standard Terms of Service and the GitHub Customer Agreement.","docs_reference_links":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","docs_reference_titles":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","fieldsIndex":11},{"action":"organization_custom_property_value.create","description":"An organization's custom property value was manually set for the first time.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":164},{"action":"organization_custom_property_value.destroy","description":"An organization's custom property value was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":164},{"action":"organization_default_label.create","description":"A default label was created for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","fieldsIndex":1},{"action":"organization_default_label.destroy","description":"A default label was deleted for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","fieldsIndex":15},{"action":"organization_default_label.update","description":"A default label was edited for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","fieldsIndex":15},{"action":"organization_domain.approve","description":"A domain was approved for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","fieldsIndex":165},{"action":"organization_domain.create","description":"A domain was added to an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":165},{"action":"organization_domain.destroy","description":"A domain was removed from an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","fieldsIndex":165},{"action":"organization_domain.verify","description":"A domain was verified for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":165},{"action":"organization_moderators.add_team","description":"A team was added as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"organization_moderators.add_user","description":"A user was added as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_moderators.remove_team","description":"A team was removed as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"organization_moderators.remove_user","description":"A user was removed as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"organization_projects_change.clear","description":"An enterprise owner cleared the policy setting for organization-wide project boards in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":11},{"action":"organization_projects_change.disable","description":"Organization projects were disabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_projects_change.enable","description":"Organization projects were enabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_role.assign","description":"An organization role was assigned to a user or team.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":166},{"action":"organization_role.create","description":"A custom organization role was created in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":167},{"action":"organization_role.destroy","description":"A custom organization role was deleted in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":167},{"action":"organization_role.revoke","description":"A user or team was unassigned an organization role.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":166},{"action":"organization_role.update","description":"A custom organization role was edited in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":168},{"action":"organization_wide_project_base_role.update","description":"An organization's default project base role was updated.","docs_reference_links":"N/A","fieldsIndex":169},{"action":"packages.package_deleted","description":"An entire package was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":170},{"action":"packages.package_published","description":"A package was published or republished to an organization.","docs_reference_links":"N/A","fieldsIndex":171},{"action":"packages.package_version_deleted","description":"A specific package version was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":172},{"action":"packages.package_version_published","description":"A specific package version was published or republished to a package.","docs_reference_links":"N/A","fieldsIndex":173},{"action":"pages_protected_domain.create","description":"A GitHub Pages verified domain was created for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":174},{"action":"pages_protected_domain.delete","description":"A GitHub Pages verified domain was deleted from an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":174},{"action":"pages_protected_domain.verify","description":"A GitHub Pages domain was verified for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":174},{"action":"payment_method.create","description":"A new payment method was added, such as a new credit card or PayPal account.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.remove","description":"A payment method was removed.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.update","description":"An existing payment method was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_granted","description":"A fine-grained personal access token was granted access to resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":175},{"action":"personal_access_token.access_restriction_disabled","description":"The configured restriction for access to resources via personal access tokens was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_restriction_enabled","description":"The configured restriction for access to resources via personal access tokens was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_revoked","description":"A fine-grained personal access token was revoked. The token can still read public organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","fieldsIndex":176},{"action":"personal_access_token.auto_approve_grant_requests_disabled","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_enabled","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.expiration_limit_set","description":"A personal access token expiration limit was set.","docs_reference_links":"N/A","fieldsIndex":177},{"action":"personal_access_token.expiration_limit_unset","description":"A personal access token expiration limit was unset.","docs_reference_links":"N/A","fieldsIndex":178},{"action":"personal_access_token.request_cancelled","description":"A pending request for a fine-grained personal access token to access organization resources was canceled.","docs_reference_links":"N/A","fieldsIndex":179},{"action":"personal_access_token.request_created","description":"Triggered when a fine-grained personal access token was created to access organization resources and the organization requires approval before the token can access organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":180},{"action":"personal_access_token.request_denied","description":"A request for a fine-grained personal access token to access organization resources was denied.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":181},{"action":"prebuild_configuration.create","description":"A GitHub Codespaces prebuild configuration for a repository was created.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"prebuild_configuration.destroy","description":"A GitHub Codespaces prebuild configuration for a repository was deleted.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"prebuild_configuration.run_triggered","description":"A user initiated a run of a GitHub Codespaces prebuild configuration for a repository branch.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"prebuild_configuration.update","description":"A GitHub Codespaces prebuild configuration for a repository was edited.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"premium_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"premium_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"premium_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"private_repository_forking.clear","description":"An enterprise owner cleared the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"private_repository_forking.disable","description":"An enterprise owner disabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are never allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"private_repository_forking.enable","description":"An enterprise owner enabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are always allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":183},{"action":"private_vulnerability_reporting.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"profile_picture.update","description":"A profile picture was updated.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile","docs_reference_titles":"Personalize your profile","fieldsIndex":184},{"action":"project.access","description":"A project board visibility was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project_base_role.update","description":"A project's base role was updated.","docs_reference_links":"N/A","fieldsIndex":185},{"action":"project.close","description":"A project board was closed.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/closing-a-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":186},{"action":"project_collaborator.add","description":"A collaborator was added to a project.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project_collaborator.remove","description":"A collaborator was removed from a project.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project_collaborator.update","description":"A project collaborator's permission level was changed.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project.create","description":"A project board was created.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project.delete","description":"A project board was deleted.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"project_field.create","description":"A field was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields","fieldsIndex":53},{"action":"project_field.delete","description":"A field was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","fieldsIndex":189},{"action":"project.link","description":"A repository was linked to a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.open","description":"A project board was reopened.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/reopening-a-closed-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":186},{"action":"project.rename","description":"A project board was renamed.","docs_reference_links":"N/A","fieldsIndex":190},{"action":"project.unlink","description":"A repository was unlinked from a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.update_org_permission","description":"The project's base-level permission for all organization members was changed or removed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"project.update_team_permission","description":"A team's project board permission level was changed or when a team was added or removed from a project board.","docs_reference_links":"N/A","fieldsIndex":191},{"action":"project.update_user_permission","description":"A user was added to or removed from a project board or had their permission level changed.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project_view.create","description":"A view was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":53},{"action":"project_view.delete","description":"A view was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":53},{"action":"project.visibility_private","description":"A project's visibility was changed from public to private.","docs_reference_links":"N/A","fieldsIndex":192},{"action":"project.visibility_public","description":"A project's visibility was changed from private to public.","docs_reference_links":"N/A","fieldsIndex":192},{"action":"protected_branch.authorized_users_teams","description":"The users, teams, or integrations allowed to bypass a branch protection were changed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","fieldsIndex":193},{"action":"protected_branch.branch_allowances","description":"A protected branch allowance was given to a specific user, team or integration.","docs_reference_links":"N/A","fieldsIndex":194},{"action":"protected_branch.create","description":"Branch protection was enabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.destroy","description":"Branch protection was disabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.dismiss_stale_reviews","description":"Enforcement of dismissing stale pull requests was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":196},{"action":"protected_branch.dismissal_restricted_users_teams","description":"Enforcement of restricting users and/or teams who can dismiss reviews was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":197},{"action":"protected_branch.policy_override","description":"A branch protection requirement was overridden by a repository administrator.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.rejected_ref_update","description":"A branch update attempt was rejected.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.update_admin_enforced","description":"Branch protection was enforced for repository administrators.","docs_reference_links":"N/A","fieldsIndex":199},{"action":"protected_branch.update_allow_deletions_enforcement_level","description":"Branch deletion was enabled or disabled for a protected branch.","docs_reference_links":"N/A","fieldsIndex":200},{"action":"protected_branch.update_allow_force_pushes_enforcement_level","description":"Force pushes were enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":201},{"action":"protected_branch.update_ignore_approvals_from_contributors","description":"Ignoring of approvals from contributors to a pull request was enabled or disabled for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":202},{"action":"protected_branch.update_linear_history_requirement_enforcement_level","description":"Required linear commit history was enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":203},{"action":"protected_branch.update_lock_allows_fetch_and_merge","description":"Fork syncing was enabled or disabled for a read-only branch","docs_reference_links":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":204},{"action":"protected_branch.update_lock_branch_enforcement_level","description":"The enforcement of a branch lock was updated.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":205},{"action":"protected_branch.update_merge_queue_enforcement_level","description":"Enforcement of the merge queue was modified for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","fieldsIndex":206},{"action":"protected_branch.update_name","description":"A branch name pattern was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":207},{"action":"protected_branch.update_pull_request_reviews_enforcement_level","description":"Enforcement of required pull request reviews was updated for a branch. Can be 0 (deactivated), 1 (non-admins), or 2 (everyone).","docs_reference_links":"N/A","fieldsIndex":208},{"action":"protected_branch.update_require_code_owner_review","description":"Enforcement of required code owner review was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":209},{"action":"protected_branch.update_require_last_push_approval","description":"Someone other than the person who pushed the last code-modifying commit to the branch must approve pull requests for the branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","fieldsIndex":210},{"action":"protected_branch.update_required_approving_review_count","description":"Enforcement of the required number of approvals before merging was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":211},{"action":"protected_branch.update_required_status_checks_enforcement_level","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":212},{"action":"protected_branch.update_signature_requirement_enforcement_level","description":"Enforcement of required commit signing was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":213},{"action":"protected_branch.update_strict_required_status_checks_policy","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":214},{"action":"public_key.create","description":"An SSH key was added to a user account or a deploy key was added to a repository.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","fieldsIndex":215},{"action":"public_key.delete","description":"An SSH key was removed from a user account or a deploy key was removed from a repository.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","fieldsIndex":216},{"action":"public_key.unverification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":217},{"action":"public_key.unverify","description":"A user account's SSH key or a repository's deploy key was unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":218},{"action":"public_key.update","description":"A user account's SSH key or a repository's deploy key was updated.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verify","description":"A user account's SSH key or a repository's deploy key was verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"pull_request.close","description":"A pull request was closed without being merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/closing-a-pull-request","docs_reference_titles":"Closing a pull request","fieldsIndex":219},{"action":"pull_request.converted_to_draft","description":"A pull request was converted to a draft.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#converting-a-pull-request-to-a-draft","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.create","description":"A pull request was created.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request","docs_reference_titles":"Creating a pull request","fieldsIndex":221},{"action":"pull_request.create_review_request","description":"A review was requested on a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.in_progress","description":"A pull request was marked as in progress.","docs_reference_links":"N/A","fieldsIndex":223},{"action":"pull_request.indirect_merge","description":"A pull request was considered merged because the pull request's commits were merged into the target branch.","docs_reference_links":"N/A","fieldsIndex":219},{"action":"pull_request.merge","description":"A pull request was merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/merging-a-pull-request","docs_reference_titles":"Merging a pull request","fieldsIndex":219},{"action":"pull_request.ready_for_review","description":"A pull request was marked as ready for review.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#marking-a-pull-request-as-ready-for-review","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.rebase","description":"A pull request was rebased.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request.remove_review_request","description":"A review request was removed from a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.reopen","description":"A pull request was reopened after previously being closed.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request_review_comment.create","description":"A review comment was added to a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":224},{"action":"pull_request_review_comment.delete","description":"A review comment on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":225},{"action":"pull_request_review_comment.update","description":"A review comment on a pull request was changed.","docs_reference_links":"N/A","fieldsIndex":226},{"action":"pull_request_review.delete","description":"A review on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":227},{"action":"pull_request_review.dismiss","description":"A review on a pull request was dismissed.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/dismissing-a-pull-request-review","docs_reference_titles":"Dismissing a pull request review","fieldsIndex":227},{"action":"pull_request_review.submit","description":"A review on a pull request was submitted.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-proposed-changes-in-a-pull-request#submitting-your-review","docs_reference_titles":"Reviewing proposed changes in a pull request","fieldsIndex":227},{"action":"repo.access","description":"The visibility of a repository changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","fieldsIndex":228},{"action":"repo.actions_enabled","description":"GitHub Actions was enabled for a repository.","docs_reference_links":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","docs_reference_titles":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","fieldsIndex":229},{"action":"repo.add_member","description":"A collaborator was added to a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/inviting-collaborators-to-a-personal-repository","docs_reference_titles":"Inviting collaborators to a personal repository","fieldsIndex":230},{"action":"repo.add_topic","description":"A topic was added to a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","fieldsIndex":231},{"action":"repo.advanced_security_disabled","description":"GitHub Advanced Security was disabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.advanced_security_enabled","description":"GitHub Advanced Security was enabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.archived","description":"A repository was archived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.change_merge_setting","description":"Pull request merge options were changed for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.code_quality_disabled","description":"Code Quality was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_quality_enabled","description":"Code Quality was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repo.code_quality_updated","description":"Code Quality was updated for a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repo.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"repo.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"repo.code_scanning_analysis_deleted","description":"Code scanning analysis for a repository was deleted.","docs_reference_links":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","docs_reference_titles":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","fieldsIndex":235},{"action":"repo.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_configuration_for_branch_deleted","description":"A code scanning configuration for a branch of a repository was deleted.","docs_reference_links":"/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch","docs_reference_titles":"Resolving code scanning alerts","fieldsIndex":237},{"action":"repo.code_scanning_delegated_alert_dismissal_disabled","description":"Prevention of direct alert dismissal for code scanning was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_delegated_alert_dismissal_enabled","description":"Prevention of direct alert dismissal for code scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.codeql_disabled","description":"Code scanning using the default setup was disabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":231},{"action":"repo.codeql_enabled","description":"Code scanning using the default setup was enabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":238},{"action":"repo.codeql_updated","description":"Code scanning using the default setup was updated for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":238},{"action":"repo.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to this repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to this repository was revoked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.config.disable_collaborators_only","description":"The interaction limit for collaborators only was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":234},{"action":"repo.config.disable_contributors_only","description":"The interaction limit for prior contributors only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":239},{"action":"repo.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":234},{"action":"repo.config.enable_collaborators_only","description":"The interaction limit for collaborators only was enabled in a repository Users that are not collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":32},{"action":"repo.config.enable_contributors_only","description":"The interaction limit for prior contributors only was enabled in a repository Users that are not prior contributors, collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":103},{"action":"repo.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users was enabled in a repository New users aren't able to interact with a repository for a set duration Existing users of the repository, contributors, collaborators or organization members are able to interact with a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":18},{"action":"repo.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","fieldsIndex":32},{"action":"repo.create","description":"A repository was created.","docs_reference_links":"/repositories/creating-and-managing-repositories/creating-a-new-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/creating-a-new-repository","fieldsIndex":240},{"action":"repo.create_actions_secret","description":"A GitHub Actions secret was created for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.create_actions_variable","description":"A GitHub Actions variable was created for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.create_integration_secret","description":"A Codespaces or Dependabot secret was created for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.destroy","description":"A repository was deleted.","docs_reference_links":"/repositories/creating-and-managing-repositories/deleting-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/deleting-a-repository","fieldsIndex":240},{"action":"repo.download_zip","description":"A source code archive of a repository was downloaded as a ZIP file.","docs_reference_links":"/repositories/working-with-files/using-files/downloading-source-code-archives","docs_reference_titles":"/repositories/working-with-files/using-files/downloading-source-code-archives","fieldsIndex":233},{"action":"repo.immutable_releases_settings_disabled","description":"The setting for immutable releases was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.immutable_releases_settings_enabled","description":"The setting for immutable releases was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_cname","description":"A GitHub Pages custom domain was modified in a repository.","docs_reference_links":"N/A","fieldsIndex":243},{"action":"repo.pages_create","description":"A GitHub Pages site was created.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_destroy","description":"A GitHub Pages site was deleted.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_disabled","description":"HTTPS redirects were disabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_enabled","description":"HTTPS redirects were enabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_private","description":"A GitHub Pages site visibility was changed to private.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_public","description":"A GitHub Pages site visibility was changed to public.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_soft_delete","description":"A GitHub Pages site was soft-deleted because its owner's plan changed.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.pages_soft_delete_restore","description":"A GitHub Pages site that was previously soft-deleted was restored.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_source","description":"A GitHub Pages source was modified.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":245},{"action":"repo.remove_actions_secret","description":"A GitHub Actions secret was deleted for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":246},{"action":"repo.remove_actions_variable","description":"A GitHub Actions variable was deleted for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":246},{"action":"repo.remove_integration_secret","description":"A Codespaces or Dependabot secret was deleted for a repository.","docs_reference_links":"N/A","fieldsIndex":247},{"action":"repo.remove_member","description":"A collaborator was removed from a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/removing-a-collaborator-from-a-personal-repository","docs_reference_titles":"Removing a collaborator from a personal repository","fieldsIndex":233},{"action":"repo.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":32},{"action":"repo.remove_topic","description":"A topic was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repo.rename","description":"A repository was renamed.","docs_reference_links":"/repositories/creating-and-managing-repositories/renaming-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/renaming-a-repository","fieldsIndex":248},{"action":"repo.rename_branch","description":"A branch was renamed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","fieldsIndex":249},{"action":"repo.restore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"repo.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"repo.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":150},{"action":"repo.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":233},{"action":"repo.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":233},{"action":"repo.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","fieldsIndex":250},{"action":"repo.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","fieldsIndex":250},{"action":"repo.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","fieldsIndex":251},{"action":"repo.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","fieldsIndex":252},{"action":"repo.set_fork_pr_workflows_policy","description":"Triggered when the policy for workflows on private repository forks is changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","fieldsIndex":250},{"action":"repo.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":253},{"action":"repo.staff_unlock","description":"An enterprise owner or GitHub staff (with permission from a repository administrator) temporarily unlocked the repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.transfer","description":"A user accepted a request to receive a transferred repository.","docs_reference_links":"/repositories/creating-and-managing-repositories/transferring-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/transferring-a-repository","fieldsIndex":254},{"action":"repo.transfer_outgoing","description":"A repository was transferred to another repository network.","docs_reference_links":"N/A","fieldsIndex":255},{"action":"repo.transfer_start","description":"A user sent a request to transfer a repository to another user or organization.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.unarchived","description":"A repository was unarchived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.update_actions_access_settings","description":"The setting to control how a repository was used by GitHub Actions workflows in other repositories was changed.","docs_reference_links":"N/A","fieldsIndex":256},{"action":"repo.update_actions_secret","description":"A GitHub Actions secret was updated for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.update_actions_settings","description":"A repository administrator changed GitHub Actions policy settings for a repository.","docs_reference_links":"N/A","fieldsIndex":257},{"action":"repo.update_actions_variable","description":"A GitHub Actions variable was updated for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.update_default_branch","description":"The default branch for a repository was changed.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.update_member","description":"A user's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":258},{"action":"repository_advisory.close","description":"Someone closed a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/about-repository-security-advisories","docs_reference_titles":"Repository security advisories","fieldsIndex":32},{"action":"repository_advisory.create_confidential_comment","description":"Someone created a confidential comment on a repository security advisory.","docs_reference_links":"N/A","fieldsIndex":259},{"action":"repository_advisory.cve_request","description":"Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.github_broadcast","description":"GitHub made a security advisory public in the GitHub Advisory Database.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"repository_advisory.github_withdraw","description":"GitHub withdrew a security advisory that was published in error.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"repository_advisory.open","description":"Someone opened a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.publish","description":"Someone published a security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.read_confidential_comments","description":"Confidential comments on a repository security advisory were read by someone.","docs_reference_links":"N/A","fieldsIndex":260},{"action":"repository_advisory.reopen","description":"Someone reopened as draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.update","description":"Someone edited a draft or published security advisory.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"repository_branch_protection_evaluation.disable","description":"Branch protections were disabled for the repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_branch_protection_evaluation.enable","description":"Branch protections were enabled for this repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_code_security.disable","description":"Code security was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_code_security.enable","description":"Code security was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_content_analysis.disable","description":"Data use settings were disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_content_analysis.enable","description":"Data use settings were enabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_dependency_graph_autosubmit.disable","description":"Automatic dependency submission was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph_autosubmit.enable","description":"Automatic dependency submission was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph.disable","description":"The dependency graph was disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea, tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":231},{"action":"repository_dependency_graph.enable","description":"The dependency graph was enabled for a private repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_updates_self_hosted.disabled","description":"Dependency updates on self-hosted runners was disabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":234},{"action":"repository_dependency_updates_self_hosted.enabled","description":"Dependency updates on self-hosted runners was enabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":231},{"action":"repository_image.create","description":"An image to represent a repository was uploaded.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_image.destroy","description":"An image to represent a repository was deleted.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_invitation.accept","description":"An invitation to join a repository was accepted.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_invitation.cancel","description":"An invitation to join a repository was canceled.","docs_reference_links":"N/A","fieldsIndex":263},{"action":"repository_invitation.create","description":"An invitation to join a repository was sent.","docs_reference_links":"N/A","fieldsIndex":263},{"action":"repository_invitation.reject","description":"An invitation to join a repository was declined.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_limit.reached","description":"An organization has reached their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":264},{"action":"repository_limit.warning","description":"An organization is approaching their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":265},{"action":"repository_malware_alerts.disable","description":"Dependabot malware alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_malware_alerts.enable","description":"Dependabot malware alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_projects_change.clear","description":"The repository projects policy was removed for an organization, or all organizations in the enterprise Organization owners can now control their repository projects settings.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":15},{"action":"repository_projects_change.disable","description":"Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_projects_change.enable","description":"Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_ruleset.create","description":"A repository ruleset was created.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","fieldsIndex":266},{"action":"repository_ruleset.destroy","description":"A repository ruleset was deleted.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","fieldsIndex":266},{"action":"repository_ruleset.update","description":"A repository ruleset was edited.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","fieldsIndex":267},{"action":"repository_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":18},{"action":"repository_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":18},{"action":"repository_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":236},{"action":"repository_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":236},{"action":"repository_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":236},{"action":"repository_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":18},{"action":"repository_secret_scanning.disable","description":"Secret scanning was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":231},{"action":"repository_secret_scanning.enable","description":"Secret scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.disabled","description":"Metadata for secret scanning alerts has been disabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.enabled","description":"Metadata for secret scanning alerts has been enabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":103},{"action":"repository_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":236},{"action":"repository_secret_scanning_push_protection.disable","description":"Secret scanning push protection was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection.enable","description":"Secret scanning push protection was enabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_security_configuration.applied","description":"A code security configuration was applied to a repository.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_configuration.failed","description":"A code security configuration failed to attach to the repository.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_configuration.removed","description":"A code security configuration was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_configuration.removed_by_settings_change","description":"A code security configuration was removed due to a change in repository or enterprise settings.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_updates.disable","description":"Dependabot security updates was disabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_security_updates.enable","description":"Dependabot security updates was enabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_visibility_change.clear","description":"The repository visibility change setting was cleared for an organization or enterprise.","docs_reference_links":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-changes-to-repository-visibility","docs_reference_titles":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"repository_visibility_change.disable","description":"The ability for enterprise members to update a repository's visibility was disabled. Members are unable to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"repository_visibility_change.enable","description":"The ability for enterprise members to update a repository's visibility was enabled. Members are able to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"repository_vulnerability_alert.assign","description":"A user was assigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":269},{"action":"repository_vulnerability_alert.auto_dismiss","description":"A Dependabot alert was automatically dismissed because its metadata matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":270},{"action":"repository_vulnerability_alert.auto_reopen","description":"A previously auto-dismissed Dependabot alert was automatically reopened because its metadata no longer matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":270},{"action":"repository_vulnerability_alert.create","description":"GitHub created a Dependabot alert because the repository uses a vulnerable dependency.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":271},{"action":"repository_vulnerability_alert.dismiss","description":"A Dependabot alert was manually dismissed.","docs_reference_links":"N/A","fieldsIndex":272},{"action":"repository_vulnerability_alert.reintroduce","description":"A Dependabot alert was automatically reopened because the repository resumed use of a vulnerable dependency.","docs_reference_links":"N/A","fieldsIndex":271},{"action":"repository_vulnerability_alert.reopen","description":"A Dependabot alert was manually reopened.","docs_reference_links":"N/A","fieldsIndex":269},{"action":"repository_vulnerability_alert.resolve","description":"Changes were pushed to update and resolve a Dependabot alert in a project dependency.","docs_reference_links":"N/A","fieldsIndex":271},{"action":"repository_vulnerability_alert.unassign","description":"A user was unassigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":269},{"action":"repository_vulnerability_alert.withdraw","description":"A Dependabot alert was withdrawn.","docs_reference_links":"N/A","fieldsIndex":273},{"action":"repository_vulnerability_alerts.authorized_users_teams","description":"The list of people or teams authorized to receive Dependabot alerts for the repository was updated.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","fieldsIndex":236},{"action":"repository_vulnerability_alerts_auto_dismissal.disable","description":"Automatic dismissal of low-impact Dependabot alerts was disabled for the repository.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"repository_vulnerability_alerts_auto_dismissal.enable","description":"Automatic dismissal of low-impact Dependabot alerts was enabled for the repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_vulnerability_alerts.disable","description":"Dependabot alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":274},{"action":"repository_vulnerability_alerts.enable","description":"Dependabot alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":274},{"action":"required_status_check.create","description":"A status check was marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":275},{"action":"required_status_check.destroy","description":"A status check was no longer marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":275},{"action":"restrict_notification_delivery.disable","description":"Email notification restrictions for an organization or enterprise were disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":276},{"action":"restrict_notification_delivery.enable","description":"Email notification restrictions for an organization or enterprise were enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":277},{"action":"role.create","description":"A new custom repository role was created.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":278},{"action":"role.destroy","description":"A custom repository role was deleted.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":279},{"action":"role.update","description":"A custom repository role was edited.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":280},{"action":"sandbox.add_port","description":"A forwarded port was added to a sandbox.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.create","description":"A sandbox was created.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.delete","description":"A sandbox was deleted.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.generate_token","description":"A token was generated for a sandbox.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.remove_port","description":"A forwarded port was removed from a sandbox.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.resume","description":"A sandbox was resumed.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.stop","description":"A sandbox was stopped.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"secret_scanning_alert.assign","description":"A user was assigned to a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.create","description":"GitHub detected a secret and created a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.delete","description":"A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":283},{"action":"secret_scanning_alert.metadata_create","description":"Metadata was added to a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.metadata_remove","description":"Metadata was removed from a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.public_leak","description":"A secret scanning alert was leaked in a public repo.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.reopen","description":"A secret scanning alert was reopened.","docs_reference_links":"N/A","fieldsIndex":284},{"action":"secret_scanning_alert.report","description":"A leaked secret was reported to the secret's provider by secret scanning.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning/resolving-alerts","docs_reference_titles":"Resolving alerts from secret scanning","fieldsIndex":285},{"action":"secret_scanning_alert.resolve","description":"A secret scanning alert was resolved.","docs_reference_links":"N/A","fieldsIndex":284},{"action":"secret_scanning_alert.revoke","description":"A secret scanning alert was revoked.","docs_reference_links":"N/A","fieldsIndex":286},{"action":"secret_scanning_alert.unassign","description":"A user was unassigned from a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.validate","description":"A secret scanning alert was validated.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":287},{"action":"secret_scanning_closure_request.approve","description":"A request to close a secret scanning alert was approved by a user.","docs_reference_links":"N/A","fieldsIndex":288},{"action":"secret_scanning_closure_request.cancel","description":"N/A","docs_reference_links":"A reqeust to close a secret scanning alert was canceled by a user.","docs_reference_titles":"A, reqeust, to, close, a, secret, scanning, alert, was, canceled, by, a, user.","fieldsIndex":289},{"action":"secret_scanning_closure_request.create","description":"N/A","docs_reference_links":"A user requested to close a secret scanning alert.","docs_reference_titles":"A, user, requested, to, close, a, secret, scanning, alert.","fieldsIndex":290},{"action":"secret_scanning_closure_request.deny","description":"A request to close a secret scanning alert was denied by a user.","docs_reference_links":"N/A","fieldsIndex":288},{"action":"secret_scanning.disable","description":"Secret scanning was disabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":11},{"action":"secret_scanning.enable","description":"Secret scanning was enabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.disable","description":"Secret scanning was disabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.enable","description":"Secret scanning was enabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_push_protection.bypass","description":"Triggered when a user bypasses the push protection on a secret detected by secret scanning.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#bypassing-push-protection-for-a-secret","docs_reference_titles":"Push protection","fieldsIndex":291},{"action":"secret_scanning_push_protection_request.approve","description":"A request to bypass secret scanning push protection was approved by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":292},{"action":"secret_scanning_push_protection_request.cancel","description":"A user canceled a request to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":293},{"action":"secret_scanning_push_protection_request.complete","description":"A user pushed a commit containing a secret for which there is an approved secret scanning push protection bypass request.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":293},{"action":"secret_scanning_push_protection_request.deny","description":"A request to bypass secret scanning push protection was denied by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":294},{"action":"secret_scanning_push_protection_request.request","description":"A user requested to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":295},{"action":"secret_scanning_scan.completed","description":"A secret scanning scan has completed on this repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":296},{"action":"security_configuration.create","description":"A security configuration was created","docs_reference_links":"N/A","fieldsIndex":297},{"action":"security_configuration_default.delete","description":"A default security configuration setting for new repositories was removed.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"security_configuration_default.update","description":"A default security configuration setting for new repositories was updated.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"security_configuration.delete","description":"A security configuration was deleted","docs_reference_links":"N/A","fieldsIndex":297},{"action":"security_configuration_policy.update","description":"A security configuration policy was updated","docs_reference_links":"N/A","fieldsIndex":299},{"action":"security_configuration.update","description":"A security configuration was updated","docs_reference_links":"N/A","fieldsIndex":300},{"action":"sponsors.agreement_sign","description":"A GitHub Sponsors agreement was signed on behalf of an organization.","docs_reference_links":"N/A","fieldsIndex":301},{"action":"sponsors.custom_amount_settings_change","description":"Custom amounts for GitHub Sponsors were enabled or disabled, or the suggested custom amount was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":301},{"action":"sponsors.fiscal_host_change","description":"The fiscal host for a GitHub Sponsors listing was updated.","docs_reference_links":"N/A","fieldsIndex":302},{"action":"sponsors.invoiced_agreement_sign","description":"An agreement for invoiced billing for GitHub Sponsors was signed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","fieldsIndex":0},{"action":"sponsors.repo_funding_links_file_action","description":"The FUNDING file in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","fieldsIndex":303},{"action":"sponsors.sponsor_sponsorship_cancel","description":"A sponsorship was canceled.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Downgrading a sponsorship","fieldsIndex":304},{"action":"sponsors.sponsor_sponsorship_create","description":"A sponsorship was created, by sponsoring an account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":305},{"action":"sponsors.sponsor_sponsorship_payment_complete","description":"After you sponsor an account and a payment has been processed, the sponsorship payment was marked as complete.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":305},{"action":"sponsors.sponsor_sponsorship_preference_change","description":"The option to receive email updates from a sponsored account was changed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","fieldsIndex":304},{"action":"sponsors.sponsor_sponsorship_tier_change","description":"A sponsorship was upgraded or downgraded.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/upgrading-a-sponsorship, /billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Upgrading a sponsorship, Downgrading a sponsorship","fieldsIndex":305},{"action":"sponsors.sponsored_developer_approve","description":"A GitHub Sponsors account was approved.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":302},{"action":"sponsors.sponsored_developer_create","description":"A GitHub Sponsors account was created.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":306},{"action":"sponsors.sponsored_developer_disable","description":"A GitHub Sponsors account was disabled.","docs_reference_links":"N/A","fieldsIndex":302},{"action":"sponsors.sponsored_developer_profile_update","description":"The profile for GitHub Sponsors account was edited.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","fieldsIndex":306},{"action":"sponsors.sponsored_developer_redraft","description":"A GitHub Sponsors account was returned to draft state from approved state.","docs_reference_links":"N/A","fieldsIndex":302},{"action":"sponsors.sponsored_developer_request_approval","description":"An application for GitHub Sponsors was submitted for approval.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":302},{"action":"sponsors.sponsored_developer_tier_description_update","description":"The description for a sponsorship tier was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":307},{"action":"sponsors.sponsors_patreon_user_create","description":"A Patreon account was linked to a user account for use with GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","fieldsIndex":308},{"action":"sponsors.sponsors_patreon_user_destroy","description":"A Patreon account for use with GitHub Sponsors was unlinked from a user account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/unlinking-your-patreon-account-from-your-github-account","docs_reference_titles":"Unlinking your Patreon account from GitHub","fieldsIndex":308},{"action":"sponsors.update_tier_repository","description":"A GitHub Sponsors tier changed access for a repository.","docs_reference_links":"N/A","fieldsIndex":307},{"action":"sponsors.update_tier_welcome_message","description":"The welcome message for a GitHub Sponsors tier for an organization was updated.","docs_reference_links":"N/A","fieldsIndex":307},{"action":"sponsors.withdraw_agreement_signature","description":"A signature was withdrawn from a GitHub Sponsors agreement that applies to an organization.","docs_reference_links":"N/A","fieldsIndex":301},{"action":"ssh_certificate_authority.create","description":"An SSH certificate authority for an organization or enterprise was created.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":309},{"action":"ssh_certificate_authority.destroy","description":"An SSH certificate authority for an organization or enterprise was deleted.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":309},{"action":"ssh_certificate_requirement.disable","description":"The requirement for members to use SSH certificates to access an organization resources was disabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"ssh_certificate_requirement.enable","description":"The requirement for members to use SSH certificates to access an organization resources was enabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"staff.dependabot_debug_credentials_generated","description":"Dependabot encrypted config was read.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"staff.set_domain_token_expiration","description":"The verification code expiry time for an organization or enterprise domain was set.","docs_reference_links":"N/A","fieldsIndex":310},{"action":"staff.unverify_domain","description":"An organization or enterprise domain was unverified.","docs_reference_links":"N/A","fieldsIndex":311},{"action":"staff.verify_domain","description":"An organization or enterprise domain was verified.","docs_reference_links":"N/A","fieldsIndex":312},{"action":"sub_issues.parent_issue_add","description":"A parent issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"sub_issues.parent_issue_remove","description":"A parent issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"sub_issues.sub_issue_add","description":"A sub-issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"sub_issues.sub_issue_remove","description":"A sub-issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"team.add_member","description":"A member of an organization was added to a team.","docs_reference_links":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","fieldsIndex":313},{"action":"team.add_repository","description":"A team was given access and permissions to a repository.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.add_to_organization","description":"A team was added to an organization.","docs_reference_links":"N/A","fieldsIndex":315},{"action":"team.change_parent_team","description":"A child team was created or a child team's parent was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","docs_reference_titles":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","fieldsIndex":313},{"action":"team.change_privacy","description":"A team's privacy level was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/changing-team-visibility","docs_reference_titles":"/organizations/organizing-members-into-teams/changing-team-visibility","fieldsIndex":313},{"action":"team.create","description":"A new team is created.","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team.demote_maintainer","description":"A user was demoted from a team maintainer to a team member.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","fieldsIndex":313},{"action":"team.destroy","description":"A team was deleted.","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team_group_mapping.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"team_group_mapping.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"team_group_mapping.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"team.members_limit_warning","description":"A team is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team.organization_assignments_limit_reached","description":"A team has reached its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team.organization_assignments_limit_warning","description":"A team is approaching its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team.promote_maintainer","description":"A user was promoted from a team member to a team maintainer.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","fieldsIndex":313},{"action":"team.remove_from_organization","description":"A team was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":315},{"action":"team.remove_member","description":"An organization member was removed from a team.","docs_reference_links":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","fieldsIndex":313},{"action":"team.remove_repository","description":"A repository was removed from a team's control.","docs_reference_links":"N/A","fieldsIndex":317},{"action":"team.rename","description":"A team's name was changed.","docs_reference_links":"N/A","fieldsIndex":318},{"action":"team_sync_tenant.disabled","description":"Team synchronization with a tenant was disabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.enabled","description":"Team synchronization with a tenant was enabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.update_okta_credentials","description":"The Okta credentials for team synchronization with a tenant were changed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"team.update_repository_permission","description":"A team's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"user_content_edit.delete","description":"Triggered when a user content edit is deleted.","docs_reference_links":"N/A","fieldsIndex":320},{"action":"vulnerability_alert_rule.create","description":"A Dependabot rule was created.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"vulnerability_alert_rule.delete","description":"A Dependabot rule was deleted.","docs_reference_links":"N/A","fieldsIndex":322},{"action":"vulnerability_alert_rule.disable","description":"A Dependabot rule was disabled for a single repository or disabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"vulnerability_alert_rule.enable","description":"A Dependabot rule was enabled for a single repository or enabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":323},{"action":"vulnerability_alert_rule.force_disable","description":"A Dependabot rule was enabled for an organization and cannot be disabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":324},{"action":"vulnerability_alert_rule.force_enable","description":"A Dependabot rule was disabled for an organization and cannot be enabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":324},{"action":"vulnerability_alert_rule.update","description":"A Dependabot rule's conditions, actions, or metadata changed.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"workflows.actions_policy_violation","description":"A workflow run produced one or more workflow execution protection policy violations.","docs_reference_links":"N/A","fieldsIndex":325},{"action":"workflows.approve_workflow_job","description":"A workflow job was approved.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":326},{"action":"workflows.bypass_protection_rules","description":"N/A","docs_reference_links":"N/A","fieldsIndex":327},{"action":"workflows.cancel_workflow_run","description":"A workflow run was cancelled.","docs_reference_links":"/actions/managing-workflow-runs/canceling-a-workflow","docs_reference_titles":"Canceling a workflow run","fieldsIndex":328},{"action":"workflows.comment_workflow_job","description":"N/A","docs_reference_links":"N/A","fieldsIndex":329},{"action":"workflows.completed_workflow_run","description":"A workflow status changed to completed. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/monitoring-and-troubleshooting-workflows/viewing-workflow-run-history","docs_reference_titles":"Viewing workflow run history","fieldsIndex":330},{"action":"workflows.created_workflow_run","description":"A workflow run was create. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/learn-github-actions/understanding-github-actions#create-an-example-workflow","docs_reference_titles":"Understanding GitHub Actions","fieldsIndex":331},{"action":"workflows.debugger_session_completed","description":"An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.","docs_reference_links":"N/A","fieldsIndex":332},{"action":"workflows.debugger_session_started","description":"An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.","docs_reference_links":"N/A","fieldsIndex":333},{"action":"workflows.delete_workflow_run","description":"A workflow run was deleted.","docs_reference_links":"/actions/managing-workflow-runs/deleting-a-workflow-run","docs_reference_titles":"Deleting a workflow run","fieldsIndex":334},{"action":"workflows.disable_workflow","description":"A workflow was disabled.","docs_reference_links":"N/A","fieldsIndex":335},{"action":"workflows.enable_workflow","description":"A workflow was enabled, after previously being disabled by disable_workflow.","docs_reference_links":"N/A","fieldsIndex":335},{"action":"workflows.pin_workflow","description":"A workflow was pinned.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"workflows.prepared_workflow_job","description":"A workflow job was started. Includes the list of secrets that were provided to the job. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/using-workflows/events-that-trigger-workflows","docs_reference_titles":"Events that trigger workflows","fieldsIndex":337},{"action":"workflows.reject_workflow_job","description":"A workflow job was rejected.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":338},{"action":"workflows.rerun_workflow_run","description":"A workflow run was re-run.","docs_reference_links":"/actions/managing-workflow-runs/re-running-workflows-and-jobs","docs_reference_titles":"Re-running workflows and jobs","fieldsIndex":339},{"action":"workflows.unpin_workflow","description":"A workflow was unpinned after previously being pinned.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"account_recovery_token.confirm","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.recover","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"billing.update_bill_cycle_day","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.add_admin","description":"An enterprise owner was added to an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":13},{"action":"business.add_billing_manager","description":"A billing manager was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.add_member","description":"A member was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":340},{"action":"business.add_support_entitlee","description":"A support entitlement was added to a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":341},{"action":"business.remove_admin","description":"An enterprise owner was removed from an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":13},{"action":"business.remove_billing_manager","description":"A billing manager was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.remove_member","description":"A member was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"business.remove_support_entitlee","description":"A support entitlement was removed from a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":13},{"action":"business.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the \"CodeQL pull request alerts\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.security_center_export_coverage","description":"A CSV export was requested on the \"Coverage\" page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"business.security_center_export_overview_dashboard","description":"A CSV export was requested on the \"Overview Dashboard\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.security_center_export_risk","description":"A CSV export was requested on the \"Risk\" page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"business.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":343},{"action":"business.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":343},{"action":"business.set_actions_fork_pr_approvals_policy","description":"The policy for requiring approvals for workflows from public forks was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":344},{"action":"business.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-private-repositories","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":344},{"action":"business.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-artifact-and-log-retention-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":345},{"action":"business.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-workflow-permissions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":346},{"action":"business.set_fork_pr_workflows_policy","description":"The policy for fork pull request workflows was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":344},{"action":"business.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":347},{"action":"gist.create","description":"A gist was created.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"gist.destroy","description":"A gist was deleted.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"gist.visibility_change","description":"The visibility of a gist was updated.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"git_signing_ssh_public_key.create","description":"An SSH key was added to a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":349},{"action":"git_signing_ssh_public_key.delete","description":"An SSH key was removed from a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":350},{"action":"gpg_key.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":351},{"action":"gpg_key.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":352},{"action":"marketplace_listing_plan.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"marketplace_listing_plan.publish","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"marketplace_listing_plan.retire","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"marketplace_listing_plan.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"mcp_registry.allowlist_add_server","description":"A server was added to an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":354},{"action":"mcp_registry.allowlist_create","description":"An MCP registry allowlist was created.","docs_reference_links":"N/A","fieldsIndex":355},{"action":"mcp_registry.allowlist_delete","description":"An MCP registry allowlist was deleted.","docs_reference_links":"N/A","fieldsIndex":356},{"action":"mcp_registry.allowlist_remove_server","description":"A server was removed from an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":354},{"action":"mcp_registry.allowlist_set_server_entries","description":"Entries were set for a server in an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":357},{"action":"mcp_registry.allowlist_update","description":"An MCP registry allowlist was updated.","docs_reference_links":"N/A","fieldsIndex":358},{"action":"mcp_registry.settings_update","description":"An MCP policy setting for the business was updated.","docs_reference_links":"N/A","fieldsIndex":359},{"action":"oauth_access.create","description":"An OAuth access token was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, /authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, Managing your personal access tokens","fieldsIndex":360},{"action":"oauth_access.destroy","description":"An OAuth access token was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","fieldsIndex":361},{"action":"oauth_access.regenerate","description":"An OAuth access token was regenerated.","docs_reference_links":"N/A","fieldsIndex":360},{"action":"oauth_access.revoke","description":"An OAuth access token was revoked.","docs_reference_links":"N/A","fieldsIndex":362},{"action":"oauth_access.update","description":"An OAuth access token was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"oauth_authorization.create","description":"An authorization for an OAuth application was created.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":360},{"action":"oauth_authorization.destroy","description":"An authorization for an OAuth application was deleted.","docs_reference_links":"/apps/using-github-apps/reviewing-your-authorized-integrations","docs_reference_titles":"Reviewing and revoking authorization of GitHub Apps","fieldsIndex":363},{"action":"oauth_authorization.update","description":"An authorization for an OAuth application was updated.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":364},{"action":"passkey.register","description":"A new passkey was added.","docs_reference_links":"N/A","fieldsIndex":365},{"action":"passkey.remove","description":"A new passkey was removed.","docs_reference_links":"N/A","fieldsIndex":365},{"action":"personal_access_token.create","description":"Triggered when you create a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":366},{"action":"personal_access_token.credential_regenerated","description":"Triggered when you regenerate a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":367},{"action":"personal_access_token.credential_revoked","description":"A fine-grained personal access token was revoked by GitHub Advanced Security.","docs_reference_links":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","docs_reference_titles":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","fieldsIndex":368},{"action":"personal_access_token.destroy","description":"Triggered when you delete a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":369},{"action":"personal_access_token.update","description":"A fine-grained personal access token was updated.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","fieldsIndex":370},{"action":"repo.temporary_access_granted","description":"Temporary access was enabled for a repository.","docs_reference_links":"/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise","docs_reference_titles":"Accessing user-owned repositories in your enterprise","fieldsIndex":103},{"action":"security_key.register","description":"A security key was registered for an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"security_key.remove","description":"A security key was removed from an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"social_identity.linked","description":"A user linked a social identity to their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"social_identity.unlinked","description":"A user unlinked a social identity from their account.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"social_identity.unlinked_all","description":"A user unlinked all social identities from their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sponsors.sponsored_developer_update_newsletter_send","description":"Triggered when you send an email update to your sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","fieldsIndex":15},{"action":"sponsors.waitlist_join","description":"You join the waitlist to join GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":306},{"action":"successor_invitation.accept","description":"Triggered when you accept a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.cancel","description":"Triggered when you cancel a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.create","description":"Triggered when you create a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.decline","description":"Triggered when you decline a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":371},{"action":"successor_invitation.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"successor_invitation.revoke","description":"Triggered when you revoke a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":371},{"action":"trusted_device.register","description":"A new trusted device was added.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"trusted_device.remove","description":"A trusted device was removed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.abort","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.complete","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.ignore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_approve","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_decline","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.start","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_account_recovery.two_factor_destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.add_factor","description":"A secondary authentication factor was added to a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.disabled","description":"Two-factor authentication was disabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/disabling-two-factor-authentication-for-your-personal-account","docs_reference_titles":"Disabling two-factor authentication for your personal account","fieldsIndex":15},{"action":"two_factor_authentication.enabled","description":"Two-factor authentication was enabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"Configuring two-factor authentication","fieldsIndex":15},{"action":"two_factor_authentication.password_reset_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.recovery_codes_regenerated","description":"Two factor recovery codes were regenerated for a user account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_authentication.remove_factor","description":"A secondary authentication factor was removed from a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.sign_in_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.update_fallback","description":"The two-factor authentication fallback for a user account was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.add_email","description":"An email address was added to a user account.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/adding-an-email-address-to-your-github-account","docs_reference_titles":"Adding an email address to your GitHub account","fieldsIndex":372},{"action":"user.async_delete","description":"An asynchronous job was started to destroy a user account, eventually triggering a user.delete event.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.audit_log_export","description":"Audit log entries were exported.","docs_reference_links":"N/A","fieldsIndex":114},{"action":"user.block_user","description":"A user was blocked by another user.","docs_reference_links":"N/A","fieldsIndex":116},{"action":"user.change_password","description":"A user changed their password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.codespaces_trusted_repo_access_granted","description":"Triggered when you allow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":18},{"action":"user.codespaces_trusted_repo_access_revoked","description":"Triggered when you disallow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":119},{"action":"user.create","description":"A new user account was created.","docs_reference_links":"N/A","fieldsIndex":373},{"action":"user.create_integration_secret","description":"A user secret for Codespaces was created.","docs_reference_links":"N/A","fieldsIndex":374},{"action":"user.creation_rate_limit_exceeded","description":"The rate of creation of user accounts, applications, issues, pull requests or other resources exceeded the configured rate limits, or too many users were followed too quickly.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"user.delete","description":"A user account was destroyed by an asynchronous job.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.demote","description":"A site administrator was demoted to an ordinary user account.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.destroy","description":"A user deleted his or her account, triggering user.async_delete.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.device_verification_failure","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_requested","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_success","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.disable_collaborators_only","description":"The interaction limit for collaborators only was disabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.disable_contributors_only","description":"The interaction limit for prior contributors only was disabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only was disabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user_email.confirm_claim","description":"An enterprise managed user claimed an email address.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_email.mark_as_unclaimed","description":"N/A","docs_reference_links":"An enterprise managed user unclaimed an email address.","docs_reference_titles":"An, GitHub Help Documentation, managed, user, unclaimed, an, email, address.","fieldsIndex":15},{"action":"user.enable_collaborators_only","description":"The interaction limit for collaborators only was enabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.enable_contributors_only","description":"The interaction limit for prior contributors only was enabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.enable_sockpuppet_disallowed","description":"The interaction limit for existing users only was enabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.failed_login","description":"A user tried to sign in with an incorrect username, password, or two-factor authentication code.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.forgot_password","description":"A user requested a password reset.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","fieldsIndex":376},{"action":"user.grant_github_developer","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.hide_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now hidden.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.login","description":"A user signed in.","docs_reference_links":"N/A","fieldsIndex":377},{"action":"user.logout","description":"A user signed out.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.new_device_used","description":"A user signed in from a new device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.promote","description":"An ordinary user account was promoted to a site administrator.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.recreate","description":"A user's account was restored.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.remove_email","description":"An email address was removed from a user account.","docs_reference_links":"N/A","fieldsIndex":372},{"action":"user.remove_integration_secret","description":"A user secret for Codespaces was deleted.","docs_reference_links":"N/A","fieldsIndex":378},{"action":"user.rename","description":"A username was changed.","docs_reference_links":"N/A","fieldsIndex":379},{"action":"user.reset_password","description":"A user reset their account password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_session.country_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.show_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now shown.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device","description":"A user signed in from an unrecognized device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device_and_location","description":"A user signed in from an unrecognized device and location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_status.destroy","description":"Triggered when you clear the status on your profile.","docs_reference_links":"N/A","fieldsIndex":380},{"action":"user_status.update","description":"Triggered when you set or change the status on your profile.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile#setting-a-status","docs_reference_titles":"Personalize your profile","fieldsIndex":381},{"action":"user.suspend","description":"A user account was suspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.toggle_warn_private_email","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.two_factor_challenge_failure","description":"A 2FA challenge issued for a user account failed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_challenge_success","description":"A 2FA challenge issued for a user account succeeded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recover","description":"A user used their 2FA recovery codes.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_downloaded","description":"A user downloaded 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_printed","description":"A user printed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_viewed","description":"A user viewed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_requested","description":"A user was prompted for a two-factor authentication code.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","fieldsIndex":15},{"action":"user.unblock_user","description":"A user was unblocked by another user.","docs_reference_links":"N/A","fieldsIndex":116},{"action":"user.unsuspend","description":"A user account was unsuspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.update_integration_secret","description":"A user secret for Codespaces was updated.","docs_reference_links":"N/A","fieldsIndex":374},{"action":"user.update_new_repository_default_branch_setting","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"api.request","description":"An API request was made to an endpoint for the enterprise, or an enterprise owned resource. This event is only included if API Request Events is enabled in the enterprise's audit log settings. This event is only available via audit log streaming.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise#enabling-audit-log-streaming-of-api-requests","docs_reference_titles":"Streaming the audit log for your enterprise","fieldsIndex":382},{"action":"audit_log_streaming.check","description":"A manual check of the endpoint configured for audit log streaming was performed.","docs_reference_links":"N/A","fieldsIndex":383},{"action":"audit_log_streaming.create","description":"An endpoint was added for audit log streaming.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"audit_log_streaming.destroy","description":"An audit log streaming endpoint was deleted.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"audit_log_streaming.update","description":"An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.","docs_reference_links":"N/A","fieldsIndex":386},{"action":"business.add_disallowed_two_factor_method","description":"An enterprise prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":387},{"action":"business.add_organization","description":"An organization was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":388},{"action":"business_advanced_security.disabled","description":"GitHub Advanced Security was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.disabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was disabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.enabled","description":"GitHub Advanced Security was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was enabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.advanced_security_metered_usage_lock","description":"Enablement for Advanced Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.advanced_security_metered_usage_unlock","description":"Enablement for Advanced Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.advanced_security_policy_update","description":"An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":389},{"action":"business.advanced_security_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business_advanced_security.user_namespace_repos_disabled","description":"GitHub Advanced Security was disabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.user_namespace_repos_enabled","description":"GitHub Advanced Security was enabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.audit_log_export","description":"An export of the enterprise audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":114},{"action":"business.audit_log_git_event_export","description":"An export of the enterprise's Git events was created.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":115},{"action":"business.cancel_admin_invitation","description":"An invitation for someone to be an owner of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.cancel_billing_manager_invitation","description":"An invitation for someone to be an billing manager of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.cancel_trial","description":"The trial of GitHub Enterprise Cloud was canceled.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.change_seats_plan_type","description":"The seats plan type was changed for an enterprise.","docs_reference_links":"N/A","fieldsIndex":392},{"action":"business.clear_actions_settings","description":"An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":393},{"action":"business.clear_default_repository_permission","description":"An enterprise owner cleared the base repository permission policy setting for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":343},{"action":"business.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an enterprise.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.clear_members_can_create_repos","description":"An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":394},{"action":"business.code_quality_access_policy_update","description":"The policy for Code Quality access was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_quality_enablement_policy_update","description":"The policy for Code Quality enablement was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_scanning_ai_findings_policy_update","description":"The policy for Code scanning AI findings was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_scanning_autofix_policy_update","description":"The policy for Code scanning autofix was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_scanning_autofix_third_party_tools_policy_update","description":"The policy for Code scanning autofix third party tools was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":389},{"action":"business.code_security_enablement_policy_update","description":"The policy for Code Security enablement was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":389},{"action":"business.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.connect_usage_metrics_export","description":"Server statistics were exported for the enterprise.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":341},{"action":"business.convert_trial","description":"The enterprise account on a trial of GitHub Enterprise Cloud was upgraded to a paid enterprise account.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.create","description":"An enterprise was created.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.create_trial","description":"A trial of GitHub Enterprise Cloud began.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.delete","description":"The enterprise was deleted.","docs_reference_links":"/admin/overview/deleting-an-enterprise-account","docs_reference_titles":"Deleting an enterprise account","fieldsIndex":341},{"action":"business.delete_custom_image","description":"A custom image was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":343},{"action":"business.delete_custom_image_version","description":"A custom image version was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":343},{"action":"business_dependabot_alerts.disable","description":"Dependabot alerts were disabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts.enable","description":"Dependabot alerts were enabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business.dependabot_alerts_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.disable_oidc","description":"OIDC single sign-on was disabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.disable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was disabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.disable_saml","description":"SAML single sign-on was disabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was disabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.disable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.enable_app_delegated_credential_authorizations","description":"App-delegated credential authorizations were enabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enable_oidc","description":"OIDC single sign-on was enabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.enable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enable_saml","description":"SAML single sign-on was enabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was enabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.enable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.enterprise_server_license_download","description":"A GitHub Enterprise Server license was downloaded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enterprise_teams_limit_reached","description":"An enterprise has reached its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.enterprise_teams_limit_warning","description":"An enterprise is approaching its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.expire_trial","description":"The trial of GitHub Enterprise Cloud expired.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.github_models_billing_disabled","description":"GitHub Models billing was disabled for the business.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.github_models_billing_enabled","description":"GitHub Models billing was enabled for the business.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.import_license_usage","description":"License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.","docs_reference_links":"/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage","docs_reference_titles":"Syncing license usage from GitHub Enterprise Server to Cloud","fieldsIndex":340},{"action":"business.invite_admin","description":"An invitation for someone to be an enterprise owner of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.invite_billing_manager","description":"An invitation for someone to be a billing manager of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.invite_unaffiliated_member","description":"An invitation for someone to join an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.members_can_update_protected_branches.clear","description":"An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.members_limit_reached","description":"An enterprise has reached its members limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.members_limit_warning","description":"An enterprise is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.organizations_limit_reached","description":"An enterprise has reached its organizations limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.organizations_limit_warning","description":"An enterprise is approaching its organizations limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.proxy_security_header_disabled","description":"The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_enabled","description":"The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_unsatisfied","description":"A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.recovery_code_failed","description":"An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":397},{"action":"business.recovery_code_used","description":"An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":341},{"action":"business.recovery_codes_downloaded","description":"An enterprise owner downloaded the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.recovery_codes_generated","description":"An enterprise owner generated the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.recovery_codes_printed","description":"An enterprise owner printed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.recovery_codes_viewed","description":"An enterprise owner viewed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an enterprise.","docs_reference_links":"N/A","fieldsIndex":398},{"action":"business.remove_organization","description":"An organization was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"business.rename_slug","description":"The slug for the enterprise URL was renamed.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.restore","description":"The deleted enterprise was restored.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.revoke_external_identity","description":"The external identity for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.revoke_sso_session","description":"The SAML single sign-on session for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.create","description":"An enterprise-level custom pattern was created for secret scanning.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":11},{"action":"business_secret_scanning_custom_pattern.delete","description":"An enterprise-level custom pattern was removed from secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern.publish","description":"An enterprise-level custom pattern was published for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.update","description":"Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning.disable","description":"Secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.disabled_for_new_repos","description":"Secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning.enable","description":"Secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning.enabled_for_new_repos","description":"Secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.disable","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.enable","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.update","description":"The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.disable","description":"Push protection for secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":0},{"action":"business_secret_scanning_push_protection.disabled_for_new_repos","description":"Push protection for secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection.enable","description":"Push protection for secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection.enabled_for_new_repos","description":"Push protection for secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":145},{"action":"business_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":146},{"action":"business.secret_scanning_repo_admin_settings_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":399},{"action":"business.trial_email_verification_failed","description":"A trial email verification attempt failed for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.trial_email_verification_requested","description":"A trial email verification resend was requested for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.trial_email_verification_sent","description":"A trial email verification was sent for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.trial_email_verified","description":"The trial email was successfully verified for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.update_actions_settings","description":"An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":400},{"action":"business.update_default_repository_permission","description":"The base repository permission setting was updated for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":401},{"action":"business.update_emu_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":402},{"action":"business.update_member_repository_creation_permission","description":"The repository creation setting was updated for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":403},{"action":"business.update_member_repository_invitation_permission","description":"The policy setting for enterprise members inviting outside collaborators to repositories was updated.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-inviting-outside-collaborators-to-repositories","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":404},{"action":"business.update_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":405},{"action":"business.update_saml_provider_settings","description":"The SAML single sign-on provider settings for an enterprise were updated.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.update_unaffiliated_users_policy","description":"The policy for removing user accounts when removing the last organization membership was updated.","docs_reference_links":"/admin/enforcing-policies/enforcing-policies-for-your-enterprise/control-offboarding","docs_reference_titles":"Controlling user offboarding with the unaffiliated users policy","fieldsIndex":406},{"action":"business.upgrade_from_organization","description":"The organization was upgraded to an enterprise account.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/upgrading-your-accounts-plan#upgrading-your-organizations-plan","docs_reference_titles":"Upgrading your account's plan","fieldsIndex":341},{"action":"copilot.cfb_enterprise_org_enablement_changed","description":"The Copilot enablement policy changed at the enterprise level to either allow or disable access for all organizations, or to allow access for selected organizations.","docs_reference_links":"N/A","fieldsIndex":407},{"action":"copilot.cfb_enterprise_settings_changed","description":"Copilot feature settings were changed at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.clickwrap_save_event","description":"The GitHub Copilot Product Terms or Pre-Release Preview Terms were accepted.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.enterprise_enablement_changed","description":"Copilot access was enabled or disabled at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":407},{"action":"enterprise.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","fieldsIndex":11},{"action":"enterprise_domain.approve","description":"A domain was approved for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#approving-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise_domain.create","description":"A domain was added to an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise_domain.destroy","description":"A domain was removed from an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#removing-an-approved-or-verified-domain","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise_domain.verify","description":"A domain was verified for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise.register_self_hosted_runner","description":"A new GitHub Actions self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":15},{"action":"enterprise.remove_self_hosted_runner","description":"A GitHub Actions self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":11},{"action":"enterprise_role.assign","description":"An enterprise role was assigned to a user or enterprise team.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":408},{"action":"enterprise_role.create","description":"A custom enterprise role was created in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":409},{"action":"enterprise_role.destroy","description":"A custom enterprise role was deleted in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":409},{"action":"enterprise_role.revoke","description":"A user or enterprise team was unassigned an enterprise role.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":408},{"action":"enterprise_role.update","description":"A custom enterprise role was edited in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":410},{"action":"enterprise.runner_group_created","description":"A GitHub Actions self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":411},{"action":"enterprise.runner_group_removed","description":"A GitHub Actions self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":412},{"action":"enterprise.runner_group_renamed","description":"A GitHub Actions self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":142},{"action":"enterprise.runner_group_runner_removed","description":"The REST API was used to remove a GitHub Actions self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":413},{"action":"enterprise.runner_group_runners_added","description":"A GitHub Actions self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":412},{"action":"enterprise.runner_group_runners_updated","description":"A GitHub Actions runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":412},{"action":"enterprise.runner_group_updated","description":"The configuration of a GitHub Actions self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":411},{"action":"enterprise.runner_group_visiblity_updated","description":"The visibility of a GitHub Actions self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":144},{"action":"enterprise.self_hosted_runner_offline","description":"The GitHub Actions runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"enterprise.self_hosted_runner_online","description":"The GitHub Actions runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"enterprise.self_hosted_runner_updated","description":"The GitHub Actions runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":150},{"action":"enterprise_team.add_member","description":"A new member was added to the enterprise team or an IdP group linked to an enterprise team, or an IdP group was linked to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"enterprise_team.copilot_assignment","description":"A license for GitHub Copilot was assigned to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"enterprise_team.copilot_unassignment","description":"A license for GitHub Copilot was unassigned from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"enterprise_team.create","description":"A new enterprise team was created.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"enterprise_team.destroy","description":"An enterprise team was deleted.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"enterprise_team.remove_member","description":"A member was removed from the enterprise team or an IdP group linked to an enterprise team, or an IdP group was unlinked from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"enterprise_team.rename","description":"The name of an enterprise team was changed.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.add_member","description":"A user was added to an external group.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.delete","description":"An external group was deleted.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_group.link","description":"An external group was linked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":419},{"action":"external_group.provision","description":"An external group was created.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_group.remove_member","description":"A user was removed from an external group.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.scim_api_failure","description":"Failed external group SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":420},{"action":"external_group.scim_api_success","description":"Successful external group SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":421},{"action":"external_group.unlink","description":"An external group was unlinked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":419},{"action":"external_group.update","description":"An external group was updated.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_group.update_display_name","description":"An external group's display name was updated.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_identity.deprovision","description":"An external identity was deprovisioned, suspending the linked GitHub user.","docs_reference_links":"N/A","fieldsIndex":422},{"action":"external_identity.provision","description":"An external identity was created and linked to a GitHub user.","docs_reference_links":"N/A","fieldsIndex":422},{"action":"external_identity.scim_api_failure","description":"Failed external identity SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":423},{"action":"external_identity.scim_api_success","description":"Successful external identity SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":424},{"action":"external_identity.update","description":"An external identity was updated.","docs_reference_links":"N/A","fieldsIndex":422},{"action":"ip_allow_list.disable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_user_level_enforcement","description":"IP allow list user level enforcement was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_user_level_enforcement","description":"IP allow list user level enforcement was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.update_ip_allowlist_configuration","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_custom_property_definition.create","description":"A new organization custom property definition was created.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":425},{"action":"organization_custom_property_definition.destroy","description":"An organization custom property definition was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":425},{"action":"organization_custom_property_definition.update","description":"An organization custom property definition was updated.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":426},{"action":"personal_access_token.access_restriction_reset","description":"The configured restriction for access to resources via personal access tokens was reset and delegated to organizations.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_reset","description":"Triggered when the enterprise delegates to the organizations when to require approval for fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.disable","description":"SSO lockdown for users was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.enable","description":"SSO lockdown for users was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.disable","description":"Automatic redirects for users to single sign-on (SSO) was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.enable","description":"Automatic redirects for users to single sign-on (SSO) was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.user_access_reinstated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"copilot.user_access_revoked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"discussion_post.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":428},{"action":"discussion_post_reply.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":429},{"action":"discussion_post_reply.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":430},{"action":"discussion_post.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":428},{"action":"oauth_application.suspend","description":"N/A","docs_reference_links":"N/A","fieldsIndex":431},{"action":"oauth_application.unsuspend","description":"An OAuth application was unsuspended for a user or organization account.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"org.async_delete","description":"A user initiated a background job to delete an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recreate","description":"An organization was restored.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.transform","description":"A user account was converted into an organization.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-personal-account/converting-a-user-into-an-organization","docs_reference_titles":"Converting a user into an organization","fieldsIndex":432},{"action":"repo.collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":433},{"action":"repo.disk_archive","description":"A repository was archived on disk.","docs_reference_links":"/repositories/archiving-a-github-repository/archiving-repositories","docs_reference_titles":"/repositories/archiving-a-github-repository/archiving-repositories","fieldsIndex":0},{"action":"repo.hide_from_discovery","description":"N/A","docs_reference_links":"N/A","fieldsIndex":434},{"action":"repo.noindex","description":"N/A","docs_reference_links":"N/A","fieldsIndex":434},{"action":"repo.override_unlock","description":"The repository was unlocked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.pages_build","description":"N/A","docs_reference_links":"N/A","fieldsIndex":435},{"action":"repo.require_login","description":"N/A","docs_reference_links":"N/A","fieldsIndex":433},{"action":"team_discussions.clear","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.correct_password_from_unrecognized_device","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_device_and_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.flag_as_large_scale_contributor","description":"A user account was flagged as a large scale contributor. Only contributions from public repositories the user owns will be shown in their contribution graph, in order to prevent timeouts.","docs_reference_links":"N/A","fieldsIndex":367},{"action":"user.minimize_comment","description":"A comment made by a user was minimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"user.partial_two_factor_email_followup","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.remove_large_scale_contributor_flag","description":"A user account was no longer flagged as a large scale contributor.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.report_abuse","description":"N/A","docs_reference_links":"N/A","fieldsIndex":236},{"action":"user.report_content","description":"Triggered when you report an issue or pull request, or a comment on an issue, pull request, or commit.","docs_reference_links":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","docs_reference_titles":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","fieldsIndex":0},{"action":"user.sign_in_from_unrecognized_location","description":"A user signed in from an unrecognized location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.unminimize_comment","description":"A comment made by a user was unminimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"copilot.knowledge_base_created","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_deleted","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_updated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"actions_policy.evaluate","description":"N/A","docs_reference_links":"N/A","fieldsIndex":245}]
\ No newline at end of file
diff --git a/src/audit-logs/data/shared/fields-pool.json b/src/audit-logs/data/shared/fields-pool.json
index 3b674d198961..dd3bc48368cf 100644
--- a/src/audit-logs/data/shared/fields-pool.json
+++ b/src/audit-logs/data/shared/fields-pool.json
@@ -1 +1 @@
-[["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actions_cache_id","actions_cache_key","actions_cache_scope","actions_cache_version","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","alert_recipient_user_ids","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_type","user_programmatic_access_name","uuid"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","old_alert_enabled","old_budget_limit_type","old_expires_at","old_pricing_target_id","old_pricing_target_type","old_target_amount","old_target_id","old_target_type","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","resource_id","resource_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","dismissal_approver_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","dismissal_request_id","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","origin_repository"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enablement","operation_type","organization_names"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","plan","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_settings","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","excluded_paths","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","custom_instructions","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_plan","operation_type","owner","owner_type","plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_plan","operation_type","owner","owner_type","scheduled_plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_config","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_access","oauth_application_id","old_access","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","user_programmatic_access_name","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","oauth_application_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","old_value_type","operation_type","property_name","required","user_programmatic_access_name","values_editable_by","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","public_repo","user_programmatic_access_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","definition_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","access_level","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","old_message","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","approvers","approvers_was","can_admins_bypass","environment_id","environment_name","new_value","old_value","prevent_self_review"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","external_id","repository_public","transport_protocol","transport_protocol_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","active_was","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","events_were","hook_id","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic","trigger_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_added","repositories_added_names","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_removed","repositories_removed_names","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","reason","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","requester","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","manager","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","requester","requester_id","transfer_from","transfer_from_id","transfer_from_type","transfer_to","transfer_to_id","transfer_to_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","integration","ip_allow_list_entry","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","pull_request_id","pull_request_title","pull_request_url","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","old_color","old_description","old_enabled","old_issue_type_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","assignment_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","check_response_timeout_minutes","created_at","max_entries_to_build","max_entries_to_merge","merge_method","merging_strategy","min_entries_to_merge","min_entries_to_merge_wait_minutes","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitation_id","oauth_application_id","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","permission","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","query_phrase"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end","operation_type","start"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","initiated_from","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","invitee_email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enablement","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitation_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","manager","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","push_protection_setting","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end_date","filename","operation_type","query","requested_at","start_date"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","filename","operation_type","query","requested_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_id","runner_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","runner_group_name","runner_id","runner_name","source_version","target_version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","from_business","operation_type","to_business"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","old_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_permission","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","oauth_application_id","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","organization_role_id","organization_role_name","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain","operation_type","owner","owner_type","state"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","exempt_administrators","old_token_expiration","operation_type","token_expiration"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_token_expiration","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","owner","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type","project_id","project_number","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","collaborator","collaborator_type","created_at","old_project_role","operation_type","project_id","project_name","project_role","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","created_at","name","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","allow_deletions_enforcement_level","allow_force_pushes_enforcement_level","authorized_actor_names","created_at","create_protected","dismiss_stale_reviews_on_push","enforcement_level","ignore_approvals_from_contributors","linear_history_requirement_enforcement_level","lock_allows_fetch_and_merge","lock_branch_enforcement_level","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","required_approving_review_count","required_deployments_enforcement_level","required_review_thread_resolution_enforcement_level","required_status_checks_enforcement_level","require_code_owner_review","require_last_push_approval","signature_requirement_enforcement_level","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","dismiss_stale_reviews_on_push","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","authorized_actors_only","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","after","before","branch","compliant_pull_request_ids","created_at","deploy_key_fingerprint","oauth_application_id","operation_type","overridden_codes","public_repo","reasons","referrer","rule_suite_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_deletions_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_force_pushes_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ignore_approvals_from_contributors","name","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","linear_history_requirement_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","lock_allows_fetch_and_merge","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement_level","lock_branch_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_code_owner_review","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_last_push_approval","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_approving_review_count","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_status_checks_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","signature_requirement_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","fingerprint","key","operation_type","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","agent_session_id","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","reviewer","reviewer_id","reviewer_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","pull_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","review_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","previous_visibility","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","name","oauth_application_id","operation_type","public_repo","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","category","created_at","oauth_application_id","operation_type","public_repo","tool","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","category","created_at","operation_type","public_repo","tool"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","languages","oauth_application_id","operation_type","public_repo","query_suite","threat_model","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","request_category","request_method","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cname","created_at","oauth_application_id","old_cname","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_branch","new_branch","oauth_application_id","old_branch","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_user","operation_type","owner","public_repo","repo_was","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_nwo","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_policy","operation_type","policy","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","public_repo","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_base_role","old_permission","old_repo_base_role","old_repo_permission","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","content_type","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","oauth_application_id","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","ruleset_bypass_actors","ruleset_conditions","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_rules","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","ruleset_bypass_actors_added","ruleset_bypass_actors_deleted","ruleset_bypass_actors_updated","ruleset_conditions_added","ruleset_conditions_deleted","ruleset_conditions_updated","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_old_enforcement","ruleset_old_name","ruleset_rules_added","ruleset_rules_deleted","ruleset_rules_updated","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","repository_security_configuration_failure_reason","repository_security_configuration_state","security_configuration_id","security_configuration_name","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","dismiss_comment","dismiss_reason","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","context","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","reason","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","multi_repo","number","oauth_application_id","operation_type","publicly_leaked","public_repo","resolution","secret_type","secret_type_display_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","report_result","secret_type","secret_type_display_name","secret_type_provider"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","current_validity","multi_repo","number","previous_validity","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","comment","created_at","number","operation_type","public_repo","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","push_protection_bypass_reason","request_reviewer","request_reviewer_comment","request_reviewer_id","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","comment","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","custom_pattern_name","custom_pattern_scope","operation_type","public_repo","secret_types","source","source_slug","started_at","type","type_slug"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_for_new_private_repos","default_for_new_public_repos","oauth_application_id","operation_type","security_configuration_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement","oauth_application_id","operation_type","security_configuration_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","patreon_email","patreon_username"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","openssh_public_key","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type","token_expires_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","name_was","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_permission","old_repo_base_role","old_repo_permission","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","deleted_at","deleted_by","deleted_by_id","deleted_content","editor","editor_id","operation_type","user_content_id","user_content_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed","created_at","event_name","integration_installation_id","operation_type","public_repo","ruleset_ids","violations"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","topic","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cancelled_at","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","completed_at","conclusion","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_attempt","run_number","started_at","topic","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_number","started_at","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","calling_workflow_refs","calling_workflow_shas","created_at","environment_name","imposer_repo","is_hosted_runner","job_name","job_workflow_ref","operation_type","runner_group_id","runner_group_name","runner_id","runner_labels","runner_name","runner_owner_type","secrets_passed","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","check_run_id","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","rerun_type","run_attempt","run_number","started_at","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","gist","gist_id","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","bullets","created_at","description","has_free_trial","marketplace_listing","marketplace_listing_plan","monthly_price_in_cents","operation_type","yearly_price_in_cents"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","server_id","server_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_description","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","entries","server_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name","old_allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","block_local_servers","mcp_policy","old_block_local_servers","old_mcp_policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","nickname","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","pat_field_changed","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","passkey_nickname"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","query_string","rate_limit_remaining","request_body","request_method","route","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_result","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_enabled","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","new_azure_blob_container","new_event_hub_instance","new_gc_bucket","new_s3_arn_role","new_s3_bucket","new_splunk_domain","new_splunk_port","old_azure_blob_container","old_event_hub_instance","old_gc_bucket","old_s3_arn_role","old_s3_bucket","old_splunk_domain","old_splunk_port","operation_type","reason","secrets_updated","ssl_verify"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","organization_upgrade"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","invitation_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","seats_plan_type","seats_plan_type_was"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","old_permission","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_emu_repo_runners_policy","old_emu_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_repo_runners_policy","old_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","remove_existing_unaffiliated_users","users_removed_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","old_role_permissions","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","scim_user_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","operation_type","property_name","required","values_editable_by"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","visibility"]]
\ No newline at end of file
+[["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actions_cache_id","actions_cache_key","actions_cache_scope","actions_cache_version","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","alert_recipient_user_ids","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_type","user_programmatic_access_name","uuid"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","old_alert_enabled","old_budget_limit_type","old_expires_at","old_pricing_target_id","old_pricing_target_type","old_target_amount","old_target_id","old_target_type","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","resource_id","resource_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","dismissal_approver_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","dismissal_request_id","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","origin_repository"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enablement","operation_type","organization_names"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","plan","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_settings","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","excluded_paths","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","custom_instructions","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_plan","operation_type","owner","owner_type","plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_plan","operation_type","owner","owner_type","scheduled_plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_config","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_access","oauth_application_id","old_access","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","user_programmatic_access_name","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","oauth_application_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","old_value_type","operation_type","property_name","required","user_programmatic_access_name","values_editable_by","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","public_repo","user_programmatic_access_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","definition_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","access_level","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","old_message","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","approvers","approvers_was","can_admins_bypass","environment_id","environment_name","new_value","old_value","prevent_self_review"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","external_id","repository_public","transport_protocol","transport_protocol_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","active_was","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","events_were","hook_id","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic","trigger_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_added","repositories_added_names","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_removed","repositories_removed_names","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","reason","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","requester","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","events_added","events_removed","events_unchanged","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","manager","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","requester","requester_id","transfer_from","transfer_from_id","transfer_from_type","transfer_to","transfer_to_id","transfer_to_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","integration","ip_allow_list_entry","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","pull_request_id","pull_request_title","pull_request_url","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","old_color","old_description","old_enabled","old_issue_type_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","assignment_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","check_response_timeout_minutes","created_at","max_entries_to_build","max_entries_to_merge","merge_method","merging_strategy","min_entries_to_merge","min_entries_to_merge_wait_minutes","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitation_id","oauth_application_id","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","permission","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","query_phrase"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end","operation_type","start"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","initiated_from","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","invitee_email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enablement","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitation_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","oauth_application_id","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","manager","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","push_protection_setting","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end_date","filename","operation_type","query","requested_at","start_date"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","filename","operation_type","query","requested_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_id","runner_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","runner_group_name","runner_id","runner_name","source_version","target_version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_workflow_permissions_value","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name","workflow_permission_can_approve_pr_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","from_business","oauth_application_id","operation_type","to_business"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","old_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_permission","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","oauth_application_id","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","organization_role_id","organization_role_name","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain","operation_type","owner","owner_type","state"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","exempt_administrators","old_token_expiration","operation_type","token_expiration"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_token_expiration","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","owner","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type","project_id","project_number","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","collaborator","collaborator_type","created_at","old_project_role","operation_type","project_id","project_name","project_role","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","created_at","name","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","allow_deletions_enforcement_level","allow_force_pushes_enforcement_level","authorized_actor_names","created_at","create_protected","dismiss_stale_reviews_on_push","enforcement_level","ignore_approvals_from_contributors","linear_history_requirement_enforcement_level","lock_allows_fetch_and_merge","lock_branch_enforcement_level","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","required_approving_review_count","required_deployments_enforcement_level","required_review_thread_resolution_enforcement_level","required_status_checks_enforcement_level","require_code_owner_review","require_last_push_approval","signature_requirement_enforcement_level","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","dismiss_stale_reviews_on_push","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","authorized_actors_only","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","after","before","branch","compliant_pull_request_ids","created_at","deploy_key_fingerprint","oauth_application_id","operation_type","overridden_codes","public_repo","reasons","referrer","rule_suite_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_deletions_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_force_pushes_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ignore_approvals_from_contributors","name","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","linear_history_requirement_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","lock_allows_fetch_and_merge","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement_level","lock_branch_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_code_owner_review","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_last_push_approval","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_approving_review_count","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_status_checks_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","signature_requirement_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","agent_session_id","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","reviewer","reviewer_id","reviewer_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","pull_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","review_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","previous_visibility","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","name","oauth_application_id","operation_type","public_repo","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","category","created_at","oauth_application_id","operation_type","public_repo","tool","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","category","created_at","operation_type","public_repo","tool"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","languages","oauth_application_id","operation_type","public_repo","query_suite","threat_model","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","request_category","request_method","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cname","created_at","oauth_application_id","old_cname","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_branch","new_branch","oauth_application_id","old_branch","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_workflow_permissions_value","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility","workflow_permission_can_approve_pr_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_user","operation_type","owner","public_repo","repo_was","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_nwo","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_policy","operation_type","policy","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","public_repo","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_base_role","old_permission","old_repo_base_role","old_repo_permission","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","repository_advisory","repository_advisory_comment_id","repository_advisory_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","confidential_comment_count","created_at","operation_type","public_repo","repository_advisory","repository_advisory_id","surface"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","content_type","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","oauth_application_id","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","ruleset_bypass_actors","ruleset_conditions","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_rules","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","ruleset_bypass_actors_added","ruleset_bypass_actors_deleted","ruleset_bypass_actors_updated","ruleset_conditions_added","ruleset_conditions_deleted","ruleset_conditions_updated","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_old_enforcement","ruleset_old_name","ruleset_rules_added","ruleset_rules_deleted","ruleset_rules_updated","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","repository_security_configuration_failure_reason","repository_security_configuration_state","security_configuration_id","security_configuration_name","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","dismiss_comment","dismiss_reason","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","reason","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","context","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sandbox_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","reason","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","multi_repo","number","oauth_application_id","operation_type","publicly_leaked","public_repo","resolution","secret_type","secret_type_display_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","report_result","secret_type","secret_type_display_name","secret_type_provider"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","current_validity","multi_repo","number","previous_validity","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","comment","created_at","number","operation_type","public_repo","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","push_protection_bypass_reason","request_reviewer","request_reviewer_comment","request_reviewer_id","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","comment","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","custom_pattern_name","custom_pattern_scope","operation_type","public_repo","secret_types","source","source_slug","started_at","topic","type","type_slug"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_for_new_private_repos","default_for_new_public_repos","oauth_application_id","operation_type","security_configuration_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement","oauth_application_id","operation_type","security_configuration_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","patreon_email","patreon_username"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","openssh_public_key","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type","token_expires_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","name_was","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_permission","old_repo_base_role","old_repo_permission","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","deleted_at","deleted_by","deleted_by_id","deleted_content","editor","editor_id","operation_type","user_content_id","user_content_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed","created_at","event_name","integration_installation_id","operation_type","public_repo","ruleset_ids","violations"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","topic","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cancelled_at","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","completed_at","conclusion","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_attempt","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_number","started_at","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","operation_type","started_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","started_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","calling_workflow_refs","calling_workflow_shas","created_at","environment_name","imposer_repo","is_hosted_runner","job_name","job_workflow_ref","operation_type","runner_group_id","runner_group_name","runner_id","runner_labels","runner_name","runner_owner_type","secrets_passed","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","check_run_id","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","rerun_type","run_attempt","run_number","started_at","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","limit","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","default_workflow_permissions_value","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","workflow_permission_can_approve_pr_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","gist","gist_id","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","bullets","created_at","description","has_free_trial","marketplace_listing","marketplace_listing_plan","monthly_price_in_cents","operation_type","yearly_price_in_cents"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","server_id","server_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_description","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","entries","server_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name","old_allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","block_local_servers","mcp_policy","old_block_local_servers","old_mcp_policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_name","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","nickname","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","pat_field_changed","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","passkey_nickname"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","query_string","rate_limit_remaining","request_body","request_method","route","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_result","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_enabled","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","new_azure_blob_container","new_datadog_site","new_event_hub_instance","new_gc_bucket","new_s3_arn_role","new_s3_bucket","new_splunk_domain","new_splunk_port","oauth_application_id","old_azure_blob_container","old_datadog_site","old_event_hub_instance","old_gc_bucket","old_s3_arn_role","old_s3_bucket","old_splunk_domain","old_splunk_port","operation_type","reason","secrets_updated","ssl_verify"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","organization_upgrade"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","seats_plan_type","seats_plan_type_was"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","old_permission","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_emu_repo_runners_policy","old_emu_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","remove_existing_unaffiliated_users","users_removed_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","old_role_permissions","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","large_group_warning","message","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","large_group_warning","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","scim_user_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","operation_type","property_name","required","values_editable_by"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"]]
\ No newline at end of file
diff --git a/src/audit-logs/data/version-index.json b/src/audit-logs/data/version-index.json
index 6bdbcdd62f2f..c97b12622d41 100644
--- a/src/audit-logs/data/version-index.json
+++ b/src/audit-logs/data/version-index.json
@@ -1 +1 @@
-{"fpt":{"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,869,870,871,872,873,874,875,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,797,798,799,801,804,805,806,807,809,811]},"ghec":{"enterprise":[0,1,2,3,4,5,6,962,7,963,964,965,966,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,815,816,817,967,968,818,969,970,971,972,973,974,975,976,977,978,979,980,981,982,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,819,820,1046,821,1047,822,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,1094,1095,55,56,57,58,59,60,61,62,63,1096,65,1097,68,69,70,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,1098,1099,1100,1101,1102,109,110,1103,1104,1105,1106,1107,1108,1109,1110,1111,1112,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1143,1144,1145,155,156,1146,1147,1148,157,158,159,1149,160,161,162,163,168,169,170,174,175,176,177,178,179,180,181,182,183,184,846,185,847,848,186,849,850,851,852,187,188,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,236,237,238,239,240,241,242,245,246,247,248,249,250,251,252,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,274,275,276,277,278,279,280,281,284,285,286,287,289,290,291,292,293,294,295,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,322,323,324,325,326,327,328,329,330,331,334,335,336,337,338,339,340,341,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,389,390,391,392,394,395,396,397,398,399,400,402,403,1150,1151,1152,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,1153,439,440,441,1154,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,493,494,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,1155,1156,1157,1158,759,760,761,766,767,768,769,770,771,772,773,777,778,779,780,781,782,783,784,785,786,787,788,789,925,926,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,869,870,871,872,873,874,875,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,797,798,799,801,804,805,806,807,809,811]},"ghes-3.17":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,13,14,22,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1079,823,824,825,826,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1159,1160,76,77,78,79,80,81,82,83,84,85,86,87,88,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,702,705,707,708,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,769,770,771,772,773,1177,1178,1179,780,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,1191,1192,1193,69,70,1159,1160,76,77,78,79,80,81,82,83,84,85,86,87,88,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,168,169,170,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,247,248,249,250,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,396,397,398,399,400,401,402,403,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,702,704,705,706,707,708,710,711,712,713,714,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,769,770,771,772,773,1177,1178,1179,774,775,776,780,782,783,784,785,786,787,788,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,13,14,22,24,815,823,824,825,826,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1159,1160,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.18":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,13,14,22,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1079,823,824,825,826,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,702,705,707,708,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,769,770,771,772,773,1177,1178,1179,780,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,1191,1192,1193,69,70,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,247,248,249,250,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,396,397,398,399,400,401,402,403,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,702,704,705,706,707,708,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,769,770,771,772,773,1177,1178,1179,774,775,776,780,782,783,784,785,786,787,788,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,13,14,22,24,815,823,824,825,826,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.19":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,10,11,12,13,14,20,21,22,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,1177,1178,1179,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,1191,1192,1193,69,70,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,247,248,249,250,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,1177,1178,1179,774,775,776,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,24,815,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.20":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,10,11,12,13,14,20,21,22,23,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,1177,1178,1179,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,69,70,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,247,248,249,250,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,1177,1178,1179,774,775,776,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.21":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,10,11,12,13,14,20,21,22,23,24,815,816,817,968,818,969,970,971,972,973,974,977,978,979,980,987,988,990,991,992,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1022,1023,1031,1032,1033,1034,1035,1036,819,820,821,1047,822,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,304,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,662,663,664,665,666,667,668,669,670,671,672,673,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,777,778,779,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.22":{"enterprise":[0,1,812,813,814,2,1194,962,7,963,964,965,966,10,11,12,13,14,20,21,22,23,24,815,816,817,968,818,969,970,971,972,973,974,977,978,979,980,987,988,990,991,992,993,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1022,1023,1031,1032,1033,1034,1035,1036,819,820,821,1047,822,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,304,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,662,663,664,665,666,667,668,669,670,671,672,673,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,777,778,779,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,1194,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,1194,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]}}
\ No newline at end of file
+{"fpt":{"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,65,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,154,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,222,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,709,710,711,712,713,714,715,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,814,815,816,818,823,824,825,826,828,830]},"ghec":{"enterprise":[0,1,2,3,4,5,6,975,7,976,977,978,979,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,834,835,836,980,837,981,838,982,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,839,840,1061,841,1062,842,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1096,1097,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,1109,1110,55,56,57,58,59,60,61,62,63,1111,66,1112,69,70,71,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,1113,1114,1115,1116,1117,110,111,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,1158,1159,1160,157,158,1161,1162,1163,159,160,161,1164,162,163,164,165,170,171,172,176,177,178,179,180,181,182,183,184,185,186,866,187,867,868,188,869,870,871,872,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,226,227,228,229,230,231,232,233,234,235,239,240,241,242,243,244,245,248,249,250,251,252,253,254,255,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,277,278,279,280,281,282,283,284,287,288,289,290,292,293,294,295,296,297,298,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,325,326,327,328,329,330,331,332,333,334,337,338,339,340,341,342,343,344,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,392,393,394,395,397,398,399,400,401,402,403,405,406,1165,1166,1167,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,1168,442,443,444,1169,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,496,497,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,1170,1171,1172,1173,776,777,778,783,784,785,786,787,788,789,790,794,795,796,797,798,799,800,801,802,803,804,805,806,938,939,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,65,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,154,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,222,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,709,710,711,712,713,714,715,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,814,815,816,818,823,824,825,826,828,830]},"ghes-3.17":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,13,14,22,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1094,843,844,845,846,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1174,1175,77,78,79,80,81,82,83,84,85,86,87,88,89,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,717,722,724,725,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,786,787,788,789,790,1192,1193,1194,797,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,1206,1207,1208,70,71,1174,1175,77,78,79,80,81,82,83,84,85,86,87,88,89,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,170,171,172,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,250,251,252,253,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,399,400,401,402,403,404,405,406,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,717,721,722,723,724,725,727,728,729,730,731,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,786,787,788,789,790,1192,1193,1194,791,792,793,797,799,800,801,802,803,804,805,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,13,14,22,24,834,843,844,845,846,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1174,1175,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.18":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,13,14,22,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1094,843,844,845,846,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,717,722,724,725,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,786,787,788,789,790,1192,1193,1194,797,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,1206,1207,1208,70,71,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,250,251,252,253,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,399,400,401,402,403,404,405,406,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,717,721,722,723,724,725,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,786,787,788,789,790,1192,1193,1194,791,792,793,797,799,800,801,802,803,804,805,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,13,14,22,24,834,843,844,845,846,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.19":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,10,11,12,13,14,20,21,22,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,1192,1193,1194,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,1206,1207,1208,70,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,250,251,252,253,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,1192,1193,1194,791,792,793,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,24,834,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.20":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,10,11,12,13,14,20,21,22,23,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,1192,1193,1194,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,70,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,250,251,252,253,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,1192,1193,1194,791,792,793,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.21":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,10,11,12,13,14,20,21,22,23,24,834,835,836,981,838,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1004,1005,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1036,1037,1045,1046,1047,1048,1049,1050,1051,839,840,841,1062,842,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,72,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,307,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,670,671,672,673,674,675,676,677,678,679,680,681,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,794,795,796,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,835,836,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.22":{"enterprise":[0,1,831,832,833,2,1209,975,7,976,977,978,979,10,11,12,13,14,20,21,22,23,24,834,835,836,981,838,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1004,1005,1006,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1036,1037,1045,1046,1047,1048,1049,1050,1051,839,840,841,1062,842,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,65,72,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,307,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,670,671,672,673,674,675,676,677,678,679,680,681,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,794,795,796,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,1209,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,1209,7,10,11,12,13,14,20,21,22,23,24,834,835,836,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,65,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]}}
\ No newline at end of file
diff --git a/src/audit-logs/lib/config.json b/src/audit-logs/lib/config.json
index fb0b59f76ac6..be51467822cd 100644
--- a/src/audit-logs/lib/config.json
+++ b/src/audit-logs/lib/config.json
@@ -9,5 +9,5 @@
"git": "Note: Git events have special access requirements and retention policies that differ from other audit log events. For GitHub Enterprise Cloud, access Git events via the REST API only with 7-day retention. For GitHub Enterprise Server, Git events must be enabled in audit log configuration and are not included in search results.",
"sso_redirect": "Note: Automatically redirecting users to sign in is currently in beta for Enterprise Managed Users and subject to change."
},
- "sha": "6908656e5a680467a6f235d8b17d8997f1f689ff"
+ "sha": "c4319c8d16922e13c5d09181a79f260f10475188"
}
\ No newline at end of file
diff --git a/src/audit-logs/lib/deduplicate.ts b/src/audit-logs/lib/deduplicate.ts
index 39411f47df76..f637fddb4a28 100644
--- a/src/audit-logs/lib/deduplicate.ts
+++ b/src/audit-logs/lib/deduplicate.ts
@@ -77,7 +77,6 @@ export async function writeDeduplicatedAuditLogData(
}
}
- // Write shared files
const sharedDir = path.join(AUDIT_LOG_DATA_DIR, 'shared')
if (!existsSync(sharedDir)) {
await mkdirp(sharedDir)
diff --git a/src/audit-logs/lib/index.ts b/src/audit-logs/lib/index.ts
index 4a5bcfcde5d4..4da4d9e11cd3 100644
--- a/src/audit-logs/lib/index.ts
+++ b/src/audit-logs/lib/index.ts
@@ -19,11 +19,10 @@ import config from './config.json'
export const AUDIT_LOG_DATA_DIR = 'src/audit-logs/data'
-// cache of audit log data
const auditLogEventsCache = new Map>()
const categorizedAuditLogEventsCache = new Map>()
-// Shared dedup data — loaded once, shared across all versions
+// Shared dedup data, loaded once and shared across all versions.
let sharedEntries: DeduplicatedAuditLogEntry[] | null = null
let sharedFieldsPool: string[][] | null = null
let sharedVersionIndex: AuditLogVersionIndex | null = null
@@ -58,10 +57,10 @@ function loadSharedFormat(): boolean {
sharedFormatAvailable = true
} catch (err) {
if (isFileNotFoundError(err)) {
- // Shared files don't exist — fall back to per-version files silently.
+ // Shared files don't exist, so fall back to per-version files silently.
sharedFormatAvailable = false
} else {
- // Corrupt JSON, schema mismatch, etc. — surface this instead of hiding it.
+ // Corrupt JSON, schema mismatch, and so on. Surface it instead of hiding it.
console.error('Failed to load shared audit log dedup format (corrupt data?):', err)
throw err
}
@@ -108,7 +107,6 @@ type PipelineConfig = {
appendedDescriptions: Record
}
-// get category notes from config
export function getCategoryNotes(): CategoryNotes {
const auditLogConfig = config as AuditLogConfig
return auditLogConfig.categoryNotes || {}
@@ -126,7 +124,6 @@ export type TitleResolutionContext = Context & {
// request (~90–150ms of repeated work). See docs-engineering#6650.
const referenceLinksMarkdownCache = new Map>()
-// Resolves docs_reference_links URLs to markdown links
export function resolveReferenceLinksToMarkdown(
docsReferenceLinks: string,
context: TitleResolutionContext,
@@ -147,7 +144,6 @@ async function computeReferenceLinksToMarkdown(
docsReferenceLinks: string,
context: TitleResolutionContext,
): Promise {
- // Handle multiple comma-separated or space-separated links
const links = docsReferenceLinks
.split(/[,\s]+/)
.map((link) => link.trim())
@@ -188,7 +184,6 @@ async function computeReferenceLinksToMarkdown(
return markdownLinks.join(', ')
}
-// Resolves docs_reference_links URLs to page titles
async function resolveReferenceLinksToTitles(
docsReferenceLinks: string,
context: TitleResolutionContext,
@@ -197,7 +192,6 @@ async function resolveReferenceLinksToTitles(
return ''
}
- // Handle multiple comma-separated or space-separated links
const links = docsReferenceLinks
.split(/[,\s]+/)
.map((link) => link.trim())
@@ -258,7 +252,6 @@ export function getAuditLogEvents(page: string, version: string): AuditLogEventT
auditLogEventsCache.set(openApiVersion, new Map())
}
if (!auditLogEventsCache.get(openApiVersion)?.has(page)) {
- // Try shared deduplicated format first
const events = reconstructEventsFromSharedFormat(openApiVersion, page)
if (events) {
auditLogEventsCache.get(openApiVersion)?.set(page, events)
@@ -307,7 +300,6 @@ export function getCategorizedAuditLogEvents(page: string, version: string): Cat
return categorizedAuditLogEventsCache.get(openApiVersion)?.get(page) || {}
}
-// Filters audit log events based on allowlist values.
export async function filterByAllowlistValues({
eventsToCheck,
allowListValues,
@@ -337,7 +329,6 @@ export async function filterByAllowlistValues({
if (seen.has(event.action)) continue
seen.add(event.action)
- // Merge global fields with event-specific fields
const mergedFields = event.fields
? [...new Set([...globalFields, ...event.fields])]
: globalFields.length > 0
@@ -351,7 +342,6 @@ export async function filterByAllowlistValues({
fields: mergedFields,
}
- // Resolve reference link titles if context is provided
if (titleContext && event.docs_reference_links && event.docs_reference_links !== 'N/A') {
try {
minimal.docs_reference_titles = await resolveReferenceLinksToTitles(
@@ -375,13 +365,6 @@ export async function filterByAllowlistValues({
// Filters audit log events based on allowlist values and processes an
// event's supported GHES versions.
//
-// * eventsToCheck: events to consider
-// * allowListvalue: allowlist value to filter by
-// * currentEvents: events already collected
-// * pipelineConfig: audit log pipeline config data
-// * auditLogPage: the audit log page the event belongs to
-// * titleContext: optional context for resolving reference link titles
-//
// Mutates `currentGhesEvents` and updates it with any new filtered for audit
// log events, the object maps GHES versions to page events for that version e.g.:
//
@@ -442,10 +425,8 @@ export async function filterAndUpdateGhesDataByAllowlistValues({
if (seenByGhesVersion.get(fullGhesVersion)?.has(event.action)) continue
if (ghesVersionAllowlists.includes(allowListValue)) {
- // Get event-specific fields (prefer GHES version fields, fall back to base fields)
const eventFields = event.ghes[ghesVersion].fields || event.fields
- // Merge global fields with event-specific fields
const mergedFields = eventFields
? [...new Set([...globalFields, ...eventFields])]
: globalFields.length > 0
@@ -459,7 +440,6 @@ export async function filterAndUpdateGhesDataByAllowlistValues({
fields: mergedFields,
}
- // Resolve reference link titles if context is provided
if (titleContext && event.docs_reference_links && event.docs_reference_links !== 'N/A') {
try {
minimal.docs_reference_titles = await resolveReferenceLinksToTitles(
@@ -501,7 +481,6 @@ export async function filterAndUpdateGhesDataByAllowlistValues({
}
}
-// Categorizes the given array of audit log events by event category
function categorizeEvents(events: AuditLogEventT[]) {
const categorizedEvents: CategorizedEvents = {}
for (const event of events) {
diff --git a/src/audit-logs/scripts/rebuild-dedup.ts b/src/audit-logs/scripts/rebuild-dedup.ts
index e369478ac057..32daff1c6ef4 100644
--- a/src/audit-logs/scripts/rebuild-dedup.ts
+++ b/src/audit-logs/scripts/rebuild-dedup.ts
@@ -1,16 +1,14 @@
-/**
- * Rebuilds the deduplicated "shared" audit log format
- * (src/audit-logs/data/shared/entries.json, fields-pool.json, and
- * version-index.json) from the per-version page files already on disk.
- *
- * Unlike `sync-audit-log`, this does NOT fetch from github/audit-log-allowlists
- * and needs no GITHUB_TOKEN. Use it to regenerate the shared files when the
- * per-version JSON files have changed but the shared files are stale (for
- * example, an older audit-log-pipeline PR that predates the dedup format), which
- * makes the `deduplication` test fail.
- *
- * npm run rebuild-audit-log-dedup
- */
+// Rebuilds the deduplicated "shared" audit log format from the per-version page
+// files already on disk: src/audit-logs/data/shared/entries.json and
+// fields-pool.json, plus src/audit-logs/data/version-index.json.
+//
+// Unlike `sync-audit-log`, this does NOT fetch from github/audit-log-allowlists
+// and needs no GITHUB_TOKEN. Use it to regenerate the shared files when the
+// per-version JSON files have changed but the shared files are stale, for
+// example on an older audit-log-pipeline PR that predates the dedup format.
+// That is what makes the `deduplication` test fail.
+//
+// npm run rebuild-audit-log-dedup
import { existsSync, readdirSync, readFileSync, statSync } from 'fs'
import path from 'path'
diff --git a/src/audit-logs/scripts/sync.ts b/src/audit-logs/scripts/sync.ts
index e46b83565ee6..1718d90416a4 100755
--- a/src/audit-logs/scripts/sync.ts
+++ b/src/audit-logs/scripts/sync.ts
@@ -1,12 +1,7 @@
-/**
- * Required env variables:
- *
- * GITHUB_TOKEN
- *
- * Gets latest audit log event data, extracts the data we need for rendering on
- * the 3 different audit log pages, and writes out the data to files versioned
- * per page.
- */
+// Gets the latest audit log event data, extracts what we need for the 3 audit
+// log pages, and writes it out to files versioned per page.
+//
+// Requires GITHUB_TOKEN.
import { existsSync } from 'fs'
import { readFile, writeFile } from 'fs/promises'
import { mkdirp } from 'mkdirp'
@@ -72,7 +67,6 @@ async function main() {
pipelineConfig.sha = mainSha
await writeFile(configFilepath, JSON.stringify(pipelineConfig, null, 2))
- // Load pages and redirects for title resolution
console.log('Loading pages and redirects for title resolution...')
const pageList = await loadPages(undefined, ['en'])
const pages = await loadPageMap(pageList)
diff --git a/src/automated-pipelines/lib/update-markdown.ts b/src/automated-pipelines/lib/update-markdown.ts
index 49addfc6ee14..964e0c78bce2 100644
--- a/src/automated-pipelines/lib/update-markdown.ts
+++ b/src/automated-pipelines/lib/update-markdown.ts
@@ -14,7 +14,6 @@ import type { MarkdownFrontmatter } from '@/types'
const logger = createLogger(import.meta.url)
-// Type definitions - extending existing type to add missing fields and make most fields optional
type FrontmatterData = Partial & {
autogenerated?: string
[key: string]: unknown
@@ -67,8 +66,9 @@ type ChildrenComparison = {
const ROOT_INDEX_FILE = 'content/index.md'
export const MARKDOWN_COMMENT = '\n\n'
-// Main entrypoint into this module. This function adds, removes, and updates
-// versions frontmatter in all directories under the targetDirectory.
+// Main entrypoint into this module.
+// Walks every directory under targetDirectory, adding and removing Markdown
+// files and keeping the index.md children and versions frontmatter in sync.
export async function updateContentDirectory({
targetDirectory,
sourceContent,
@@ -87,7 +87,6 @@ async function removeMarkdownFiles(
sourceFiles: string[],
autogeneratedType: string | undefined,
): Promise {
- // Copy the autogenerated Markdown files to the target directory
const autogeneratedFiles = await getAutogeneratedFiles(targetDirectory, autogeneratedType)
// If the first array contains items that the second array does not,
// it means that a Markdown page was deleted from the OpenAPI schema
@@ -98,7 +97,6 @@ async function removeMarkdownFiles(
count: filesToRemove.length,
})
}
- // Markdown files that need to be deleted
for (const file of filesToRemove) {
unlinkSync(file)
}
@@ -140,19 +138,15 @@ async function updateMarkdownFiles(
for (const [file, newContent] of Object.entries(sourceContent)) {
await updateMarkdownFile(file, newContent.data, newContent.content)
}
- // This function recursively updates the index.md files in each
- // of the directories under targetDirectory
await updateDirectory(targetDirectory, frontmatter, { indexOrder })
- // We don't want to update directories that the pipelines don't affect
- // so we make one call to update only the root index.md file
- // in targetDirectory to prevent any unintended changes
+ // The pipelines should not touch directories they do not own, so this
+ // call updates only the index.md file in the parent directory.
await updateDirectory(path.dirname(targetDirectory), frontmatter, { rootDirectoryOnly: true })
}
-// If the Markdown file already exists on disk, we only update the
-// content and version frontmatter to allow writers to manually
-// edit the modifiable content of the file. If the Markdown file doesn't
-// exists, we create a new Markdown file.
+// If the Markdown file already exists on disk, we update only the content
+// and the versions frontmatter, so writers can hand-edit the other fields.
+// If it does not exist, we create it.
async function updateMarkdownFile(
file: string,
sourceData: FrontmatterData,
@@ -160,8 +154,6 @@ async function updateMarkdownFile(
commentDelimiter: string = MARKDOWN_COMMENT,
): Promise {
if (existsSync(file)) {
- // update only the versions property of the file, assuming
- // the other properties have already been added and edited
const { data, content } = matter(await readFile(file, 'utf-8'))
// Double check that the comment delimiter is only used once
@@ -179,7 +171,6 @@ async function updateMarkdownFile(
const isDelimiterMissing = !matches
const isContentSame = automatedContent === sourceContent
const isVersionsSame = isEqual(sourceData.versions, data.versions)
- // Only proceed if the content or versions have changed
if (isContentSame && isVersionsSame && !isDelimiterMissing) {
logger.debug('Markdown file unchanged, skipping', { file })
return
@@ -219,14 +210,12 @@ async function updateDirectory(
{ rootDirectoryOnly = false, shortTitle = false, indexOrder = {} }: UpdateDirectoryOptions = {},
): Promise {
const initialDirectoryListing = await getDirectoryInfo(directory)
- // If there are no children on disk, remove the directory
if (initialDirectoryListing.directoryContents.length === 0 && !rootDirectoryOnly) {
logger.info('Removing empty directory', { directory })
await rimraf(directory)
return
}
- // Recursively update child directories
if (!rootDirectoryOnly) {
await Promise.all(
initialDirectoryListing.childDirectories.map(async (subDirectory) => {
@@ -256,7 +245,6 @@ async function updateDirectory(
}
if (!rootDirectoryOnly) {
- // Update the versions in the index.md file to match the directory contents
directoryFiles.push(...childDirectories.map((dir) => path.join(dir, 'index.md')))
const newVersions = await getIndexFileVersions(directory, directoryFiles)
const isVersionEqual = isEqual(newVersions, data.versions)
@@ -265,7 +253,6 @@ async function updateDirectory(
}
}
- // Update the index.md file contents and write the file to disk
const dataUpdatedChildren = updateIndexChildren(
data,
{ itemsToAdd, itemsToRemove },
@@ -295,7 +282,6 @@ function getChildrenToCompare(
const isEarlyAccess = (item: string) => isRootIndexFile(indexFile) && item === 'early-access'
- // Get the list of children from the directory contents
const childrenOnDisk = directoryContents
.map((file) => `${path.basename(file, '.md')}`)
.filter((item) => !isEarlyAccess(item))
@@ -317,7 +303,7 @@ function getChildrenToCompare(
// the order of the first items in the index files children
// property. All other items are sorted and appended to list.
//
-// 2. If not config is defined and the index file is an
+// 2. If no config is defined and the index file is an
// autogenerated file, we sort all the children alphabetically.
//
// 3. If the index file is not autogenerated, we leave the ordering
@@ -332,7 +318,6 @@ function updateIndexChildren(
const { itemsToAdd, itemsToRemove } = childUpdates
const childPrefix = rootIndex ? '' : '/'
- // Get a new list of children with added and removed items
const children = [...(data.children || [])]
// remove the '/' prefix used in index.md children
.map((item) => item.replace(childPrefix, ''))
@@ -373,8 +358,8 @@ function updateIndexChildren(
return updatedData
}
-// Gets the contents of the index.md file from disk if it exits or
-// creates a new index.md file with the default frontmatter.
+// Gets the contents of the index.md file from disk if it exists,
+// or returns default frontmatter for a new one.
async function getIndexFileContents(
indexFile: string,
frontmatter: FrontmatterData,
@@ -413,7 +398,6 @@ async function getIndexFileVersions(
`File ${filepath} does not exist while assembling directory index.md files to create parent version.`,
)
}
- // If not a markdown(x) file, skip it
if (!file.endsWith('.md') && !file.endsWith('.mdx')) {
return
}
@@ -536,12 +520,10 @@ function checkVersionContinuity(versions: (string | undefined)[]): boolean {
return availableVersions.every(Boolean)
}
-// Returns true if the indexFile is the root index.md file
function isRootIndexFile(indexFile: string): boolean {
return indexFile === ROOT_INDEX_FILE
}
-// Creates a new directory if it doesn't exist
async function createDirectory(targetDirectory: string): Promise {
if (!existsSync(targetDirectory)) {
await mkdirp(targetDirectory)
diff --git a/src/automated-pipelines/tests/rendering.ts b/src/automated-pipelines/tests/rendering.ts
index e4a1d2cb6e10..f8dfc17ca55f 100644
--- a/src/automated-pipelines/tests/rendering.ts
+++ b/src/automated-pipelines/tests/rendering.ts
@@ -6,7 +6,6 @@ import { describe, expect, test, vi } from 'vitest'
import { loadPages } from '@/frame/lib/page-data'
import { get } from '@/tests/helpers/e2etest'
-// Type definitions for page objects
type Page = {
autogenerated?: string
fullPath: string
@@ -17,7 +16,6 @@ type Page = {
}
}
-// Get a list of the autogenerated pages
const pageList: Page[] = await loadPages(undefined, ['en'])
describe('autogenerated docs render', () => {
diff --git a/src/automated-pipelines/tests/update-markdown.ts b/src/automated-pipelines/tests/update-markdown.ts
index 210ffb9dc447..3b2290b86864 100644
--- a/src/automated-pipelines/tests/update-markdown.ts
+++ b/src/automated-pipelines/tests/update-markdown.ts
@@ -10,7 +10,6 @@ import type { FrontmatterVersions } from '@/types'
import { updateContentDirectory } from '../lib/update-markdown'
-// Type definitions
type ContentItem = {
data: {
title: string
@@ -92,8 +91,6 @@ describe('automated content directory updates', () => {
contentDataFullPath[path.join(targetDirectory, key)] = newContentData[key]
}
- // Rewrites the content directory in the operating system's
- // temp directory.
await updateContentDirectory({
targetDirectory,
sourceContent: contentDataFullPath,
diff --git a/src/codeql-cli/lib/config.json b/src/codeql-cli/lib/config.json
index d62f6633ffe9..83e472c60561 100644
--- a/src/codeql-cli/lib/config.json
+++ b/src/codeql-cli/lib/config.json
@@ -5,12 +5,10 @@
"ghec": "*",
"ghes": "*"
},
- "topics": [
- "Code Security",
- "Code scanning",
- "CodeQL"
+ "contentType": "reference",
+ "category": [
+ "Find CodeQL CLI commands"
],
- "type": "reference",
"product": "{% data reusables.gated-features.codeql %}",
"autogenerated": "codeql-cli"
},
diff --git a/src/codeql-cli/scripts/convert-markdown-for-docs.ts b/src/codeql-cli/scripts/convert-markdown-for-docs.ts
index 006853624346..8c7045f91207 100644
--- a/src/codeql-cli/scripts/convert-markdown-for-docs.ts
+++ b/src/codeql-cli/scripts/convert-markdown-for-docs.ts
@@ -316,14 +316,11 @@ async function getRedirect(url: string): Promise {
// Some of the aka.ms links have the /en language prefix.
// This removes all language prefixes from the redirect url.
- const redirectNoLang = languageKeys.reduce((acc, lang) => {
- return acc.replace(`/${lang}`, ``)
- }, redirect)
-
- if (!redirectNoLang) {
- const errorMsg = `The aka.ms redirected to an unexpected url: ${url}`
- throw new Error(errorMsg)
+ const parts = redirect.split('/')
+ if (parts.length > 1 && languageKeys.includes(parts[1])) {
+ // delete language prefix (e.g., /en, /ja, etc.)
+ parts.splice(1, 1)
}
- return redirectNoLang
+ return parts.join('/')
}
diff --git a/src/codeql-cli/tests/convert-markdown-for-docs.ts b/src/codeql-cli/tests/convert-markdown-for-docs.ts
index 438bcd501701..3b3f76616d48 100644
--- a/src/codeql-cli/tests/convert-markdown-for-docs.ts
+++ b/src/codeql-cli/tests/convert-markdown-for-docs.ts
@@ -1,7 +1,28 @@
-import { describe, expect, test } from 'vitest'
+import { afterAll, beforeAll, describe, expect, test, vi } from 'vitest'
import { convertContentToDocs } from '../scripts/convert-markdown-for-docs'
+import config from '@/codeql-cli/lib/config.json'
+
+const RELATIVE_LINK_PATH = config.targetDirectory.replace('content', '')
describe('convertContentToDocs circular link handling', () => {
+ const fetchMock = vi.spyOn(globalThis, 'fetch')
+
+ beforeAll(() => {
+ fetchMock.mockResolvedValue(
+ new Response(null, {
+ status: 302,
+ headers: {
+ location:
+ 'https://docs.github.com/enterprise-server@latest/code-security/reference/code-scanning/sarif-files/sarif-support',
+ },
+ }),
+ )
+ })
+
+ afterAll(() => {
+ vi.restoreAllMocks()
+ })
+
const testContent = `
# bqrs interpret
@@ -18,7 +39,8 @@ metadata and generates output in the specified format.
This option has no effect when passed to \`codeql bqrs interpret\`{.interpreted-text role="doc"}.
-For more information, see \`codeql database analyze\`{.interpreted-text role="doc"}.
+For more information, see \`codeql database analyze\`{.interpreted-text role="doc"} and
+ for details about uploading SARIF files.
`
test('converts circular links to plain text', async () => {
@@ -26,7 +48,7 @@ For more information, see \`codeql database analyze\`{.interpr
// Should not contain circular link
expect(result.content).not.toContain(
- '[codeql bqrs interpret](/code-security/codeql-cli/codeql-cli-manual/bqrs-interpret)',
+ `[codeql bqrs interpret](${RELATIVE_LINK_PATH}/bqrs-interpret)`,
)
// Should contain plain text instead
@@ -38,7 +60,38 @@ For more information, see \`codeql database analyze\`{.interpr
// Should preserve valid cross-reference link
expect(result.content).toContain(
- '[codeql database analyze](/code-security/codeql-cli/codeql-cli-manual/database-analyze)',
+ `[codeql database analyze](${RELATIVE_LINK_PATH}/database-analyze)`,
+ )
+ })
+
+ test('converts aka.ms links', async () => {
+ const result = await convertContentToDocs(testContent, {}, 'bqrs-interpret.md')
+
+ // Should convert aka.ms link to redirect
+ expect(result.content).toContain(
+ '[AUTOTITLE](/enterprise-server@latest/code-security/reference/code-scanning/sarif-files/sarif-support)',
+ )
+
+ // Should not still contain aka.ms link
+ expect(result.content).not.toContain('https://aka.ms/')
+ })
+
+ test('strips language prefix from aka.ms redirect links', async () => {
+ fetchMock.mockResolvedValue(
+ new Response(null, {
+ status: 302,
+ headers: {
+ location:
+ 'https://docs.github.com/en/enterprise-server@latest/code-security/reference/code-scanning/sarif-files/sarif-support',
+ },
+ }),
+ )
+
+ const result = await convertContentToDocs(testContent, {}, 'bqrs-interpret.md')
+
+ // Should strip language prefix from aka.ms redirect link
+ expect(result.content).toContain(
+ '[AUTOTITLE](/enterprise-server@latest/code-security/reference/code-scanning/sarif-files/sarif-support)',
)
})
@@ -47,7 +100,7 @@ For more information, see \`codeql database analyze\`{.interpr
// Should preserve link when no filename is provided
expect(result.content).toContain(
- '[codeql bqrs interpret](/code-security/codeql-cli/codeql-cli-manual/bqrs-interpret)',
+ `[codeql bqrs interpret](${RELATIVE_LINK_PATH}/bqrs-interpret)`,
)
})
@@ -56,7 +109,7 @@ For more information, see \`codeql database analyze\`{.interpr
// Should preserve link when filename is different
expect(result.content).toContain(
- '[codeql bqrs interpret](/code-security/codeql-cli/codeql-cli-manual/bqrs-interpret)',
+ `[codeql bqrs interpret](${RELATIVE_LINK_PATH}/bqrs-interpret)`,
)
})
@@ -65,12 +118,12 @@ For more information, see \`codeql database analyze\`{.interpr
// Circular link should be plain text
expect(result.content).not.toContain(
- '[codeql bqrs interpret](/code-security/codeql-cli/codeql-cli-manual/bqrs-interpret)',
+ `[codeql bqrs interpret](${RELATIVE_LINK_PATH}/bqrs-interpret)`,
)
// Non-circular link should be preserved
expect(result.content).toContain(
- '[codeql database analyze](/code-security/codeql-cli/codeql-cli-manual/database-analyze)',
+ `[codeql database analyze](${RELATIVE_LINK_PATH}/database-analyze)`,
)
// Both should have their text content present
diff --git a/src/content-linter/scripts/disable-rules.ts b/src/content-linter/scripts/disable-rules.ts
index a6210829e740..9d07356915ce 100755
--- a/src/content-linter/scripts/disable-rules.ts
+++ b/src/content-linter/scripts/disable-rules.ts
@@ -1,6 +1,6 @@
// Disables markdownlint rules in markdown files with same-line comments. This is
// useful when introducing a new rule that causes many failures. The comments
-// can be fixed and removed at while updating the file later.
+// can be fixed and removed while updating the file later.
//
// Usage:
//
diff --git a/src/content-linter/scripts/generate-docs.ts b/src/content-linter/scripts/generate-docs.ts
index be11c3378252..c70ced85f2ba 100644
--- a/src/content-linter/scripts/generate-docs.ts
+++ b/src/content-linter/scripts/generate-docs.ts
@@ -14,7 +14,6 @@ function main() {
markdown.push('| Rule ID | Rule Name(s) | Description | Severity | Tags |')
markdown.push('| ------- | ------------ | ----------- | -------- | ---- |')
- // Collect all rules and their generated rows
const mdRules: Array<{ ruleId: string; row: string }> = []
const ghRules: Array<{ ruleId: string; row: string }> = []
const ghdRules: Array<{ ruleId: string; row: string }> = []
@@ -35,7 +34,6 @@ function main() {
row.push(allConfig[ruleName].severity)
row.push(rule.tags.join(', '))
- // Categorize rules by their ID prefix
const ruleData = { ruleId: rule.names[0], row: `| ${row.join(' | ')} |` }
if (rule.names[0].startsWith('GHD')) {
ghdRules.push(ruleData)
@@ -46,7 +44,6 @@ function main() {
}
}
- // Sort each category alphabetically by rule ID
mdRules.sort((a, b) => a.ruleId.localeCompare(b.ruleId))
ghRules.sort((a, b) => a.ruleId.localeCompare(b.ruleId))
ghdRules.sort((a, b) => a.ruleId.localeCompare(b.ruleId))
@@ -66,13 +63,12 @@ function main() {
writeFileSync('data/reusables/contributing/content-linter-rules.md', markdown.join('\n'))
}
-// The search-replace rule configures multiple psuedo-rules
+// The search-replace rule configures multiple pseudo-rules
// under the rules key.
function getSearchReplaceRules(srRule: Rule, ruleConfig: Config) {
const name = srRule.information ? `[search-replace](${srRule.information})` : 'search-replace'
const markdown = []
- // Sort rules alphabetically by name
const sortedRules = [...(ruleConfig.rules || [])].sort((a, b) => a.name.localeCompare(b.name))
for (const rule of sortedRules) {
diff --git a/src/content-linter/scripts/lint-content.ts b/src/content-linter/scripts/lint-content.ts
index 416c33b37b78..b58caf6b09bb 100755
--- a/src/content-linter/scripts/lint-content.ts
+++ b/src/content-linter/scripts/lint-content.ts
@@ -26,7 +26,6 @@ import type {
} from 'markdownlint'
import type { Rule, Config } from '@/content-linter/types'
-// Type definitions for Markdownlint results
interface LintError {
lineNumber: number
ruleNames: string[]
@@ -88,11 +87,8 @@ interface FormattedResult {
type FormattedResults = Record
-/**
- * Config that applies to all rules in all environments (CI, reports, precommit).
- */
+// Config that applies to all rules in all environments (CI, reports, precommit).
export const globalConfig = {
- // Do not ever lint these filepaths
excludePaths: ['content/contributing/', 'data/llms-txt/'],
}
@@ -150,7 +146,8 @@ async function main() {
// Get the updated paths after validation (invalid paths will have been filtered out)
const validatedPaths = program.opts().paths
- // If paths has not been specified, lint all files
+ // With no paths and no --summary-by-rule, fall back to the files changed
+ // in the local git checkout.
const files = getFilesToLint(
(summaryByRule && ALL_CONTENT_DIR) || validatedPaths || getChangedFiles(),
)
@@ -169,7 +166,6 @@ async function main() {
spinner.start()
const start = Date.now()
- // Initializes the config to pass to markdownlint based on the input options
const { config, configuredRules } = getMarkdownLintConfig(errorsOnly, rules)
// Run Markdownlint for content directory
@@ -395,9 +391,8 @@ function getFilesToLint(inputPaths: string[]): FileList {
const root = path.resolve(languages.en.dir)
const contentDir = path.join(root, 'content')
const dataDir = path.join(root, 'data')
- // The path passed to Markdownlint is what is displayed
- // in the error report, so we want to normalize it and
- // and make it relative if it's absolute.
+ // The path passed to Markdownlint is what is displayed in the error report,
+ // so normalize it and make it relative if it's absolute.
for (const rawPath of inputPaths) {
const absPath = path.resolve(rawPath)
if (fs.statSync(rawPath).isDirectory()) {
@@ -418,7 +413,7 @@ function getFilesToLint(inputPaths: string[]): FileList {
}
}
// If it's a file but it's not part of the content or the data
- // directory, it's probably file passed in by computing changed files
+ // directory, it's probably a file passed in by computing changed files
// from the git diff.
}
}
@@ -436,7 +431,6 @@ function getFilesToLint(inputPaths: string[]): FileList {
const relPath = path.relative(root, filePath)
- // Skip files that match any of the excluded paths
if (globalConfig.excludePaths.some((excludePath) => relPath.startsWith(excludePath))) {
continue
}
@@ -452,7 +446,6 @@ function getFilesToLint(inputPaths: string[]): FileList {
fileList.data = cleanPaths(fileList.data)
fileList.yml = cleanPaths(fileList.yml)
- // Add a total fileList length property
fileList.length = fileList.content.length + fileList.data.length + fileList.yml.length
return fileList
@@ -504,11 +497,9 @@ function reportSummaryByRule(results: LintResults, config: LintConfig): void {
}
}
-/*
- Filter out the files with one or more results and format each
- result. Results are sorted by severity per file, with errors
- listed first then warnings.
-*/
+// Filter out the files with one or more results and format each result.
+// Results are sorted by severity per file, with errors listed first then
+// warnings.
function getFormattedResults(
allResults: LintResults,
isInPrecommitMode: boolean,
@@ -527,7 +518,6 @@ function getFormattedResults(
.map((flaw: LintError) => formatResult(flaw, isInPrecommitMode))
.filter((result): result is FormattedResult => result !== null)
- // Only add the file to output if there are results after filtering
if (formattedResults.length > 0) {
const errors = formattedResults.filter((result) => result.severity === 'error')
const warnings = formattedResults.filter((result) => result.severity === 'warning')
@@ -539,17 +529,10 @@ function getFormattedResults(
return output
}
-// Results are formatted with the key being the filepath
-// and the value being an array of errors for that filepath.
-// Each result has a rule name, which when looked up in `allConfig`
-// will give us its severity and we filter those that are 'warning'.
function getWarningCountByFile(results: FormattedResults, fixed = false): number {
return getCountBySeverity(results, 'warning', fixed)
}
-// Results are formatted with the key being the filepath
-// and the value being an array of results for that filepath.
-// Each result in the array has a severity of error or warning.
function getErrorCountByFile(results: FormattedResults, fixed = false): number {
return getCountBySeverity(results, 'error', fixed)
}
@@ -574,7 +557,6 @@ function getCountBySeverity(
function formatResult(object: LintError, isInPrecommitMode: boolean): FormattedResult | null {
const formattedResult: FormattedResult = {} as FormattedResult
- // Add severity to each result object
const ruleName = object.ruleNames[1] || object.ruleNames[0]
const ruleConfig = allConfig[ruleName] as Config | undefined
// Skip rules that aren't in our config. This can happen when using
@@ -632,13 +614,9 @@ function listRules() {
return ruleList
}
-/*
- Based on input options, configure the Markdownlint rules to run
- There are a subset of rules that can't be run on data files, since
- those Markdown files are partials included in full Markdown files.
- Rules that can't be run on partials have the property
- `partial-markdown-files` set to false.
-*/
+// Some rules can't be run on data files, since those Markdown files are
+// partials included in full Markdown files. Those rules have the property
+// `partial-markdown-files` set to false.
function getMarkdownLintConfig(
filterErrorsOnly: boolean,
runRules: string[] | undefined,
@@ -670,7 +648,6 @@ function getMarkdownLintConfig(
continue
}
- // Check if the rule should be included based on user-specified rules
if (runRules && !shouldIncludeRule(ruleName, runRules)) continue
// There are a subset of rules run on just the frontmatter in files
@@ -678,9 +655,6 @@ function getMarkdownLintConfig(
config.frontMatter[ruleName] = ruleConfig
if (customRule) configuredRules.frontMatter.push(customRule)
}
- // Handle the special case of the search-replace rule
- // which has nested rules each with their own
- // severity and metadata.
if (ruleName === 'search-replace') {
const searchReplaceRules: NonNullable = []
const dataSearchReplaceRules: NonNullable = []
@@ -691,14 +665,12 @@ function getMarkdownLintConfig(
for (const searchRule of ruleConfig.rules) {
const searchRuleSeverity = getSeverity(searchRule, isPrecommit)
if (filterErrorsOnly && searchRuleSeverity !== 'error') continue
- // Add search-replace rules to frontmatter configuration for rules that make sense in frontmatter
- // This ensures rules like TODOCS detection work in frontmatter
- // Rules with applyToFrontmatter should ONLY run in the frontmatter pass (which lints the entire file)
- // to avoid duplicate detections
+ // The frontmatter pass lints the whole file, so a rule with
+ // applyToFrontmatter must run there and nowhere else, or every match
+ // gets reported twice.
if (searchRule.applyToFrontmatter) {
frontmatterSearchReplaceRules.push(searchRule)
} else {
- // Only add to content rules if not a frontmatter-specific rule
searchReplaceRules.push(searchRule)
}
if (searchRule['partial-markdown-files']) {
@@ -765,7 +737,6 @@ function getCustomRule(ruleName: string): Rule | MarkdownlintRule {
// Check if a rule should be included based on user-specified rules
// Handles both short names (e.g., GHD047, MD001) and long names (e.g., table-column-integrity, heading-increment)
export function shouldIncludeRule(ruleName: string, runRules: string[]) {
- // First check if the rule name itself is in the list
if (runRules.includes(ruleName)) {
return true
}
@@ -789,7 +760,7 @@ export function shouldIncludeRule(ruleName: string, runRules: string[]) {
The severity of the search-replace custom rule is embedded in
each individual search rule. This function returns the severity
of the individual search rule. The name we define for each search
- rule shows up the the errorDetail property of the error object.
+ rule shows up in the errorDetail property of the error object.
The error object returned from Markdownlint has the following structure:
{
@@ -830,11 +801,10 @@ function isOptionsValid() {
} else {
console.warn(`warning: the value '${filePath}' was not found. Skipping this path.`)
}
- // Continue processing - don't return false here
+ // Keep going: one bad path should not abandon the rest.
}
}
- // Update the program options to only include valid paths
if (optionPaths.length > 0) {
program.setOptionValue('paths', validPaths)
}
diff --git a/src/content-linter/scripts/lint-report.ts b/src/content-linter/scripts/lint-report.ts
index 7e39cc15fd9c..f77bde4d3df0 100644
--- a/src/content-linter/scripts/lint-report.ts
+++ b/src/content-linter/scripts/lint-report.ts
@@ -13,11 +13,8 @@ const MAX_ISSUE_BODY_SIZE = 60000
// If the number of warnings exceeds this number, print a warning so we can give them attention
const MAX_WARNINGS_BEFORE_ALERT = 20
-/**
- * Config that only applies to automated weekly reports.
- */
+// Config that only applies to automated weekly reports.
export const reportingConfig = {
- // Include only rules with these severities in reports
includeSeverities: ['error', 'warning'],
// Include these rules regardless of severity in reports
includeRules: ['expired-content'],
@@ -29,13 +26,9 @@ interface LintFlaw {
errorDetail?: string
}
-/**
- * Determines if a lint result should be included in the automated report
- */
function shouldIncludeInReport(flaw: LintFlaw): boolean {
const allRuleNames = getAllRuleNames(flaw)
- // Check if severity should be included
if (reportingConfig.includeSeverities.includes(flaw.severity)) {
return true
}
@@ -95,12 +88,10 @@ async function main() {
// Keep track of warnings so we can print an alert when they exceed a manageable number
let totalWarnings = 0
- // Filter results based on reporting configuration
const filteredResults: Record = {}
for (const [file, flaws] of Object.entries(parsedResults)) {
const filteredFlaws = (flaws as LintFlaw[]).filter((flaw) => shouldIncludeInReport(flaw))
- // Only include files that have remaining flaws after filtering
if (filteredFlaws.length > 0) {
totalWarnings += filteredFlaws.filter((flaw) => flaw.severity === 'warning').length
filteredResults[file] = filteredFlaws
@@ -119,7 +110,6 @@ async function main() {
for (const [file, flaws] of Object.entries(filteredResults)) {
const fileEntry = `File: \`${file}\`:\n\`\`\`json\n${JSON.stringify(flaws, null, 2)}\n\`\`\`\n`
- // Check if adding this file would exceed the size limit
if (reportBody.length + fileEntry.length > MAX_ISSUE_BODY_SIZE) {
truncated = true
break
@@ -129,7 +119,6 @@ async function main() {
filesIncluded++
}
- // Add truncation notice if needed
if (truncated) {
const remaining = totalFiles - filesIncluded
reportBody += `\n---\n\n⚠️ **Output truncated**: Showing ${filesIncluded} of ${totalFiles} files with lint issues. ${remaining} additional files have been omitted to stay within GitHub's issue size limits.\n`
diff --git a/src/content-linter/scripts/pretty-print-results.ts b/src/content-linter/scripts/pretty-print-results.ts
index bd758d0d949f..1bc20181b91f 100644
--- a/src/content-linter/scripts/pretty-print-results.ts
+++ b/src/content-linter/scripts/pretty-print-results.ts
@@ -37,9 +37,9 @@ export function prettyPrintResults(
for (const [file, flaws] of Object.entries(results)) {
console.log(chalk.bold(file))
- console.log('') // blank line
+ console.log('')
- // It's very possible that a the same file has multiple flaws of the
+ // It's very possible that the same file has multiple flaws of the
// same rule but on different line numbers.
const sorted = [...flaws]
.sort((a, b) => a.lineNumber - b.lineNumber)
diff --git a/src/content-linter/tests/category-pages.ts b/src/content-linter/tests/category-pages.ts
index 2c31c6ef04ca..e12311db0328 100644
--- a/src/content-linter/tests/category-pages.ts
+++ b/src/content-linter/tests/category-pages.ts
@@ -66,13 +66,12 @@ describe.skip('category pages', () => {
// Only include category directories, not standalone category files like content/actions/quickstart.md
.filter((link) => fs.existsSync(getPath(productDir, link, 'index')))
- // Map those to the Markdown file paths that represent that category page index
const categoryPaths = categoryLinks.map((link) => getPath(productDir, link, 'index'))
// Make them relative for nicer display in test names
const categoryRelativePaths = categoryPaths.map((p) => path.relative(contentDir, p))
- // Combine those to fit vitests's `.each` usage
+ // Combine those to fit vitest's `.each` usage
const categoryTuples = zip(categoryRelativePaths, categoryPaths, categoryLinks) as [
string,
string,
@@ -121,7 +120,6 @@ describe.skip('category pages', () => {
await contextualize(req as ExtendedRequest, res as Response, next)
await shortVersions(req as ExtendedRequest, res as Response, next)
- // Read the product index data for rendering
const productIndexContents = await fs.promises.readFile(productIndex, 'utf8')
const productIndexData = getFrontmatterData(productIndexContents)
@@ -145,7 +143,7 @@ describe.skip('category pages', () => {
const articleContents = await fs.promises.readFile(articlePath, 'utf8')
const articleData = getFrontmatterData(articleContents)
- // Do not include subcategories in list of published articles
+ // Do not include subcategories nor hidden pages in list of published articles
if (articleData.subcategory || articleData.hidden) return null
// ".../content/github/{category}/{article}.md" => "/{article}"
@@ -154,7 +152,6 @@ describe.skip('category pages', () => {
)
).filter(Boolean) as string[]
- // Get all of the child articles that exist in the subdir
const childEntries = await fs.promises.readdir(categoryDir, { withFileTypes: true })
const childFileEntries = childEntries.filter(
(ent) => ent.isFile() && ent.name !== 'index.md',
@@ -212,7 +209,6 @@ describe.skip('category pages', () => {
test('slugified title matches parent directory name', () => {
if (allowTitleToDifferFromFilename) return
- // Get the parent directory name
const categoryDirPath = path.dirname(indexAbsPath)
const categoryDirName = path.basename(categoryDirPath)
@@ -230,7 +226,6 @@ describe.skip('category pages', () => {
const expectedSlug = expectedSlugs.at(-1) as string
const newCategoryDirPath = path.join(path.dirname(categoryDirPath), expectedSlug)
customMessage += `\nTo resolve this consider running:\n ./src/content-render/scripts/move-content.ts ${categoryDirPath} ${newCategoryDirPath}\n`
- // Check if the directory name matches the expected slug
expect(expectedSlugs.includes(categoryDirName), customMessage).toBeTruthy()
})
},
diff --git a/src/content-linter/tests/integration/lint-cli.ts b/src/content-linter/tests/integration/lint-cli.ts
index c089f08df799..bbc7a701c9c5 100644
--- a/src/content-linter/tests/integration/lint-cli.ts
+++ b/src/content-linter/tests/integration/lint-cli.ts
@@ -1,24 +1,9 @@
-/**
- * Integration tests for the content linter CLI script.
- *
- * These tests verify the actual end-to-end behavior of the lint-content script
- * by running it via npm commands and checking the output. Unlike unit tests that
- * test individual functions in isolation, these tests catch issues in the full
- * CLI workflow including:
- *
- * - Command-line argument parsing
- * - File discovery and processing logic
- * - Rule configuration and filtering
- * - Error reporting and exit codes
- *
- * Test file structure:
- * - Test files are created in content/test-integration/ during tests
- * - This ensures the linter actually processes them (it only processes files in content/ or data/)
- * - Files are cleaned up after each test
- *
- * These tests serve as regression protection and verify that the linter
- * continues to work as expected when changes are made to the CLI logic.
- */
+// End-to-end tests for the lint-content script, run via npm and checked by
+// their output. They cover argument parsing, file discovery, rule filtering,
+// and exit codes.
+//
+// Test files are written to content/test-integration/ because the linter only
+// processes files under content/ or data/.
import { execSync } from 'child_process'
import { beforeEach, afterEach, describe, test, expect } from 'vitest'
@@ -29,18 +14,14 @@ const rootDir = path.join(__dirname, '../../../..')
const testContentDir = path.join(rootDir, 'content/test-integration')
describe('Content Linter CLI Integration Tests', { timeout: 30000 }, () => {
- // Run all tests in sequence to avoid npm process conflicts
beforeEach(async () => {
- // Create test directory
await fs.mkdir(testContentDir, { recursive: true })
})
afterEach(async () => {
- // Clean up test files
await fs.rm(testContentDir, { recursive: true, force: true })
})
- // Helper function to run linter commands
async function runLinter(args: string): Promise<{ output: string; exitCode: number }> {
let output = ''
let exitCode = 0
@@ -50,7 +31,7 @@ describe('Content Linter CLI Integration Tests', { timeout: 30000 }, () => {
encoding: 'utf8',
cwd: rootDir,
stdio: 'pipe',
- timeout: 10000, // 10 second timeout
+ timeout: 10000,
})
} catch (error: unknown) {
const execError = error as { stdout?: string; stderr?: string; status?: number }
@@ -63,7 +44,7 @@ describe('Content Linter CLI Integration Tests', { timeout: 30000 }, () => {
describe('Linter functionality verification', () => {
test('should detect errors when explicitly running search-replace rule', async () => {
- // Baseline test - ensures the linter can detect errors
+ // Baseline: if this fails, the linter is not detecting anything at all.
const testFile = path.join(testContentDir, 'baseline-test.md')
const testContent = `---
title: Baseline Test
@@ -110,10 +91,9 @@ TODOCS This is placeholder content that should now be detected by default.
const { output, exitCode } = await runLinter(`--paths "${testFile}"`)
- // Verify that the linter properly detects errors when no --rules are specified
- expect(exitCode).toBe(1) // Should exit with error due to TODOCS
- expect(output).toContain('todocs-placeholder') // TODOCS should be detected by default
- expect(output).toContain('ERROR') // Errors should be detected
+ expect(exitCode).toBe(1)
+ expect(output).toContain('todocs-placeholder')
+ expect(output).toContain('ERROR')
})
test('should respect rule filtering when specific rules are provided', async () => {
@@ -137,7 +117,7 @@ TODOCS This file has multiple error types.
`--paths "${testFile}" --rules heading-increment`,
)
- expect(exitCode).toBe(0) // heading-increment rule behavior with filtering
+ expect(exitCode).toBe(0)
expect(output).not.toContain('ERROR')
expect(output).not.toContain('todocs-placeholder')
})
diff --git a/src/content-linter/tests/lint-files.ts b/src/content-linter/tests/lint-files.ts
index 1cd3f18a2a0a..dd6a6f916721 100755
--- a/src/content-linter/tests/lint-files.ts
+++ b/src/content-linter/tests/lint-files.ts
@@ -166,7 +166,6 @@ const yamlWalkOptions = {
includeBasePath: true,
}
-// different lint rules apply to different content types
let ymlToLint
// compile lists of all the files we want to lint
@@ -199,7 +198,6 @@ function formatLinkError(message: string, links: string[]) {
// Returns `content` if its a string, or `content.description` if it can.
// Used for getting the nested `description` key in glossary files.
-// Using any because content can be string | { description: string } | other YAML structures
function getContent(content: unknown) {
if (typeof content === 'string') return content
if (
@@ -214,7 +212,7 @@ function getContent(content: unknown) {
const diffFiles = getDiffFiles()
-// If present, and not empty, leverage it because in most cases it's empty.
+// If it is present and not empty, use it. In most cases it is empty.
if (diffFiles.length > 0) {
// It's faster to do this once and then re-use over and over in the
// .filter() later on.
diff --git a/src/content-linter/tests/site-data-references.ts b/src/content-linter/tests/site-data-references.ts
index c980541b8fc0..c0828043b187 100644
--- a/src/content-linter/tests/site-data-references.ts
+++ b/src/content-linter/tests/site-data-references.ts
@@ -33,7 +33,7 @@ describe('data references', () => {
vi.setConfig({ testTimeout: 60 * 1000 })
test('every data reference found in English variable files is defined and has a value', async () => {
- // value can be any type returned by getDataByLanguage - we check if it's a string
+ // getDataByLanguage can return any YAML type, so the string check happens below.
let errors: Array<{ key: string; value: unknown; variableFile: string }> = []
const allVariables = getDeepDataByLanguage('variables', 'en')
const variables = Object.values(allVariables)
@@ -54,7 +54,7 @@ describe('data references', () => {
}),
)
- errors = uniqWith(errors, isEqual) // remove duplicates
+ errors = uniqWith(errors, isEqual)
expect(errors.length, JSON.stringify(errors, null, 2)).toBe(0)
})
})
diff --git a/src/content-linter/tests/unit/ctas-schema.ts b/src/content-linter/tests/unit/ctas-schema.ts
index 0712e6541857..9fa8139057b7 100644
--- a/src/content-linter/tests/unit/ctas-schema.ts
+++ b/src/content-linter/tests/unit/ctas-schema.ts
@@ -82,11 +82,11 @@ try_ghec_for_free: '{% ifversion ghec %}https://github.com/account/enterprises/n
expect(errors.length).toBe(1) // Should detect and try to convert the old CTA format
expect(errors[0].fixInfo).toBeDefined()
- // The extracted URL should not include the curly brace - verify by checking the fix
+ // The extracted URL should not include the curly brace from the Liquid tag.
const fixedUrl = errors[0].fixInfo?.insertText
expect(fixedUrl).toBeDefined()
- expect(fixedUrl).not.toContain('{') // Should not include curly brace from Liquid syntax
- expect(fixedUrl).not.toContain('}') // Should not include curly brace from Liquid syntax
+ expect(fixedUrl).not.toContain('{')
+ expect(fixedUrl).not.toContain('}')
expect(fixedUrl).toContain('ref_product=ghec') // Should have converted old format correctly
})
diff --git a/src/content-linter/tests/unit/frontmatter-content-type.ts b/src/content-linter/tests/unit/frontmatter-content-type.ts
index 932e88902f6e..84e5a5ed83e3 100644
--- a/src/content-linter/tests/unit/frontmatter-content-type.ts
+++ b/src/content-linter/tests/unit/frontmatter-content-type.ts
@@ -38,9 +38,7 @@ describe('GHD065 - frontmatter-content-type', () => {
resetCache()
})
- // -------------------------------------------------------------------
// Passing cases
- // -------------------------------------------------------------------
test('file with correct contentType matching directory passes', async () => {
const strings = {
@@ -101,7 +99,7 @@ describe('GHD065 - frontmatter-content-type', () => {
test('file outside qualifying product is not checked', async () => {
// actions in fixtures has non-EDI subdirs (category/, using-workflows/),
- // so it does NOT qualify — the rule should skip it entirely.
+ // so it does NOT qualify and the rule should skip it entirely.
const strings = {
'content/actions/category/test-file.md': md(['title: Test', 'versions:', " fpt: '*'"]),
}
@@ -119,9 +117,7 @@ describe('GHD065 - frontmatter-content-type', () => {
expect(errors).toEqual([])
})
- // -------------------------------------------------------------------
// Failing cases
- // -------------------------------------------------------------------
test('missing contentType in qualifying product triggers error', async () => {
const strings = {
diff --git a/src/content-linter/tests/unit/frontmatter-landing-carousels.ts b/src/content-linter/tests/unit/frontmatter-landing-carousels.ts
index 3238d9555f7e..2aaeeefd3f63 100644
--- a/src/content-linter/tests/unit/frontmatter-landing-carousels.ts
+++ b/src/content-linter/tests/unit/frontmatter-landing-carousels.ts
@@ -92,14 +92,9 @@ describe(ruleName, () => {
})
test('absolute paths are prioritized over relative paths', async () => {
- // This test verifies that when both absolute and relative paths exist with the same name,
- // the absolute path is chosen over the relative path.
- //
- // Setup:
- // - /article-one should resolve to src/fixtures/fixtures/content/article-one.md (absolute)
- // - article-one (relative) would resolve to src/content-linter/tests/fixtures/landing-carousels/article-one.md
- //
- // The test passes because our logic prioritizes the absolute path resolution first
+ // /article-one exists both as src/fixtures/fixtures/content/article-one.md
+ // and as src/content-linter/tests/fixtures/landing-carousels/article-one.md.
+ // The absolute resolution wins.
const result = await runRule(frontmatterLandingCarousels, {
files: [ABSOLUTE_PRIORITY],
...fmOptions,
@@ -108,16 +103,7 @@ describe(ruleName, () => {
})
test('path priority resolution works correctly', async () => {
- // This test verifies that absolute paths are prioritized over relative paths
- // when both files exist with the same name.
- //
- // Setup:
- // - /article-one could resolve to EITHER:
- // 1. src/fixtures/fixtures/content/article-one.md (absolute - should be chosen)
- // 2. src/content-linter/tests/fixtures/landing-carousels/article-one.md (relative - should be ignored)
- //
- // Our prioritization logic should choose #1 (absolute) over #2 (relative)
- // This test passes because the absolute path exists and is found first
+ // Same collision as the test above, reached through a different fixture.
const result = await runRule(frontmatterLandingCarousels, {
files: [PATH_PRIORITY],
...fmOptions,
@@ -126,10 +112,7 @@ describe(ruleName, () => {
})
test('absolute-only paths work when no relative path exists', async () => {
- // This test verifies that absolute path resolution works when no relative path exists
- // /article-two exists in src/fixtures/fixtures/content/article-two.md
- // but NOT in src/content-linter/tests/fixtures/landing-carousels/article-two.md
- // This test would fail if we didn't prioritize absolute paths properly
+ // /article-two resolves from src/fixtures/fixtures/content/article-two.md.
const result = await runRule(frontmatterLandingCarousels, {
files: [ABSOLUTE_ONLY],
...fmOptions,
diff --git a/src/content-linter/tests/unit/frontmatter-schema.ts b/src/content-linter/tests/unit/frontmatter-schema.ts
index a4ca19a5c20b..8fa299079eb2 100644
--- a/src/content-linter/tests/unit/frontmatter-schema.ts
+++ b/src/content-linter/tests/unit/frontmatter-schema.ts
@@ -3,7 +3,7 @@ import { describe, expect, test } from 'vitest'
import { runRule } from '../../lib/init-test'
import { frontmatterSchema } from '../../lib/linting-rules/frontmatter-schema'
-// Configure the test figure to not split frontmatter and content
+// Configure the test fixture to not split frontmatter and content
const fmOptions = { markdownlintOptions: { frontMatter: null } }
describe(frontmatterSchema.names.join(' - '), () => {
diff --git a/src/content-linter/tests/unit/frontmatter-search-replace.ts b/src/content-linter/tests/unit/frontmatter-search-replace.ts
index 152e61e67290..788f41102dbf 100644
--- a/src/content-linter/tests/unit/frontmatter-search-replace.ts
+++ b/src/content-linter/tests/unit/frontmatter-search-replace.ts
@@ -19,7 +19,6 @@ describe('search-replace rule in frontmatter', () => {
const errors = result.markdown || []
- // Should find TODOCS in frontmatter
const todosErrors = errors.filter((e) => e.errorDetail && /TODOCS/.test(e.errorDetail))
expect(todosErrors.length).toBe(1)
expect(todosErrors[0].lineNumber).toBe(2) // title: TODOCS
@@ -47,7 +46,6 @@ describe('search-replace rule in frontmatter', () => {
const errors = result.markdown || []
- // Should find all TODOCS instances in frontmatter
const todosErrors = errors.filter((e) => e.errorDetail && /TODOCS/.test(e.errorDetail))
expect(todosErrors.length).toBe(3)
expect(todosErrors[0].lineNumber).toBe(2) // title: TODOCS
@@ -77,7 +75,6 @@ describe('search-replace rule in frontmatter', () => {
const errors = result.markdown || []
- // Should find domain errors in frontmatter
const domainErrors = errors.filter(
(e) => e.errorDetail && /docs-domain|help-domain|developer-domain/.test(e.errorDetail),
)
@@ -108,7 +105,6 @@ describe('search-replace rule in frontmatter', () => {
const errors = result.markdown || []
- // Should find deprecated syntax errors in frontmatter
const deprecatedErrors = errors.filter(
(e) => e.errorDetail && /site\.data|octicon/.test(e.errorDetail),
)
diff --git a/src/content-linter/tests/unit/frontmatter-versions-whitespace.ts b/src/content-linter/tests/unit/frontmatter-versions-whitespace.ts
index 99ca3a013552..d81bf4350f8d 100644
--- a/src/content-linter/tests/unit/frontmatter-versions-whitespace.ts
+++ b/src/content-linter/tests/unit/frontmatter-versions-whitespace.ts
@@ -18,7 +18,6 @@ interface InvalidTestCase {
expectedMessage?: string
}
-// Valid cases - should pass
const validCases: ValidTestCase[] = [
{
name: 'valid-simple-versions',
@@ -63,7 +62,6 @@ This is a test.
},
]
-// Invalid cases - should fail
const invalidCases: InvalidTestCase[] = [
{
name: 'trailing-whitespace',
diff --git a/src/content-linter/tests/unit/image-alt-text-end-punctuation.ts b/src/content-linter/tests/unit/image-alt-text-end-punctuation.ts
index c4e05da23279..956692c95240 100644
--- a/src/content-linter/tests/unit/image-alt-text-end-punctuation.ts
+++ b/src/content-linter/tests/unit/image-alt-text-end-punctuation.ts
@@ -59,9 +59,8 @@ describe(imageAltTextEndPunctuation.names.join(' - '), () => {
].join('\n')
const result = await runRule(imageAltTextEndPunctuation, { strings: { markdown } })
const errors = result.markdown
- // This rule is not concerned with empty alt text
- // That will be caught by the incorrect-alt-text-length rule
- // So technically, it's not imageAltTextEndPunctuation's problem.
+ // This rule is not concerned with empty alt text. The
+ // incorrect-alt-text-length rule catches that instead.
expect(errors.length).toBe(0)
})
})
diff --git a/src/content-linter/tests/unit/image-alt-text-exclude-start-words.ts b/src/content-linter/tests/unit/image-alt-text-exclude-start-words.ts
index 7b2bdac0f7b1..885c7f470e80 100644
--- a/src/content-linter/tests/unit/image-alt-text-exclude-start-words.ts
+++ b/src/content-linter/tests/unit/image-alt-text-exclude-start-words.ts
@@ -39,9 +39,8 @@ describe(imageAltTextExcludeStartWords.names.join(' - '), () => {
].join('\n')
const result = await runRule(imageAltTextExcludeStartWords, { strings: { markdown } })
const errors = result.markdown
- // This rule is not concerned with empty alt text
- // That will be caught by the incorrect-alt-text-empty rule
- // So technically, it's not imageAltTextEndPunctuation's problem.
+ // This rule is not concerned with empty alt text. The
+ // incorrect-alt-text-length rule catches that instead.
expect(errors.length).toBe(0)
})
})
diff --git a/src/content-linter/tests/unit/internal-links-no-lang.ts b/src/content-linter/tests/unit/internal-links-no-lang.ts
index e883adf5a55c..66d8eaf970bb 100644
--- a/src/content-linter/tests/unit/internal-links-no-lang.ts
+++ b/src/content-linter/tests/unit/internal-links-no-lang.ts
@@ -29,7 +29,7 @@ describe(internalLinksNoLang.names.join(' - '), () => {
// a // means the link is external
'These are the [Docs](//ja/actions) we need.',
'This is the [actions Docs](/actions)',
- // A link that starts with a language code
+ // Starts with a path segment that is not a language code
'[Enterprise](/enterprise/overview)',
].join('\n')
const result = await runRule(internalLinksNoLang as Rule, { strings: { markdown } })
diff --git a/src/content-linter/tests/unit/internal-links-old-version.ts b/src/content-linter/tests/unit/internal-links-old-version.ts
index 84c0510dd77e..39e4e4590de6 100644
--- a/src/content-linter/tests/unit/internal-links-old-version.ts
+++ b/src/content-linter/tests/unit/internal-links-old-version.ts
@@ -24,7 +24,7 @@ describe(internalLinksOldVersion.names.join(' - '), () => {
const markdown = [
// External links with enterprise in them
'[External link](https://someservice.com/enterprise/1.0/admin/yes)',
- // Current versioning links is excluded from this test
+ // Current versioning links are excluded from this test
'[New versioning](/github/site-policy/enterprise/2.2/yes)',
].join('\n')
const result = await runRule(internalLinksOldVersion as Rule, { strings: { markdown } })
diff --git a/src/content-linter/tests/unit/lint-report-exclusions.ts b/src/content-linter/tests/unit/lint-report-exclusions.ts
index 7879f14a3987..e9fe1bd8c6d3 100644
--- a/src/content-linter/tests/unit/lint-report-exclusions.ts
+++ b/src/content-linter/tests/unit/lint-report-exclusions.ts
@@ -51,7 +51,6 @@ describe('content linter configuration', () => {
function shouldIncludeInReport(flaw: LintFlaw): boolean {
const allRuleNames = getAllRuleNames(flaw)
- // Check if severity should be included
if (reportingConfig.includeSeverities.includes(flaw.severity)) {
return true
}
diff --git a/src/content-linter/tests/unit/liquid-ifversion-versions.ts b/src/content-linter/tests/unit/liquid-ifversion-versions.ts
index 9b602487cda2..7a3c831d3b8d 100644
--- a/src/content-linter/tests/unit/liquid-ifversion-versions.ts
+++ b/src/content-linter/tests/unit/liquid-ifversion-versions.ts
@@ -114,8 +114,7 @@ describe(liquidIfversionVersions.names.join(' - '), () => {
})
test.skip('ifversion using feature based version extended with shortname all versions', async () => {
- // That `features/volvo.yml` contains `fpt:'*', ghec:'*'`
- // so combined with the
+ // That `features/volvo.yml` contains `fpt:'*', ghec:'*'`.
const markdown = `
{% ifversion volvo or ghes %}{% endif %}
`
diff --git a/src/content-linter/tests/unit/liquid-syntax.ts b/src/content-linter/tests/unit/liquid-syntax.ts
index 2cc769ce9bbd..a503b869def0 100644
--- a/src/content-linter/tests/unit/liquid-syntax.ts
+++ b/src/content-linter/tests/unit/liquid-syntax.ts
@@ -3,7 +3,7 @@ import { describe, expect, test } from 'vitest'
import { runRule } from '../../lib/init-test'
import { frontmatterLiquidSyntax, liquidSyntax } from '../../lib/linting-rules/liquid-syntax'
-// Configure the test figure to not split frontmatter and content
+// Configure the test fixture to not split frontmatter and content
const fmOptions = { markdownlintOptions: { frontMatter: null } }
describe(frontmatterLiquidSyntax.names.join(' - '), () => {
diff --git a/src/content-linter/tests/unit/liquid-versioning.ts b/src/content-linter/tests/unit/liquid-versioning.ts
index 2711ce83ee9e..0d142a66b43d 100644
--- a/src/content-linter/tests/unit/liquid-versioning.ts
+++ b/src/content-linter/tests/unit/liquid-versioning.ts
@@ -58,7 +58,7 @@ describe(liquidIfVersionTags.names.join(' - '), () => {
'{% ifversion ghes < 2.9 %}',
// Incorrect syntax
'{% ifversion ghec or ifversion fpt %}',
- // Typo - should be not ghec
+ // Typo: should be `not ghec`
'{% ifversion no ghec %}',
]
const result = await runRule(liquidIfVersionTags, {
diff --git a/src/content-linter/tests/unit/rai-app-card-structure.ts b/src/content-linter/tests/unit/rai-app-card-structure.ts
index 82394e1ad94c..ef1f838dacc1 100644
--- a/src/content-linter/tests/unit/rai-app-card-structure.ts
+++ b/src/content-linter/tests/unit/rai-app-card-structure.ts
@@ -3,11 +3,7 @@ import { describe, expect, test } from 'vitest'
import { runRule } from '../../lib/init-test'
import { raiAppCardStructure } from '../../lib/linting-rules/rai-app-card-structure'
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-
-/** A minimal valid RAI card with all required H2s, H3s, and reusables. */
+// A minimal valid RAI card with all required H2s, H3s, and reusables.
function validCard(): string {
return [
'---',
@@ -102,9 +98,7 @@ function validCard(): string {
}
describe(raiAppCardStructure.names.join(' - '), () => {
- // -----------------------------------------------------------------------
- // Happy path & filtering
- // -----------------------------------------------------------------------
+ // Happy path and filtering
test('valid RAI card produces zero errors', async () => {
const markdown = validCard()
@@ -128,9 +122,7 @@ describe(raiAppCardStructure.names.join(' - '), () => {
expect(errors.length).toBe(0)
})
- // -----------------------------------------------------------------------
- // One negative test per validator — proves each code path fires
- // -----------------------------------------------------------------------
+ // One negative test per validator, to prove each code path fires
test('missing a required H2 section reports an error', async () => {
const markdown = validCard()
diff --git a/src/content-linter/tests/unit/rule-filtering.ts b/src/content-linter/tests/unit/rule-filtering.ts
index 7488c5f94b76..0da64c2b514a 100644
--- a/src/content-linter/tests/unit/rule-filtering.ts
+++ b/src/content-linter/tests/unit/rule-filtering.ts
@@ -1,7 +1,6 @@
import { describe, test, expect, vi } from 'vitest'
import { shouldIncludeRule } from '../../scripts/lint-content'
-// Mock the get-rules module to provide test data for rule definitions
vi.mock('../../lib/helpers/get-rules', () => ({
allRules: [
{
diff --git a/src/content-linter/tests/unit/search-replace.ts b/src/content-linter/tests/unit/search-replace.ts
index a498e4b98bbb..2cc4cd9f17d5 100644
--- a/src/content-linter/tests/unit/search-replace.ts
+++ b/src/content-linter/tests/unit/search-replace.ts
@@ -79,7 +79,6 @@ describe(searchReplace.names.join(' - '), () => {
markdownlintOptions: { frontMatter: null }, // Include frontmatter in linting
})
const errors = result.markdown
- // Should find 3 TODOCS occurrences in frontmatter
expect(errors.length).toBe(3)
expect(errors[0].lineNumber).toBe(2) // title: TODOCS
expect(errors[1].lineNumber).toBe(3) // shortTitle: TODOCS
@@ -102,7 +101,6 @@ describe(searchReplace.names.join(' - '), () => {
markdownlintOptions: { frontMatter: null }, // Include frontmatter in linting
})
const errors = result.markdown
- // Should find 4 TODOCS occurrences total (2 in frontmatter + 2 in content)
expect(errors.length).toBe(4)
expect(errors[0].lineNumber).toBe(2) // title: TODOCS
expect(errors[1].lineNumber).toBe(3) // intro: TODOCS
diff --git a/src/content-pipelines/state/copilot-cli.sha b/src/content-pipelines/state/copilot-cli.sha
index dcbb3c91d1b3..93d3d808abd3 100644
--- a/src/content-pipelines/state/copilot-cli.sha
+++ b/src/content-pipelines/state/copilot-cli.sha
@@ -1 +1 @@
-bc65d3739bbe4d7f9832b2bceea9d03f633b6d0b
+5ce1aa09128c57a8a240d93f5089e35969c8c4d9
diff --git a/src/content-render/liquid/data.ts b/src/content-render/liquid/data.ts
index bafe90d364a0..44c0151cd40b 100644
--- a/src/content-render/liquid/data.ts
+++ b/src/content-render/liquid/data.ts
@@ -91,7 +91,6 @@ function handleIndent(tagToken: TagToken, text: string): string {
// keep the blockquote character on every successive line.
const blockquoteRegexp = /^\n?([ \t]*>[ \t]?)/
function handleBlockquote(tagToken: TagToken, text: string): string {
- // If the text isn't multiline, skip
if (text.split('\n').length <= 1) return text
// If the line with the liquid tag starts with a blockquote...
@@ -100,7 +99,6 @@ function handleBlockquote(tagToken: TagToken, text: string): string {
const inputLine = input.split('\n').find((line) => line.includes(content))
if (!inputLine || !blockquoteRegexp.test(inputLine)) return text
- // Keep the character on successive lines
const match = inputLine.match(blockquoteRegexp)
if (!match) return text
const start = match[0]
diff --git a/src/content-render/liquid/engine.ts b/src/content-render/liquid/engine.ts
index 034fa453ddf2..11418f9cfd9a 100644
--- a/src/content-render/liquid/engine.ts
+++ b/src/content-render/liquid/engine.ts
@@ -56,8 +56,27 @@ engine.registerFilter('version_num', (input: string): string => {
})
/**
- * Convert the input to a slug
+ * Render a string that itself contains Liquid.
+ *
+ * Values interpolated with `{{ }}` are not given a second Liquid pass, so
+ * `{% data %}` or `{% ifversion %}` stored in a data file would otherwise be
+ * printed literally. This filter lets data files keep using Liquid instead of
+ * hardcoding product names or version logic.
+ *
+ * Usage: {{ row.action | render_liquid }}
*/
+interface FilterScope {
+ context: {
+ environments: Record
+ }
+}
+
+engine.registerFilter('render_liquid', function (this: FilterScope, input: unknown): unknown {
+ if (typeof input !== 'string') return input
+ if (!input.includes('{%') && !input.includes('{{')) return input
+ return engine.parseAndRender(input, this.context.environments)
+})
+
engine.registerFilter('slugify', (input: string): string => {
const slugger = new GithubSlugger()
return slugger.slug(input)
diff --git a/src/content-render/liquid/ifversion.ts b/src/content-render/liquid/ifversion.ts
index adc1b16d5ccb..38c724517a18 100644
--- a/src/content-render/liquid/ifversion.ts
+++ b/src/content-render/liquid/ifversion.ts
@@ -95,21 +95,19 @@ export default class Ifversion extends Tag {
for (const branch of this.branches) {
let resolvedBranchCond = branch.cond
- // Resolve "not" keywords in the conditional, if any.
resolvedBranchCond = this.handleNots(resolvedBranchCond)
// Resolve special operators in the conditional, if any.
// This will replace syntax like `fpt or ghes < 3.0` with `fpt or true` or `fpt or false`.
resolvedBranchCond = this.handleOperators(resolvedBranchCond)
- // Resolve version names to boolean values for Markdown API context.
- // This will replace syntax like `fpt or ghec` with `true or false` based on current version.
- // Only apply this transformation in Markdown API context to avoid breaking existing functionality.
+ // Replace syntax like `fpt or ghec` with `true or false` based on the current
+ // version. Only done for the Markdown API, where the version names would
+ // otherwise be undefined.
if ((ctx.environments as IfversionEnvironments).markdownRequested) {
resolvedBranchCond = this.handleVersionNames(resolvedBranchCond)
}
- // Use Liquid's native function for the final evaluation.
const cond = yield new Value(resolvedBranchCond, this.liquid).value(ctx, ctx.opts.lenientIf)
if (isTruthy(cond, ctx)) {
@@ -125,7 +123,6 @@ export default class Ifversion extends Tag {
const condArray = resolvedBranchCond.split(' ')
- // Find the first index in the array that contains "not".
const notIndex = condArray.findIndex((el: string) => el === 'not')
// E.g., ['not', 'fpt']
@@ -156,7 +153,6 @@ export default class Ifversion extends Tag {
// If this conditional contains multiple parts using `or` or `and`, get only the conditional with operators.
const condArray = resolvedBranchCond.split(' ')
- // Find the first index in the array that contains an operator.
const operatorIndex = condArray.findIndex((el: string) =>
supportedOperators.find((op: string) => el === op),
)
@@ -164,7 +160,6 @@ export default class Ifversion extends Tag {
// E.g., ['ghes', '<', '3.1']
const condParts = condArray.slice(operatorIndex - 1, operatorIndex + 2)
- // Assign to vars.
const [versionShortName, operator, releaseToEvaluate] = condParts
// Make sure the operator is supported and the release number matches `\d\d?\.\d\d?`
@@ -219,17 +214,12 @@ export default class Ifversion extends Tag {
return resolvedBranchCond
}
- // Split the condition into tokens for processing
const tokens = resolvedBranchCond.split(/\s+/)
const processedTokens = tokens.map((token: string) => {
- // Check if the token is a version short name (fpt, ghec, ghes, ghae)
const versionShortNames = ['fpt', 'ghec', 'ghes', 'ghae']
if (versionShortNames.includes(token)) {
- // Transform version names to boolean values for Markdown API
- // This fixes the original issue where version names were undefined in API context
return token === this.currentVersionObj!.shortName ? 'true' : 'false'
}
- // Return the token unchanged if it's not a version name
return token
})
diff --git a/src/content-render/liquid/indented-data-reference.ts b/src/content-render/liquid/indented-data-reference.ts
index 63ad23e1c942..b5b7f589d73b 100644
--- a/src/content-render/liquid/indented-data-reference.ts
+++ b/src/content-render/liquid/indented-data-reference.ts
@@ -47,7 +47,6 @@ const IndentedDataReference = {
assert(parseInt(numSpaces) || numSpaces === '0', '"spaces=NUMBER" must include a number')
- // Get the referenced value from the context
const text: string | undefined = getDataByLanguage(
dataReference,
scope.environments.currentLanguage,
@@ -63,7 +62,6 @@ const IndentedDataReference = {
return
}
- // add spaces to each line
const renderedReferenceWithIndent: string = text.replace(/^/gm, ' '.repeat(parseInt(numSpaces)))
return this.liquid.parseAndRender(renderedReferenceWithIndent, scope.environments)
diff --git a/src/content-render/liquid/octicon.ts b/src/content-render/liquid/octicon.ts
index ca5a40fa7379..aacb8927e791 100644
--- a/src/content-render/liquid/octicon.ts
+++ b/src/content-render/liquid/octicon.ts
@@ -25,7 +25,6 @@ const Octicon = {
throw new TokenizationError(SyntaxHelp, tagToken)
}
- // Memoize the icon
this.icon = match.groups.icon
// Breaking change in octicons 12
// https://github.com/primer/octicons/releases/tag/v12.0.0
@@ -36,29 +35,24 @@ const Octicon = {
this.options = {}
- // Memoize any options passed
if (match.groups.options) {
let optionsMatch: RegExpExecArray | null
- // Loop through each option matching the OptionsSyntax regex
while ((optionsMatch = OptionsSyntax.exec(match.groups.options))) {
// Pull out the key/value ([0] is the whole input)
const [, key, value] = optionsMatch
this.options[key] = value
- // Alias label to aria-label
if (key === 'label') this.options['aria-label'] = value
}
}
},
async render(): Promise {
- // Throw an error if the requested octicon does not exist.
if (!Object.prototype.hasOwnProperty.call(octicons, this.icon)) {
throw new Error(`Octicon ${this.icon} does not exist`)
}
- // Auto-generate aria-label if not provided
// Replace non-alphanumeric characters with spaces and append " icon"
if (!this.options['aria-label']) {
const defaultLabel = `${this.icon.toLowerCase().replace(/[^a-z0-9]+/gi, ' ')} icon`
diff --git a/src/content-render/liquid/prompt.ts b/src/content-render/liquid/prompt.ts
index dbba2b28b3c4..1df9e1bcd28a 100644
--- a/src/content-render/liquid/prompt.ts
+++ b/src/content-render/liquid/prompt.ts
@@ -1,4 +1,3 @@
-// src/content-render/liquid/prompt.ts
// Defines {% prompt %}…{% endprompt %} to wrap its content in and append the Copilot icon.
import octicons from '@primer/octicons'
@@ -15,7 +14,6 @@ interface LiquidTag {
export const Prompt: LiquidTag = {
type: 'block',
- // Collect everything until {% endprompt %}
parse(tagToken: TagToken, remainTokens: TopLevelToken[]): void {
this.templates = []
const stream = this.liquid.parser.parseStream(remainTokens)
@@ -28,12 +26,10 @@ export const Prompt: LiquidTag = {
stream.start()
},
- // Render the inner Markdown, wrap in , then append the SVG
*render(scope: unknown): Generator {
const content = yield this.liquid.renderer.renderTemplates(this.templates, scope)
const contentString = String(content)
- // build a URL with the prompt text encoded as query parameter
const promptParam: string = encodeURIComponent(contentString)
const href: string = `https://github.com/copilot?prompt=${promptParam}`
// Use murmur hash for deterministic ID (avoids hydration mismatch)
diff --git a/src/content-render/scripts/add-content-type.ts b/src/content-render/scripts/add-content-type.ts
index 588b484bdaf0..f6286ea7b4a2 100644
--- a/src/content-render/scripts/add-content-type.ts
+++ b/src/content-render/scripts/add-content-type.ts
@@ -107,7 +107,6 @@ function processFile(filePath: string, scriptOptions: ScriptOptions) {
return { processed: true, updated: false }
}
- // Check if we're actually changing an existing contentType
const isChangingContentType = data.contentType && data.contentType !== newContentType
const isAddingContentType = !data.contentType
@@ -119,7 +118,6 @@ function processFile(filePath: string, scriptOptions: ScriptOptions) {
console.log(`Adding contentType '${newContentType}' on ${relativePath}`)
}
- // Only update if there's actually a change needed
if (isChangingContentType || isAddingContentType) {
data.contentType = newContentType
} else {
@@ -127,7 +125,6 @@ function processFile(filePath: string, scriptOptions: ScriptOptions) {
return { processed: true, updated: false }
}
- // Write the file back
fs.writeFileSync(
filePath,
frontmatter.stringify(
@@ -183,7 +180,6 @@ function determineContentType(relativePath: string): string {
return LANDING_TYPE
}
- // Classify anything else as 'other'.
return OTHER_TYPE
}
diff --git a/src/content-render/scripts/cta-builder.ts b/src/content-render/scripts/cta-builder.ts
index bd633c63dbb6..96ca90b65f00 100644
--- a/src/content-render/scripts/cta-builder.ts
+++ b/src/content-render/scripts/cta-builder.ts
@@ -31,7 +31,6 @@ type CTASchemaProperties = {
[K in keyof CTAParams]-?: CTASchemaProperty
}
-// Conversion mappings from old CTA format to new schema
const ctaToTypeMapping: Record = {
'GHEC trial': 'trial',
'Copilot trial': 'trial',
@@ -51,18 +50,15 @@ const ctaToPlanMapping: Record = {
'GHEC trial': 'enterprise',
}
-// Keywords that suggest a button context vs inline text link
const buttonKeywords = ['landing', 'signup', 'download', 'trial']
const program = new Command()
-// CLI setup
program
.name('cta-builder')
.description('Create a properly formatted Call-to-Action URL with tracking parameters.')
.version('1.0.0')
-// Add conversion command
program
.command('convert')
.description('Convert old CTA URLs to new schema format')
@@ -72,7 +68,6 @@ program
convertUrls(options)
})
-// Add validation command
program
.command('validate')
.description('Validate a CTA URL against the schema')
@@ -81,7 +76,6 @@ program
validateUrl(options)
})
-// Add programmatic build command
program
.command('build')
.description('Build a CTA URL programmatically with flags (outputs URL only)')
@@ -94,7 +88,6 @@ program
buildProgrammaticCTA(options)
})
-// Default to interactive mode
program.action(() => {
interactiveBuilder()
})
@@ -104,7 +97,6 @@ if (import.meta.url === `file://${process.argv[1]}`) {
program.parse()
}
-// Helper function to select from lettered options
async function selectFromOptions(
paramName: string,
message: string,
@@ -139,7 +131,6 @@ async function selectFromOptions(
}
}
-// Helper function to confirm yes/no
async function confirmChoice(
message: string,
promptFn: (question: string) => Promise,
@@ -161,7 +152,6 @@ async function confirmChoice(
}
}
-// Extract CTA parameters from a URL
function extractCTAParams(url: string): CTAParams {
const urlObj = new URL(url)
const ctaParams: CTAParams = {}
@@ -224,7 +214,6 @@ function validateCTAParams(params: CTAParams): { isValid: boolean; errors: strin
}
}
-// Build URL with CTA parameters
function buildCTAUrl(baseUrl: string, params: CTAParams): string {
const url = new URL(baseUrl)
@@ -237,17 +226,15 @@ function buildCTAUrl(baseUrl: string, params: CTAParams): string {
return url.toString()
}
-// Convert old CTA URL to new schema format
export function convertOldCTAUrl(oldUrl: string): { newUrl: string; notes: string[] } {
const notes: string[] = []
try {
const url = new URL(oldUrl)
- // Build new parameters
const newParams: CTAParams = {}
- // First, check if any of the new params already exist, and preserve those if so
+ // Preserve any new-style params that are already on the URL.
for (const [key, value] of url.searchParams.entries()) {
for (const param of Object.keys(ctaSchema.properties)) {
if (key === param && key in ctaSchema.properties) {
@@ -264,17 +251,14 @@ export function convertOldCTAUrl(oldUrl: string): { newUrl: string; notes: strin
}
}
- // Try to convert old params to new params
const refCta = url.searchParams.get('ref_cta') || ''
const refLoc = url.searchParams.get('ref_loc') || ''
- // Map ref_product
if (!newParams.ref_product) {
newParams.ref_product = inferProductFromUrl(oldUrl, refCta)
notes.push(`- Missing ref_product - made an inference, manually update if needed`)
}
- // Map ref_type
if (!newParams.ref_type) {
newParams.ref_type = ctaToTypeMapping[refCta] || 'engagement'
if (!ctaToTypeMapping[refCta]) {
@@ -282,13 +266,11 @@ export function convertOldCTAUrl(oldUrl: string): { newUrl: string; notes: strin
}
}
- // Map ref_style
if (!newParams.ref_style) {
newParams.ref_style = inferStyleFromContext(refLoc)
notes.push(`- Missing ref_style - made an inference, manually update if needed`)
}
- // Map ref_plan (optional)
if (!newParams.ref_plan) {
if (ctaToPlanMapping[refCta]) {
newParams.ref_plan = ctaToPlanMapping[refCta]
@@ -298,12 +280,10 @@ export function convertOldCTAUrl(oldUrl: string): { newUrl: string; notes: strin
// Build new URL - preserve all existing parameters except old ref_ parameters
const newUrl = new URL(url.toString())
- // Remove old CTA parameters
newUrl.searchParams.delete('ref_cta')
newUrl.searchParams.delete('ref_loc')
newUrl.searchParams.delete('ref_page')
- // Add new CTA parameters
for (const [key, value] of Object.entries(newParams)) {
if (value) {
newUrl.searchParams.set(key, value)
@@ -343,7 +323,6 @@ function inferProductFromUrl(url: string, refCta: string): string {
} catch {
// Fallback if url isn't valid: leave hostname empty
}
- // Strict hostname check for desktop.github.com
if (hostname === 'desktop.github.com' || refCta.includes('desktop')) {
return 'desktop'
}
@@ -361,7 +340,6 @@ function inferProductFromUrl(url: string, refCta: string): string {
) {
return 'ghec'
}
- // Default fallback
return 'copilot'
}
@@ -372,15 +350,12 @@ function inferStyleFromContext(refLoc: string): string {
return isButton ? 'button' : 'text'
}
-// Interactive CTA builder
async function interactiveBuilder(): Promise {
- // Create readline interface for interactive mode
const rl = readline.createInterface({
input: process.stdin,
output: process.stdout,
})
- // Helper function to prompt user (scoped to this function)
function prompt(question: string): Promise {
return new Promise((resolve) => {
rl.question(question, (answer) => {
@@ -392,7 +367,6 @@ async function interactiveBuilder(): Promise {
try {
console.log(chalk.blue.bold('🚀 Guided CTA URL builder\n'))
- // Get base URL with validation
let baseUrl = ''
while (!baseUrl) {
const input = await prompt('Enter the base URL (e.g., https://github.com/features/copilot): ')
@@ -406,7 +380,6 @@ async function interactiveBuilder(): Promise {
const params: CTAParams = {}
- // Required parameters
console.log(chalk.white(`\nRequired parameters:`))
const schemaProps = ctaSchema.properties as CTASchemaProperties
@@ -442,7 +415,6 @@ async function interactiveBuilder(): Promise {
}
}
- // Validate parameters
const validation = validateCTAParams(params)
if (!validation.isValid) {
@@ -454,7 +426,6 @@ async function interactiveBuilder(): Promise {
return
}
- // Build and display URL
const ctaUrl = buildCTAUrl(baseUrl, params)
console.log(chalk.green('\n✅ CTA URL generated successfully!'))
@@ -477,7 +448,6 @@ async function interactiveBuilder(): Promise {
}
}
-// Convert URLs command handler
async function convertUrls(options: { url?: string; quiet?: boolean }): Promise {
try {
if (!options.quiet) {
@@ -540,7 +510,6 @@ async function convertUrls(options: { url?: string; quiet?: boolean }): Promise<
// The convert command doesn't use readline, so script should exit naturally
}
-// Validate URLs command handler
async function validateUrl(options: { url?: string }): Promise {
try {
console.log(chalk.blue.bold('CTA URL validator'))
@@ -549,7 +518,6 @@ async function validateUrl(options: { url?: string }): Promise {
console.log(chalk.white('\nValidating URL:'))
console.log(chalk.gray(options.url))
- // Extract CTA parameters from URL
let ctaParams: CTAParams
try {
ctaParams = extractCTAParams(options.url)
@@ -558,7 +526,6 @@ async function validateUrl(options: { url?: string }): Promise {
return
}
- // Check if URL has any CTA parameters
if (Object.keys(ctaParams).length === 0) {
console.log(chalk.yellow('\nℹ️ No CTA parameters found in URL'))
return
@@ -598,7 +565,6 @@ async function validateUrl(options: { url?: string }): Promise {
}
}
-// Programmatic build command handler
async function buildProgrammaticCTA(options: {
url: string
product: string
@@ -607,7 +573,6 @@ async function buildProgrammaticCTA(options: {
plan?: string
}): Promise {
try {
- // Validate base URL
let baseUrl: string
try {
baseUrl = new URL(options.url).toString()
@@ -618,19 +583,16 @@ async function buildProgrammaticCTA(options: {
process.exit(1)
}
- // Build CTA parameters object
const params: CTAParams = {
ref_product: options.product,
ref_type: options.type,
ref_style: options.style,
}
- // Add optional parameters
if (options.plan) {
params.ref_plan = options.plan
}
- // Validate parameters against schema
const validation = validateCTAParams(params)
if (!validation.isValid) {
// Output validation errors to stderr and exit with error code
@@ -640,7 +602,6 @@ async function buildProgrammaticCTA(options: {
process.exit(1)
}
- // Build and output the URL (stdout only)
const ctaUrl = buildCTAUrl(baseUrl, params)
console.log(ctaUrl)
} catch (error) {
diff --git a/src/content-render/scripts/liquid-tags.ts b/src/content-render/scripts/liquid-tags.ts
index e15a3e3ab6f4..e24fdf6cfc73 100644
--- a/src/content-render/scripts/liquid-tags.ts
+++ b/src/content-render/scripts/liquid-tags.ts
@@ -11,7 +11,6 @@ import path from 'path'
import { load, dump } from 'js-yaml'
import chalk from 'chalk'
-// Type definitions
interface ExpandOptions {
paths: string[]
verbose?: boolean
@@ -30,7 +29,6 @@ interface LiquidReference {
endIndex: number
}
-// Constants
const ROOT = process.env.ROOT || '.'
const DATA_ROOT = path.resolve(path.join(ROOT, 'data'))
const REUSABLES_ROOT = path.join(DATA_ROOT, 'reusables')
@@ -43,14 +41,9 @@ function getErrorMessage(error: unknown): string {
// Regex pattern to match expanded content blocks
const EXPANDED_PATTERN = /(.+?)/gs
-/**
- * Get the file path for a data reference
- *
- * Validates and normalizes the incoming dataPath to prevent path traversal
- * and ensure the final resolved path remains within the expected root.
- */
+// Validates and normalizes the incoming dataPath to prevent path traversal
+// and ensure the final resolved path remains within the expected root.
function getDataFilePath(type: 'reusable' | 'variable', dataPath: string): string {
- // Basic validation of the raw dataPath
if (path.isAbsolute(dataPath)) {
throw new Error(`Invalid ${type} data path: absolute paths are not allowed: ${dataPath}`)
}
@@ -89,9 +82,6 @@ function getDataFilePath(type: 'reusable' | 'variable', dataPath: string): strin
}
}
-/**
- * Convert a file path back to data path format (for consistent verbose output)
- */
function convertFilePathToDataPath(filePath: string): string {
const normalizedPath = path.normalize(filePath)
@@ -134,9 +124,6 @@ program
program.parse()
-/**
- * Get allowed types based on command options
- */
function getAllowedTypes(options: ExpandOptions): Array<'reusable' | 'variable'> {
if (options.reusablesOnly && options.variablesOnly) {
console.log(
@@ -155,13 +142,9 @@ function getAllowedTypes(options: ExpandOptions): Array<'reusable' | 'variable'>
return ['variable']
}
- // Default: process both types
return ['reusable', 'variable']
}
-/**
- * Expand Liquid data references in content files
- */
async function expandReferences(options: ExpandOptions): Promise {
const { paths, verbose, markers, shallow } = options
// markers will be true by default, false when --no-markers is used
@@ -217,7 +200,6 @@ async function expandReferences(options: ExpandOptions): Promise {
}
}
- // Check for remaining references
const remainingRefs = findLiquidReferences(expandedContent, allowedTypes)
hasRemainingRefs = remainingRefs.length > 0
@@ -278,9 +260,6 @@ async function expandReferences(options: ExpandOptions): Promise {
}
}
-/**
- * Restore content by restoring original Liquid statements from HTML comments
- */
async function restoreReferences(options: ExpandOptions): Promise {
const { paths, verbose } = options
const allowedTypes = getAllowedTypes(options)
@@ -306,7 +285,6 @@ async function restoreReferences(options: ExpandOptions): Promise {
const content = fs.readFileSync(filePath, 'utf-8')
- // Check for content edits before restoring
const hasEdits = await detectContentEdits(content, verbose, allowedTypes)
if (hasEdits) {
console.log(
@@ -361,9 +339,6 @@ async function restoreReferences(options: ExpandOptions): Promise {
}
}
-/**
- * Expand all Liquid data references in file content
- */
async function expandFileContent(
content: string,
filePath: string,
@@ -421,14 +396,10 @@ async function expandFileContent(
}
}
- // Note: Remaining reference detection is now handled in expandReferences function for recursive mode
-
+ // expandReferences handles remaining-reference detection in recursive mode.
return expandedContent
}
-/**
- * Detect if expanded content has been edited by comparing with original data
- */
async function detectContentEdits(
content: string,
verbose?: boolean,
@@ -441,7 +412,6 @@ async function detectContentEdits(
const [, type, dataPath, resolvedContent] = match
const refType = type as 'reusable' | 'variable'
- // Only check if this type is allowed
if (!allowedTypes || allowedTypes.includes(refType)) {
try {
// Load the original content from data files
@@ -478,9 +448,6 @@ async function detectContentEdits(
return hasEdits
}
-/**
- * Load data value from file system (helper for edit detection)
- */
function loadDataValue(type: 'reusable' | 'variable', dataPath: string): string | null {
try {
const targetPath = getDataFilePath(type, dataPath)
@@ -498,7 +465,6 @@ function loadDataValue(type: 'reusable' | 'variable', dataPath: string): string
const yamlContent = fs.readFileSync(targetPath, 'utf8')
const data = load(yamlContent) as Record
- // Navigate to the nested property
const pathParts = dataPath.split('.')
let current: unknown = data
for (let i = 1; i < pathParts.length; i++) {
@@ -517,9 +483,6 @@ function loadDataValue(type: 'reusable' | 'variable', dataPath: string): string
return null
}
-/**
- * Restore content by restoring original Liquid statements
- */
function restoreFileContent(
content: string,
verbose?: boolean,
@@ -528,7 +491,6 @@ function restoreFileContent(
return content.replace(EXPANDED_PATTERN, (match, type, dataPath) => {
const refType = type as 'reusable' | 'variable'
- // Only restore if this type is allowed
if (!allowedTypes || allowedTypes.includes(refType)) {
const originalLiquid = `{% data ${type}s.${dataPath} %}`
@@ -539,15 +501,10 @@ function restoreFileContent(
return originalLiquid
}
- // Return unchanged if type is not allowed
return match
})
}
-/**
- * Update data files with content from expanded blocks
- * Returns array of file paths that were updated
- */
function updateDataFiles(
filePath: string,
verbose?: boolean,
@@ -564,7 +521,6 @@ function updateDataFiles(
return []
}
- // Group updates by file path
const updatesByFile = new Map()
for (const update of updates) {
const key = `${update.type}:${update.path}`
@@ -576,7 +532,6 @@ function updateDataFiles(
const updatedFiles: string[] = []
- // Apply updates to each data file
for (const [key, contents] of updatesByFile) {
const [type, dataPath] = key.split(':')
const targetFilePath = applyDataUpdates(
@@ -594,9 +549,6 @@ function updateDataFiles(
return updatedFiles
}
-/**
- * Extract data updates from expanded content blocks
- */
function extractDataUpdates(
content: string,
allowedTypes?: Array<'reusable' | 'variable'>,
@@ -608,13 +560,11 @@ function extractDataUpdates(
const [, type, dataPath, resolvedContent] = match
const refType = type as 'reusable' | 'variable'
- // Only include if this type is allowed
if (!allowedTypes || allowedTypes.includes(refType)) {
// Check if this content was actually changed before including it
try {
const originalContent = loadDataValue(refType, dataPath.trim())
if (originalContent !== null && resolvedContent.trim() !== originalContent.trim()) {
- // Only add to updates if content was actually changed
updates.push({
type: refType,
path: dataPath.trim(),
@@ -635,10 +585,6 @@ function extractDataUpdates(
return updates
}
-/**
- * Apply updates to a specific data file
- * Returns the file path if file was updated, null otherwise
- */
function applyDataUpdates(
type: 'reusable' | 'variable',
dataPath: string,
@@ -648,7 +594,6 @@ function applyDataUpdates(
): string | null {
const targetPath = getDataFilePath(type, dataPath)
- // Check if file exists
if (!fs.existsSync(targetPath)) {
if (verbose) {
console.log(chalk.red(` Error: Data file not found: ${targetPath}`))
@@ -701,7 +646,6 @@ function applyDataUpdates(
const yamlContent = fs.readFileSync(targetPath, 'utf8')
const data = load(yamlContent) as Record
- // Navigate to the nested property
const pathParts = dataPath.split('.')
const propertyPath = pathParts.slice(1) // Skip the file name
@@ -713,7 +657,6 @@ function applyDataUpdates(
current = current[propertyPath[i]] as Record
}
- // Update the final property
const finalKey = propertyPath[propertyPath.length - 1]
if (contents.length > 1) {
console.log(
@@ -728,7 +671,6 @@ function applyDataUpdates(
const finalYaml =
hasTrailingNewline && !yamlOutput.endsWith('\n') ? `${yamlOutput}\n` : yamlOutput
- // Write back to file
fs.writeFileSync(targetPath, finalYaml)
if (verbose) {
console.log(chalk.green(` Updated: ${type}s.${dataPath}`))
@@ -743,9 +685,6 @@ function applyDataUpdates(
}
}
-/**
- * Find all Liquid data references in content
- */
function findLiquidReferences(
content: string,
allowedTypes?: Array<'reusable' | 'variable'>,
@@ -761,7 +700,6 @@ function findLiquidReferences(
const [original, type, dataPath] = match
const refType = type.slice(0, -1) as 'reusable' | 'variable' // Remove 's' from end
- // Only include if this type is allowed
if (types.includes(refType)) {
references.push({
original,
@@ -776,9 +714,6 @@ function findLiquidReferences(
return references
}
-/**
- * Resolve a single Liquid data reference to its content
- */
async function resolveLiquidReference(
ref: LiquidReference,
verbose?: boolean,
@@ -798,9 +733,6 @@ async function resolveLiquidReference(
return null
}
-/**
- * Resolve a reusable reference by reading the markdown file
- */
async function resolveReusable(reusablePath: string, verbose?: boolean): Promise {
const filePath = getDataFilePath('reusable', reusablePath)
@@ -826,9 +758,6 @@ async function resolveReusable(reusablePath: string, verbose?: boolean): Promise
}
}
-/**
- * Resolve a variable reference by reading from YAML files
- */
async function resolveVariable(variablePath: string, verbose?: boolean): Promise {
const pathParts = variablePath.split('.')
@@ -866,7 +795,6 @@ async function resolveVariable(variablePath: string, verbose?: boolean): Promise
}
}
- // Convert value to string
if (typeof value === 'string') {
return value
} else if (value !== null && value !== undefined) {
diff --git a/src/content-render/scripts/move-by-content-type.ts b/src/content-render/scripts/move-by-content-type.ts
index c64ef0ed27fc..e7773d92d881 100644
--- a/src/content-render/scripts/move-by-content-type.ts
+++ b/src/content-render/scripts/move-by-content-type.ts
@@ -26,7 +26,6 @@ const contentTypeToDir = (contentType: string): string => {
const validContentTypeDirs = new Set(CONTENT_TYPES.map(contentTypeToDir))
-// Helper: Should we skip this index.md file from processing?
function shouldSkipIndexFile(filePath: string): boolean {
const relativePath = path.relative(process.cwd(), filePath)
const parts = relativePath.split(path.sep)
@@ -44,17 +43,14 @@ function shouldSkipIndexFile(filePath: string): boolean {
return false
}
-// Helper: Calculate target directory for a file
function calculateTarget(filePath: string, contentType: string, productDir: string) {
const relativePath = path.relative(process.cwd(), filePath)
const parts = relativePath.split(path.sep)
const contentIndex = parts.indexOf('content')
const fileName = path.basename(filePath)
- // Determine target content-type directory
const targetContentType = contentTypeToDir(contentType)
- // Calculate target path
if (targetContentType === 'how-tos') {
// Preserve subdirectory structure for how-tos
const pathAfterProduct = parts.slice(contentIndex + 2, -1)
@@ -85,9 +81,7 @@ program
.description('Reorganize content files into subdirectories based on their contentType property')
.argument('[paths...]', 'Content paths to process')
.action(async (paths: string[]) => {
- // ====================
- // 1. GATHER FILES
- // ====================
+ // Gather files.
const filesToProcess: string[] = []
if (paths?.length > 0) {
for (const p of paths) {
@@ -104,9 +98,6 @@ program
console.log(chalk.white(`Processing ${filesToProcess.length} files...\n`))
- // ====================
- // 2. ANALYZE & PLAN MOVES
- // ====================
console.log(chalk.white('Analyzing files...\n'))
const filesToMove: FileMove[] = []
@@ -125,7 +116,6 @@ program
continue
}
- // Read and validate contentType
const fileContent = await fs.readFile(filePath, 'utf-8')
const { data } = readFrontmatter(fileContent)
@@ -145,7 +135,6 @@ program
continue
}
- // Validate contentType
if (!CONTENT_TYPES.includes(contentType)) {
skipped.push({ file: relativePath, reason: `Invalid contentType: ${contentType}` })
console.log(
@@ -154,7 +143,6 @@ program
continue
}
- // Get product directory
if (contentIndex === -1 || contentIndex + 1 >= parts.length) {
console.log(
chalk.yellow(`⚠ Skipping ${relativePath}: Cannot determine product directory`),
@@ -168,13 +156,10 @@ program
if (contentType === 'rai') productsWithRai.add(productName)
- // Calculate target
const { targetDir, targetPath } = calculateTarget(filePath, contentType, productDir)
- // Skip if already in correct location
if (path.dirname(filePath) === targetDir) continue
- // Skip if target exists
try {
await fs.access(targetPath)
skipped.push({ file: relativePath, reason: 'Target already exists' })
@@ -184,7 +169,6 @@ program
// Good, doesn't exist
}
- // Track this move
filesToMove.push({ filePath, targetDir, targetPath, contentType })
const relativeTargetDir = path.relative(process.cwd(), targetDir)
@@ -209,9 +193,6 @@ program
}
}
- // ====================
- // 3. ENSURE STANDARD DIRECTORIES
- // ====================
console.log(chalk.white('Ensuring standard content-type directories exist...\n'))
// Add standard content-type directories for each affected product
@@ -236,9 +217,6 @@ program
}
}
- // ====================
- // 4. CREATE PLACEHOLDERS
- // ====================
console.log(chalk.white('Creating placeholder index.md files...\n'))
const newPlaceholders: string[] = []
@@ -295,9 +273,6 @@ contentType: ${placeholderContentType}
}
}
- // ====================
- // 5. GENERATE INTROS
- // ====================
if (newPlaceholders.length > 0) {
console.log(chalk.white('\nGenerating intros for placeholder files...\n'))
@@ -337,9 +312,6 @@ contentType: ${placeholderContentType}
}
}
- // ====================
- // 6. MOVE FILES
- // ====================
console.log(chalk.white('\nMoving files...\n'))
const moved: Array<{ file: string; from: string; to: string }> = []
@@ -397,7 +369,6 @@ contentType: ${placeholderContentType}
}
}
- // Move regular files
for (const file of regularFiles) {
try {
await fs.mkdir(file.targetDir, { recursive: true })
@@ -427,7 +398,6 @@ contentType: ${placeholderContentType}
}
}
- // Delete source subdirectory index files
for (const sourcePath of indexFilesToDeleteLater) {
try {
await fs.unlink(sourcePath)
@@ -437,7 +407,6 @@ contentType: ${placeholderContentType}
}
}
- // Move top-level index files
for (const file of topLevelIndexFiles) {
try {
await fs.mkdir(file.targetDir, { recursive: true })
@@ -462,9 +431,6 @@ contentType: ${placeholderContentType}
}
}
- // ====================
- // 7. CLEANUP & UPDATE
- // ====================
console.log(
chalk.white('\nCleaning up old directories and updating parent index.md files...\n'),
)
@@ -498,7 +464,6 @@ contentType: ${placeholderContentType}
console.log(chalk.yellow(`⚠ Could not read product directory ${productDir}: ${error}`))
}
- // Update product index.md
const productIndexPath = path.join(productDir, 'index.md')
try {
const content = await fs.readFile(productIndexPath, 'utf-8')
@@ -507,7 +472,6 @@ contentType: ${placeholderContentType}
if (data) {
let updated = false
- // Build children array
const productRelativePath = path.relative(process.cwd(), productDir)
const newChildren: string[] = []
for (const ct of CONTENT_TYPES.map(contentTypeToDir)) {
@@ -520,7 +484,6 @@ contentType: ${placeholderContentType}
updated = true
}
- // Add redirects for deleted directories
const deletedPaths = deletedByProduct.get(productName) || []
if (deletedPaths.length > 0) {
if (!data.redirect_from) data.redirect_from = []
@@ -551,9 +514,6 @@ contentType: ${placeholderContentType}
}
}
- // ====================
- // 8. SORT CHILDREN ARRAYS
- // ====================
console.log(chalk.white('\nSorting children arrays...\n'))
for (const dirPath of targetDirs) {
@@ -612,9 +572,6 @@ contentType: ${placeholderContentType}
}
}
- // ====================
- // 9. SUMMARY
- // ====================
console.log(chalk.white(`\n${'='.repeat(60)}`))
console.log(chalk.white('Summary:'))
console.log(chalk.white(` Moved: ${moved.length} files`))
diff --git a/src/content-render/scripts/move-content.ts b/src/content-render/scripts/move-content.ts
index 6bbdcb1a0635..004cb880363d 100755
--- a/src/content-render/scripts/move-content.ts
+++ b/src/content-render/scripts/move-content.ts
@@ -33,7 +33,6 @@ import escapeStringRegexp from 'escape-string-regexp'
import fm from '@/frame/lib/frontmatter'
import readFrontmatter from '@/frame/lib/read-frontmatter'
-// Type definitions
interface MoveOptions {
verbose: boolean
undo: boolean
@@ -156,8 +155,7 @@ async function main(opts: MoveOptions, nameTuple: string[]) {
if (!fs.existsSync(indexFilePath)) {
throw new Error(`${oldPath} does not have an index.md file`)
}
- // Gather individual files by walking `oldPath` recursively
- // The second argument is
+ // Gather individual files by walking `oldPath` recursively.
const files = findFilesInFolder(oldPath, newPath, opts)
// First take care of the `git mv` (or regular rename) part.
diff --git a/src/content-render/scripts/reusables-cli/find/potential-uses.ts b/src/content-render/scripts/reusables-cli/find/potential-uses.ts
index cb423a475038..c0827117caa9 100644
--- a/src/content-render/scripts/reusables-cli/find/potential-uses.ts
+++ b/src/content-render/scripts/reusables-cli/find/potential-uses.ts
@@ -26,7 +26,6 @@ export function findPotentialUses({
const filesThatCouldUseReusable: FilesWithLineNumbers = []
const filesThatCouldUseReusableSimilar: FilesWithSimilarity = []
- // Read all content & data files into memory
const allFileContents = allFilePaths.map((filePath) => {
return {
filePath,
@@ -69,7 +68,6 @@ export function findPotentialUses({
const indices = findIndicesOfSubstringInString(reusableContents.trim(), fileContents)
if (indices.length > 0) {
- // Find line numbers of each index in fileContents
const lineNumbers = indices.map((index) => fileContents.slice(0, index).split('\n').length)
filesThatCouldUseReusable.push({
diff --git a/src/content-render/scripts/reusables-cli/find/used.ts b/src/content-render/scripts/reusables-cli/find/used.ts
index 589b87e12e6c..6f56c31512d6 100644
--- a/src/content-render/scripts/reusables-cli/find/used.ts
+++ b/src/content-render/scripts/reusables-cli/find/used.ts
@@ -33,7 +33,6 @@ export function findUsed(reusablePath: string, { absolute }: { absolute: boolean
const indices = getIndicesOfLiquidVariable(reusableLiquidVar, fileContents)
if (indices.length > 0) {
- // Find line numbers of each index in fileContents
const lineNumbers = indices.map((index) => fileContents.slice(0, index).split('\n').length)
filesWithReusables.push({
diff --git a/src/content-render/scripts/reusables-cli/shared.ts b/src/content-render/scripts/reusables-cli/shared.ts
index 792f48828bdc..c04e24725d15 100644
--- a/src/content-render/scripts/reusables-cli/shared.ts
+++ b/src/content-render/scripts/reusables-cli/shared.ts
@@ -48,7 +48,6 @@ export function getAllContentFilePaths() {
return [...allContentFiles, ...allDataFiles]
}
-// Get the string that represents the reusable in the content files
export function getReusableLiquidString(reusablePath: string): string {
const relativePath = path.relative(reusablesDirectory, reusablePath)
return `reusables.${relativePath.slice(0, -3).split('/').join('.')}`
@@ -73,7 +72,6 @@ export function getIndicesOfLiquidVariable(liquidVariable: string, fileContents:
return indices
}
-// Find the path to a reusable file.
export function resolveReusablePath(reusablePath: string): string {
// Try .md if extension is not provided
if (!reusablePath.endsWith('.md') && !reusablePath.endsWith('.yml')) {
@@ -150,7 +148,6 @@ export function findSimilarSubStringInString(substr: string, str: string) {
}
}
- // Normalize the similarity score
return Math.round((similarityScore / substrSentences.length) * corpus.length)
}
diff --git a/src/content-render/scripts/update-filepaths.ts b/src/content-render/scripts/update-filepaths.ts
index f86693010639..7760d5c7b441 100755
--- a/src/content-render/scripts/update-filepaths.ts
+++ b/src/content-render/scripts/update-filepaths.ts
@@ -101,13 +101,11 @@ async function processFile(
const isDirectory = isDirectoryCheck(file)
- // Assess the frontmatter and other conditions to determine if we want to process the path.
const processPage: boolean = determineProcessStatus(data, isDirectory, scriptOptions)
if (!processPage) return null
let stringToSlugify: string = data.shortTitle || data.title
- // Check if we need to process Liquid
if (stringToSlugify.includes('{%')) {
stringToSlugify = await renderContent(stringToSlugify, context, { textOnly: true })
}
@@ -118,7 +116,6 @@ async function processFile(
// Fall back to title if shortTitle doesn't exist.
const slug: string = slugger.slug(decode(stringToSlugify))
- // Get the basename, depending on whether it's a file or dir.
let basename: string
if (isDirectory) {
// Where: content location = content/foobar/index.md
@@ -133,12 +130,10 @@ async function processFile(
// If slug and basename already match, all set here. Return early.
if (slug === basename) return null
- // Build the new path based on file type.
const newPath = isDirectory
? path.join(path.dirname(path.dirname(file)), slug, 'index.md')
: path.join(path.dirname(file), `${slug}.md`)
- // Get relative paths and adjust for directories.
const getContentPath = (filePath: string): string => {
const relativePath = path.relative(process.cwd(), filePath)
return isDirectory ? path.dirname(relativePath) : relativePath
@@ -187,26 +182,21 @@ function sortFiles(filesArray: string[]): string[] {
// 2. Deepest subdirectory path
// 3. Shallowest subdirectory path (up to category level, e.g., content/product/category)
return filesArray.toSorted((a, b) => {
- // If A is a file and B is a directory, A comes first (negative)
if (!isDirectoryCheck(a) && isDirectoryCheck(b)) {
return -1
}
- // If A is a directory and B is a file, B comes first (positive)
if (isDirectoryCheck(a) && !isDirectoryCheck(b)) {
return 1
}
- // If A and B are both files, neutral
if (!isDirectoryCheck(a) && !isDirectoryCheck(b)) {
return 0
}
- // If both are directories, sort by depth (deepest first)
if (isDirectoryCheck(a) && isDirectoryCheck(b)) {
const aDepth = a.split(path.sep).length
const bDepth = b.split(path.sep).length
return bDepth - aDepth // Deeper paths first
}
- // This should never be reached, but return 0 for safety
return 0
})
}
@@ -246,20 +236,16 @@ function determineProcessStatus(
isDirectory: boolean,
scriptOptions: ScriptOptions,
): boolean {
- // Assess the conditions in this order:
- // If it's a directory AND we're excluding dirs, do not process it no matter what.
+ // A directory is never processed when dirs are excluded, whatever else is set.
if (isDirectory && scriptOptions.excludeDirs) {
return false
}
- // If the force option is passed, process it no matter what.
if (scriptOptions.force) {
return true
}
- // If the page has the override set, do not process it.
if (data.allowTitleToDifferFromFilename) {
return false
}
- // In all other cases, process it.
return true
}
diff --git a/src/content-render/tests/annotate.ts b/src/content-render/tests/annotate.ts
index 20083164d3bf..c47a78d6fb76 100644
--- a/src/content-render/tests/annotate.ts
+++ b/src/content-render/tests/annotate.ts
@@ -22,33 +22,27 @@ describe('annotate', () => {
const res = await renderContent(example)
const $ = load(res)
- // Check that the annotation structure is rendered correctly
const annotation = $('.annotate')
expect(annotation.length).toBe(1)
expect(annotation.hasClass('beside')).toBe(true)
- // Check annotation header exists
const header = $('.annotate-header')
expect(header.length).toBe(1)
- // Check both beside and inline modes are rendered
const beside = $('.annotate-beside')
const inline = $('.annotate-inline')
expect(beside.length).toBe(1)
expect(inline.length).toBe(1)
- // Check that we have the correct number of annotation rows
const rows = $('.annotate-row')
expect(rows.length).toBe(2)
- // Check that each row has both code and note sections
rows.each((i, row) => {
const $row = $(row)
expect($row.find('.annotate-code').length).toBe(1)
expect($row.find('.annotate-note').length).toBe(1)
})
- // Check specific content of the annotations
const notes = $('.annotate-note p')
const noteTexts = notes.map((i, el) => $(el).text()).get()
expect(noteTexts).toEqual([
@@ -56,7 +50,6 @@ describe('annotate', () => {
'Add the pull_request event, so that the workflow runs automatically\nevery time a pull request is created.',
])
- // Check code content
const codes = $('.annotate-code pre')
const codeTexts = codes.map((i, el) => $(el).text()).get()
expect(codeTexts).toEqual([
@@ -157,7 +150,6 @@ on: [push]
const rows = $('.annotate-row')
const notes = $('.annotate-note', rows)
- // Check that AUTOTITLE links were resolved to actual titles
const firstNote = notes.eq(0).html()
const secondNote = notes.eq(1).html()
diff --git a/src/content-render/tests/copilot-code-blocks.ts b/src/content-render/tests/copilot-code-blocks.ts
index 51209f95663e..2dfe76d6b4c2 100644
--- a/src/content-render/tests/copilot-code-blocks.ts
+++ b/src/content-render/tests/copilot-code-blocks.ts
@@ -18,11 +18,8 @@ describe('code-header plugin', () => {
const html = await renderContent(markdown)
- // Should keep copilot as the language (not convert to text without copy meta)
expect(html).toContain('language-copilot')
- // Should NOT wrap in code-example div since no copy meta
expect(html).not.toContain('code-example')
- // Should NOT have header since no copy meta
expect(html).not.toContain(' {
const html = await renderContent(markdown)
- // Should be wrapped in code-example div
expect(html).toContain('code-example')
- // Should have header with copy button
expect(html).toContain(' {
const html = await renderContent(markdown)
- // Should be wrapped in code-example div
expect(html).toContain('code-example')
- // Should have header
expect(html).toContain(' {
const html = await renderContent(markdown)
- // Should be wrapped in code-example div
expect(html).toContain('code-example')
- // Should have header with copy button
expect(html).toContain(' {
let mockContext: Context
beforeEach(async () => {
- // Set up file system mocking
fs = await import('fs')
originalReadFileSync = fs.default.readFileSync
originalExistsSync = fs.default.existsSync
fs.default.existsSync = () => true
- // Set up basic mock context
mockContext = {
currentLanguage: 'en',
currentVersion: 'free-pro-team@latest',
@@ -30,13 +28,11 @@ describe('link error line numbers', () => {
})
afterEach(() => {
- // Restore original functions
fs.default.readFileSync = originalReadFileSync
fs.default.existsSync = originalExistsSync
})
test('reports correct line numbers for broken AUTOTITLE links', async () => {
- // Test content with frontmatter followed by content with a broken link
const template = `---
title: Test Page
version: 1.0
@@ -72,7 +68,6 @@ More content here.`
fullPath: '/fake/test-file-2.md',
} as unknown as Context['page']
- // Test with more extensive frontmatter
const template = `---
title: Another Test Page
description: This is a test
@@ -109,7 +104,6 @@ Content with a [AUTOTITLE](/another/nonexistent/page) link.`
fullPath: '/fake/no-frontmatter.md',
} as unknown as Context['page']
- // Test content without frontmatter
const template = `# Simple Title
This is content without frontmatter.
@@ -148,7 +142,6 @@ title: Message Test
} catch (error) {
expect(error).toBeInstanceOf(TitleFromAutotitleError)
- // Check that the new error message format is used
expect((error as TitleFromAutotitleError).message).toContain(
'could not be resolved in one or more versions',
)
@@ -157,7 +150,6 @@ title: Message Test
)
expect((error as TitleFromAutotitleError).message).toContain('/test/broken/link')
- // Check that the old error message format is NOT used
expect((error as TitleFromAutotitleError).message).not.toContain('Unable to find Page by')
expect((error as TitleFromAutotitleError).message).not.toContain('To fix it, look at')
}
diff --git a/src/content-render/tests/liquid-tags.ts b/src/content-render/tests/liquid-tags.ts
index 0209be92c090..db28d494733b 100644
--- a/src/content-render/tests/liquid-tags.ts
+++ b/src/content-render/tests/liquid-tags.ts
@@ -10,16 +10,13 @@ describe('liquid-tags script integration tests', () => {
vi.setConfig({ testTimeout: 60 * 1000 })
beforeEach(async () => {
- // Create test directory
await fs.mkdir(testContentDir, { recursive: true })
})
afterEach(async () => {
- // Clean up test files
await fs.rm(testContentDir, { recursive: true, force: true })
})
- // Helper function to run script commands
async function runScript(args: string): Promise<{ output: string; exitCode: number }> {
let output = ''
let exitCode = 0
@@ -41,7 +38,6 @@ describe('liquid-tags script integration tests', () => {
}
test('expand command should complete successfully with basic content', async () => {
- // Create a test file with liquid reference
const testFile = path.join(testContentDir, 'basic-test.md')
const testContent = `---
title: Test
@@ -54,11 +50,9 @@ This uses {% data variables.product.prodname_dotcom %} in content.
const { output, exitCode } = await runScript(`expand --paths "${testFile}"`)
- // Should complete without error
expect(exitCode, `Script failed with output: ${output}`).toBe(0)
expect(output.length).toBeGreaterThan(0)
- // Check that the file was modified
const expandedContent = await fs.readFile(testFile, 'utf8')
expect(expandedContent).not.toBe(testContent)
expect(expandedContent).toContain('GitHub') // Should expand to actual fixture value
@@ -75,16 +69,13 @@ This uses {% data variables.product.prodname_dotcom %} in content.
await fs.writeFile(testFile, originalContent)
- // First expand
await runScript(`expand --paths "${testFile}"`)
- // Then restore
const { output, exitCode } = await runScript(`restore --paths "${testFile}"`)
expect(exitCode, `Restore script failed with output: ${output}`).toBe(0)
expect(output.length).toBeGreaterThan(0)
- // Should be back to original liquid tags
const restoredContent = await fs.readFile(testFile, 'utf8')
expect(restoredContent).toContain('{% data variables.product.prodname_dotcom %}')
expect(restoredContent).not.toContain('GitHub')
diff --git a/src/content-render/tests/prompt-id.ts b/src/content-render/tests/prompt-id.ts
index ce7441e8832b..71e046b0fd48 100644
--- a/src/content-render/tests/prompt-id.ts
+++ b/src/content-render/tests/prompt-id.ts
@@ -55,7 +55,6 @@ describe('generatePromptId', () => {
expect(typeof id).toBe('string')
expect(id.length).toBeGreaterThan(0)
- // Should be different from just the prompt text alone
expect(id).not.toBe(generatePromptId(promptText))
})
diff --git a/src/content-render/tests/prompt.ts b/src/content-render/tests/prompt.ts
index 65de51fea1c3..e8e250e166e1 100644
--- a/src/content-render/tests/prompt.ts
+++ b/src/content-render/tests/prompt.ts
@@ -6,18 +6,14 @@ describe('prompt tag', () => {
const input: string = 'Here is your prompt: {% prompt %}example prompt text{% endprompt %}.'
const output: string = await renderContent(input)
- // Should have code element with ID
expect(output).toContain(' {
+ const context = contextFor('free-pro-team@latest')
+ const output = await liquid.parseAndRender('{{ value | render_liquid }}', {
+ ...context,
+ value: 42,
+ })
+ expect(output).toBe('42')
+ })
+})
diff --git a/src/content-render/types.ts b/src/content-render/types.ts
index 1f01894583a0..b23e94106e9f 100644
--- a/src/content-render/types.ts
+++ b/src/content-render/types.ts
@@ -1,10 +1,3 @@
-/**
- * Types for the content-render module
- */
-
-/**
- * Context interface for content rendering operations
- */
export interface Context {
currentLanguage?: string
autotitleLanguage?: string
@@ -20,9 +13,6 @@ export interface Context {
[key: string]: unknown
}
-/**
- * Options for rendering operations
- */
export interface RenderOptions {
cache?: boolean | ((template: string, context: Context) => string | null)
filename?: string
@@ -30,22 +20,13 @@ export interface RenderOptions {
[key: string]: unknown
}
-/**
- * Unified processor plugin function type
- */
export type UnifiedPlugin = (context?: Context) => unknown
-/**
- * VFile interface for unified processing
- */
export interface VFile {
toString(): string
[key: string]: unknown
}
-/**
- * Unified processor interface
- */
export interface UnifiedProcessor {
process(content: string): Promise
use(plugin: unknown, ...args: unknown[]): UnifiedProcessor
diff --git a/src/content-render/unified/annotate.ts b/src/content-render/unified/annotate.ts
index 3b0c98272c33..120acb615e87 100644
--- a/src/content-render/unified/annotate.ts
+++ b/src/content-render/unified/annotate.ts
@@ -134,17 +134,13 @@ function createAnnotatedNode(node: ElementNode, context: Context): Element {
const lang = node.children[0].properties!.className![0].replace('language-', '')
const code = node.children[0].children![0].value as string
- // Check the code is parse-able
validate(lang, code)
- // Group into code and notes
const lines = code.split('\n').filter(hasChar)
const groups = chunkBy(lines, matchComment(lang))
- // Group groups into rows
const rows = chunk(groups, 2)
- // Check the rows are formatted correctly
for (const [note, codeBlock] of rows) {
if (note === undefined || codeBlock === undefined) {
throw new Error(
@@ -153,7 +149,6 @@ function createAnnotatedNode(node: ElementNode, context: Context): Element {
}
}
- // Render the HTML
return template({ lang, code, rows, context })
}
@@ -278,20 +273,16 @@ function template({
function mdToHast(text: string, context: Context): Nodes {
const mdast: Root = fromMarkdown(text)
- // Process AUTOTITLE links
processAutotitleInMdast(mdast, context)
return toHast(mdast)
}
-// Helper method to process AUTOTITLE links in MDAST
-// This can be reused for other MDAST processing that needs AUTOTITLE support
function processAutotitleInMdast(mdast: Root, context: Context): void {
visit(mdast, 'link', (node) => {
if (node.url && node.url.startsWith('/')) {
for (const child of node.children) {
if (child.type === 'text' && /^\s*AUTOTITLE\s*$/.test(child.value)) {
- // Find the page and get its title
const page = findPage(node.url, context.pages, context.redirects)
if (page) {
try {
diff --git a/src/content-render/unified/collect-mini-toc.ts b/src/content-render/unified/collect-mini-toc.ts
index bbd8b8a82722..de6be1a1d569 100644
--- a/src/content-render/unified/collect-mini-toc.ts
+++ b/src/content-render/unified/collect-mini-toc.ts
@@ -64,7 +64,6 @@ const collectMiniToc: Plugin<[CollectMiniTocOptions], Root> = ({ collectInto })
const title = textChildren.map((child) => toString(child)).join('')
- // Detect platform from ghd-tool ancestor
let platform = ''
for (const anc of ancestors) {
if (anc.type === 'element' && hasClassName(anc as Element, 'ghd-tool')) {
diff --git a/src/content-render/unified/copilot-prompt.ts b/src/content-render/unified/copilot-prompt.ts
index 6b8e463e48ba..69eb3b7b7236 100644
--- a/src/content-render/unified/copilot-prompt.ts
+++ b/src/content-render/unified/copilot-prompt.ts
@@ -47,7 +47,6 @@ function buildPromptData(
tree: Root,
code: string,
): { promptContent: string; ariaLabel: string } {
- // Find a ref meta in the format 'ref='
const ref = getPreMeta(node).ref
if (!ref) {
diff --git a/src/content-render/unified/module-types.d.ts b/src/content-render/unified/module-types.d.ts
index 60c0cf6d00a9..298ecdc023c5 100644
--- a/src/content-render/unified/module-types.d.ts
+++ b/src/content-render/unified/module-types.d.ts
@@ -1,7 +1,3 @@
-/**
- * Type declarations for modules without TypeScript definitions
- */
-
declare module 'remark-gemoji-to-emoji' {
import type { Plugin } from 'unified'
const plugin: Plugin
diff --git a/src/content-render/unified/rewrite-local-links.ts b/src/content-render/unified/rewrite-local-links.ts
index 6596969de7f4..727ccef09a8e 100644
--- a/src/content-render/unified/rewrite-local-links.ts
+++ b/src/content-render/unified/rewrite-local-links.ts
@@ -278,13 +278,11 @@ function getNewHref(node: LinkNode, languageCode: string, version: string): stri
// start clean with no language (TOC pages already include the lang codes via lib/liquid-tags/link.ts)
const hrefWithoutLang = getPathWithoutLanguage(url)
- // normalize any legacy links so they conform to new link structure
newHref = path.posix.join('/', languageCode, getNewVersionedPath(hrefWithoutLang))
- // get the current version from the link
const versionFromHref = getVersionStringFromPath(newHref)
- // ------ BEGIN ONE-OFF OVERRIDES ------//
+ // One-off overrides:
// desktop links always point to dotcom
if (patterns.desktop.test(hrefWithoutLang)) {
version = nonEnterpriseDefaultVersion
@@ -294,9 +292,7 @@ function getNewHref(node: LinkNode, languageCode: string, version: string): stri
if (patterns.adminProduct.test(hrefWithoutLang) && version === nonEnterpriseDefaultVersion) {
version = 'enterprise-cloud@latest'
}
- // ------ END ONE-OFF OVERRIDES ------//
- // update the version in the link
newHref = newHref.replace(versionFromHref, version)
}
newHref = removeFPTFromPath(newHref)
diff --git a/src/content-render/unified/rewrite-table-captions.ts b/src/content-render/unified/rewrite-table-captions.ts
index aa898ee8ddc5..2c4fdd3b1d4b 100644
--- a/src/content-render/unified/rewrite-table-captions.ts
+++ b/src/content-render/unified/rewrite-table-captions.ts
@@ -3,11 +3,9 @@ import type { Node, Parent } from 'unist'
import type { Element, Text } from 'hast'
/**
- * A rehype plugin that automatically adds aria-labelledby attributes to tables
- * based on their preceding headings for accessibility.
- *
- * This plugin improves table accessibility by ensuring screen readers can
- * announce table names when users navigate with the 'T' shortcut key.
+ * Adds aria-labelledby to tables, pointing at the nearest preceding heading,
+ * so screen readers announce a table name when users navigate with the 'T'
+ * shortcut key.
*
* Transforms this structure:
*
@@ -24,12 +22,6 @@ import type { Element, Text } from 'hast'
* ...
* ...
*
- *
- * The plugin works by:
- * 1. Finding table elements in the HTML AST
- * 2. Looking backwards for the nearest preceding heading with an id
- * 3. Adding aria-labelledby attribute pointing to that heading's id
- * 4. Skipping tables that already have accessibility attributes
*/
interface HeadingInfo {
@@ -67,12 +59,10 @@ function hasExistingCaption(tableNode: Element): boolean {
function findPrecedingHeading(parent: Parent, tableIndex: number): HeadingInfo | null {
if (!parent.children || tableIndex === 0) return null
- // Look backwards from the table position for the nearest heading
for (let i = tableIndex - 1; i >= 0; i--) {
const node = parent.children[i]
if (isHeadingElement(node)) {
- // Check if the heading has an id attribute
const headingId = node.properties?.id
if (headingId) {
return {
@@ -122,13 +112,11 @@ export default function addTableAccessibilityLabels() {
return
}
- // Find the preceding heading
const precedingHeading = findPrecedingHeading(parent, index)
if (!precedingHeading) {
return
}
- // Add aria-labelledby attribute to the table
if (!node.properties) {
node.properties = {}
}
diff --git a/src/content-render/unified/text-only.ts b/src/content-render/unified/text-only.ts
index d0a581c37ed8..2f9e6a9b25ff 100644
--- a/src/content-render/unified/text-only.ts
+++ b/src/content-render/unified/text-only.ts
@@ -1,7 +1,6 @@
import { decode } from 'html-entities'
// Strip all HTML tags, leaving only text content.
-// Handles nested tags like `text with code
`.
const TAG_RE = /<[^>]+>/g
// Given a piece of HTML return it without HTML. E.g.
diff --git a/src/content-render/unified/use-english-headings.ts b/src/content-render/unified/use-english-headings.ts
index 0109be6be74a..b48fcd1f9044 100644
--- a/src/content-render/unified/use-english-headings.ts
+++ b/src/content-render/unified/use-english-headings.ts
@@ -17,13 +17,9 @@ export default function useEnglishHeadings({ englishHeadings }: UseEnglishHeadin
visit(tree, 'element', (node: Element) => {
if (!['h2', 'h3', 'h4'].includes(node.tagName)) return
slugger.reset()
- // Get the plain text content of the heading node
const text: string = toString(node)
- // find English heading in the collection
const englishHeading: string = englishHeadings[encode(text)]
- // get English slug
const englishSlug: string = slugger.slug(englishHeading)
- // use English slug for heading ID and link
if (englishSlug) {
// only use English slug if there is one, otherwise we'll end up with
// empty IDs
diff --git a/src/data-directory/lib/data-directory.ts b/src/data-directory/lib/data-directory.ts
index 6098eb0e7f60..05e7049d93a6 100644
--- a/src/data-directory/lib/data-directory.ts
+++ b/src/data-directory/lib/data-directory.ts
@@ -31,21 +31,17 @@ export default function dataDirectory(
const mergedOpts = Object.assign({}, defaultOpts, opts)
- // validate input
assert(Array.isArray(mergedOpts.ignorePatterns))
assert(mergedOpts.ignorePatterns.every(isRegExp))
assert(Array.isArray(mergedOpts.extensions))
assert(mergedOpts.extensions.length)
- // start with an empty data object
const data: DataDirectoryResult = {}
// find YAML and Markdown files in the given directory, recursively
const filenames = walk(dir, { includeBasePath: true }).filter((filename: string) => {
- // ignore files that match any of ignorePatterns regexes
if (mergedOpts.ignorePatterns.some((pattern) => pattern.test(filename))) return false
- // ignore files that don't have a whitelisted file extension
return mergedOpts.extensions.includes(path.extname(filename).toLowerCase())
})
diff --git a/src/data-directory/lib/data-schemas/index.ts b/src/data-directory/lib/data-schemas/index.ts
index c0c394b4e8cf..bd157c2afb63 100644
--- a/src/data-directory/lib/data-schemas/index.ts
+++ b/src/data-directory/lib/data-schemas/index.ts
@@ -8,9 +8,7 @@ interface DataSchemas {
[key: string]: string
}
-// Helper function to resolve schema paths based on runtime context
function resolveSchemaPath(filename: string): string {
- // Check if we're in a test context
const isTest = process.env.NODE_ENV === 'test'
if (isTest) {
@@ -37,7 +35,6 @@ function loadTableSchemas(): DataSchemas {
const schemaPath = path.join(schemasDir, `${name}.ts`)
if (fs.existsSync(schemaPath)) {
- // Use the resolver for consistent path handling
tableSchemas[`data/tables/${yamlFile}`] = resolveSchemaPath(`tables/${name}.ts`)
}
}
@@ -61,7 +58,6 @@ const manualSchemas: DataSchemas = {
'data/tables/copilot/matrix-meta.yml': resolveSchemaPath('tables/copilot/matrix-meta.ts'),
}
-// Combine manual registrations with auto-discovered table schemas
const dataSchemas: DataSchemas = {
...manualSchemas,
...loadTableSchemas(),
diff --git a/src/data-directory/lib/data-schemas/tables/repository-roles.ts b/src/data-directory/lib/data-schemas/tables/repository-roles.ts
new file mode 100644
index 000000000000..6774b9739d4b
--- /dev/null
+++ b/src/data-directory/lib/data-schemas/tables/repository-roles.ts
@@ -0,0 +1,39 @@
+// This schema enforces the structure in data/tables/repository-roles.yml
+
+const row = {
+ type: 'object',
+ additionalProperties: false,
+ required: ['action', 'roles'],
+ properties: {
+ action: {
+ type: 'string',
+ lintable: true,
+ },
+ // Liquid that renders non-empty when the row should be shown. When omitted,
+ // the row is shown on every version.
+ versions: {
+ type: 'string',
+ },
+ // Comma separated list of the roles that can perform the action. Roles left
+ // out render as no. May contain Liquid, so a single role can be conditional.
+ roles: {
+ type: 'string',
+ },
+ },
+}
+
+export default {
+ type: 'object',
+ additionalProperties: false,
+ required: ['permissions', 'securityFeatures'],
+ properties: {
+ permissions: {
+ type: 'array',
+ items: row,
+ },
+ securityFeatures: {
+ type: 'array',
+ items: row,
+ },
+ },
+}
diff --git a/src/data-directory/lib/filename-to-key.ts b/src/data-directory/lib/filename-to-key.ts
index 2680b0ce5626..a13bf343f676 100644
--- a/src/data-directory/lib/filename-to-key.ts
+++ b/src/data-directory/lib/filename-to-key.ts
@@ -1,7 +1,6 @@
import path from 'path'
import { escapeRegExp } from 'lodash-es'
-// slash at the beginning of a filename
const leadingPathSeparator = new RegExp(`^${escapeRegExp(path.sep)}`)
const windowsLeadingPathSeparator = new RegExp('^/')
diff --git a/src/data-directory/middleware/data-tables.ts b/src/data-directory/middleware/data-tables.ts
index a29086e9f08c..8edf5262f938 100644
--- a/src/data-directory/middleware/data-tables.ts
+++ b/src/data-directory/middleware/data-tables.ts
@@ -4,7 +4,6 @@ import { getDeepDataByLanguage } from '@/data-directory/lib/get-data'
let tablesCache: Record | null = null
-// Lazy loading function
const getTables = () => {
if (!tablesCache) {
// Keep product-name-heavy reference tables in English only for now
@@ -13,10 +12,7 @@ const getTables = () => {
return tablesCache
}
-/**
- * Middleware that loads data-driven table content into the request context.
- * Tables are sourced from YAML files in data/tables/ directory.
- */
+// Loads the YAML files under data/tables/ into req.context.
export default async function dataTables(req: ExtendedRequest, res: Response, next: NextFunction) {
if (!req.context) throw new Error('request not contextualized')
diff --git a/src/data-directory/scripts/find-orphaned-features/find.ts b/src/data-directory/scripts/find-orphaned-features/find.ts
index e3ca4fd3861d..2398738b896c 100644
--- a/src/data-directory/scripts/find-orphaned-features/find.ts
+++ b/src/data-directory/scripts/find-orphaned-features/find.ts
@@ -156,7 +156,7 @@ function searchAndRemove(features: Set, pages: Page[], verbose = false)
// them in, we'll need the English equivalent content to be able to
// use the correctTranslatedContentStrings function.
- // Check variables files
+ // Check the English variable files.
for (const filePath of getVariableFiles(path.join(languages.en.dir, 'data', 'variables'))) {
const fileContent = fs.readFileSync(filePath, 'utf-8')
checkString(fileContent, features, { filePath, verbose, languageCode: 'en' })
diff --git a/src/data-directory/tests/get-data.ts b/src/data-directory/tests/get-data.ts
index d9f72f74a09c..7b3a0414f929 100644
--- a/src/data-directory/tests/get-data.ts
+++ b/src/data-directory/tests/get-data.ts
@@ -73,7 +73,6 @@ describe('get-data', () => {
})
test('getDataByLanguage variables English', () => {
- // The most basic test
{
const result = getDataByLanguage('variables.stuff.foo', 'en')
expect(result).toBe('Foo')
@@ -91,7 +90,6 @@ describe('get-data', () => {
})
test('getDataByLanguage variables with non-English', () => {
- // The most basic test
{
const result = getDataByLanguage('variables.stuff.foo', 'ja')
expect(result).toBe('フー')
@@ -109,7 +107,6 @@ describe('get-data', () => {
})
test('getDataByLanguage variables failures', () => {
- // The most basic test
{
const result = getDataByLanguage('variables.stuff.key_non_existent', 'en')
expect(result).toBeUndefined()
@@ -127,7 +124,6 @@ describe('get-data', () => {
})
test('getDataByLanguage reusables English', () => {
- // The most basic test
{
const result = getDataByLanguage('reusables.coolness', 'en')
expect(result).toBe('This is *Markdown*')
@@ -140,7 +136,6 @@ describe('get-data', () => {
})
test('getDataByLanguage reusables non-English', () => {
- // The most basic test
{
const result = getDataByLanguage('reusables.coolness', 'ja')
expect(result).toBe('これがマークダウンです')
@@ -153,7 +148,6 @@ describe('get-data', () => {
})
test('getDataByLanguage failures', () => {
- // The most basic test
{
const result = getDataByLanguage('reusables.neverheardof', 'en')
expect(result).toBeUndefined()
@@ -166,7 +160,6 @@ describe('get-data', () => {
})
test('getUIDataMerged', () => {
- // The most basic test
{
const result = getUIDataMerged('en')
expect(result.key).toBe('Value')
@@ -183,7 +176,6 @@ describe('get-data', () => {
})
test('getDeepDataByLanguage', () => {
- // The most basic test
{
const result = getDeepDataByLanguage('variables', 'en')
expect((result.stuff as Record).foo).toBe('Foo')
@@ -329,7 +321,7 @@ describe('get-data applies corrections to translated variables', () => {
name: '{% データ variables.myproduct.name %}',
},
phases: {
- // Not corrupted — should pass through unchanged
+ // Not corrupted, so it should pass through unchanged
preview: '{% ifversion ghes < 3.16 %}ベータ{% else %}パブリックプレビュー{% endif %}',
},
},
diff --git a/src/data-directory/tests/orphaned-features.ts b/src/data-directory/tests/orphaned-features.ts
index 404178ba5efd..ea931b6b4f21 100644
--- a/src/data-directory/tests/orphaned-features.ts
+++ b/src/data-directory/tests/orphaned-features.ts
@@ -7,7 +7,6 @@ import { describe, expect, test } from 'vitest'
const __dirname = path.dirname(fileURLToPath(import.meta.url))
const fixturesDir = path.join(__dirname, 'orphaned-features', 'fixtures')
-// Import the actual helper functions from the orphaned features script
const { getVariableFiles, getReusableFiles } =
await import('@/data-directory/scripts/find-orphaned-features/find')
@@ -16,11 +15,9 @@ describe('orphaned features detection', () => {
const variablesDir = path.join(fixturesDir, 'data', 'variables')
const variableFiles = getVariableFiles(variablesDir)
- // Should find our test.yml file
expect(variableFiles).toHaveLength(1)
expect(variableFiles[0]).toMatch(/test\.yml$/)
- // Verify the file exists and contains expected content
const testVariableContent = fs.readFileSync(variableFiles[0], 'utf-8')
expect(testVariableContent).toContain('used-in-variables')
expect(testVariableContent).toContain('ifversion')
@@ -30,11 +27,9 @@ describe('orphaned features detection', () => {
const reusablesDir = path.join(fixturesDir, 'data', 'reusables')
const reusableFiles = getReusableFiles(reusablesDir)
- // Should find our test.md file
expect(reusableFiles).toHaveLength(1)
expect(reusableFiles[0]).toMatch(/test\.md$/)
- // Verify the file exists and contains expected content
const testReusableContent = fs.readFileSync(reusableFiles[0], 'utf-8')
expect(testReusableContent).toContain('used-in-reusables')
expect(testReusableContent).toContain('ifversion')
@@ -48,7 +43,6 @@ describe('orphaned features detection', () => {
const content = fs.readFileSync(testVariableFile, 'utf-8')
- // Verify the test file has the expected feature usage patterns
expect(content).toContain('{% ifversion used-in-variables %}')
expect(content).toContain('test_variable_with_feature')
expect(content).toContain('complex_variable')
@@ -60,30 +54,25 @@ describe('orphaned features detection', () => {
const nestedVariablesDir = path.join(tempDir, 'variables', 'nested')
const nestedReusablesDir = path.join(tempDir, 'reusables', 'nested')
- // Create directories
fs.mkdirSync(nestedVariablesDir, { recursive: true })
fs.mkdirSync(nestedReusablesDir, { recursive: true })
- // Create test files
fs.writeFileSync(path.join(nestedVariablesDir, 'nested.yml'), 'test: value')
fs.writeFileSync(path.join(nestedReusablesDir, 'nested.md'), '# Test content')
fs.writeFileSync(path.join(tempDir, 'variables', 'root.yml'), 'root: value')
fs.writeFileSync(path.join(tempDir, 'reusables', 'root.md'), '# Root content')
try {
- // Test getVariableFiles with nested structure
const variableFiles = getVariableFiles(path.join(tempDir, 'variables'))
expect(variableFiles).toHaveLength(2)
expect(variableFiles.some((f) => f.includes('nested.yml'))).toBe(true)
expect(variableFiles.some((f) => f.includes('root.yml'))).toBe(true)
- // Test getReusableFiles with nested structure
const reusableFiles = getReusableFiles(path.join(tempDir, 'reusables'))
expect(reusableFiles).toHaveLength(2)
expect(reusableFiles.some((f) => f.includes('nested.md'))).toBe(true)
expect(reusableFiles.some((f) => f.includes('root.md'))).toBe(true)
} finally {
- // Clean up
fs.rmSync(tempDir, { recursive: true, force: true })
}
})
@@ -93,7 +82,6 @@ describe('orphaned features detection', () => {
const tempDir = path.join(__dirname, 'temp-mixed-files')
fs.mkdirSync(tempDir, { recursive: true })
- // Create various file types
fs.writeFileSync(path.join(tempDir, 'test.yml'), 'yml: content')
fs.writeFileSync(path.join(tempDir, 'test.md'), '# MD content')
fs.writeFileSync(path.join(tempDir, 'test.json'), '{"json": true}')
@@ -112,7 +100,6 @@ describe('orphaned features detection', () => {
expect(reusableFiles).toHaveLength(1)
expect(reusableFiles[0]).toMatch(/test\.md$/)
} finally {
- // Clean up
fs.rmSync(tempDir, { recursive: true, force: true })
}
})
@@ -128,11 +115,9 @@ describe('orphaned features detection', () => {
expect(fs.existsSync(path.join(featuresDir, 'used-in-variables.yml'))).toBe(true)
expect(fs.existsSync(path.join(featuresDir, 'truly-orphaned.yml'))).toBe(true)
- // Check that the variable file references the feature
const variableContent = fs.readFileSync(path.join(variablesDir, 'test.yml'), 'utf-8')
expect(variableContent).toContain('used-in-variables')
- // Verify that the getVariableFiles function would find this file
const variableFiles = getVariableFiles(variablesDir)
expect(variableFiles.length).toBeGreaterThan(0)
@@ -152,7 +137,6 @@ describe('orphaned features detection', () => {
const tempDir = path.join(__dirname, 'temp-mixed-target-files')
fs.mkdirSync(tempDir, { recursive: true })
- // Create files that both functions might encounter
fs.writeFileSync(
path.join(tempDir, 'variables.yml'),
'var: {% ifversion test-feature %}enabled{% endif %}',
@@ -174,11 +158,9 @@ describe('orphaned features detection', () => {
expect(reusableFiles).toHaveLength(1)
expect(reusableFiles[0]).toMatch(/reusable\.md$/)
- // Verify no cross-contamination
expect(variableFiles.some((f) => f.endsWith('.md'))).toBe(false)
expect(reusableFiles.some((f) => f.endsWith('.yml'))).toBe(false)
} finally {
- // Clean up
fs.rmSync(tempDir, { recursive: true, force: true })
}
})
diff --git a/src/events/components/Survey.tsx b/src/events/components/Survey.tsx
index 624e717494bc..63ee60eb6664 100644
--- a/src/events/components/Survey.tsx
+++ b/src/events/components/Survey.tsx
@@ -1,7 +1,6 @@
import React, { useState, useRef, useEffect } from 'react'
import cx from 'classnames'
import { useRouter } from 'next/router'
-import { ThumbsdownIcon, ThumbsupIcon } from '@primer/octicons-react'
import { useTranslation } from '@/languages/components/useTranslation'
import { Link } from '@/frame/components/Link'
@@ -111,7 +110,7 @@ export const Survey = () => {
data-testid="survey-form"
aria-live="polite"
>
- {t`able_to_find`}
+ {t`able_to_find`}
{/* Honeypot: token isn't a real field */}
{
)}
htmlFor="survey-yes"
>
- {t`feedback`}
)}
-
- {t`privacy_policy`}
-
+ {(voteState || state === ViewState.END) && (
+
+ {t`privacy_policy`}
+
+ )}
)
}
diff --git a/src/fixtures/fixtures/data/ui.yml b/src/fixtures/fixtures/data/ui.yml
index 7b4565bf4036..812d976a5b0d 100644
--- a/src/fixtures/fixtures/data/ui.yml
+++ b/src/fixtures/fixtures/data/ui.yml
@@ -93,7 +93,10 @@ search_results:
n_results: '{n} results'
search_validation_error: Validation error with search query
filter: Filter
- clear_filter: Clear
+ clear_all_filters: Clear all
+ show_filters: Show filters
+ hide_filters: Hide filters
+ filter_search_results: Filter search results
homepage:
explore_by_product: Explore by product
@@ -131,7 +134,7 @@ support:
ask_community: Ask the GitHub community
survey:
- able_to_find: Did you find what you needed?
+ able_to_find: Was this Doc helpful?
yes: Yes
no: No
cancel: Cancel
@@ -147,8 +150,8 @@ survey:
server_error: Unable to process comment at the moment. Please try again.
contribution_cta:
- title: Help us make these docs great!
- body: All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request.
+ title: Help us make GitHub Docs great!
+ body: All Docs are open source. See something that's wrong or unclear? Submit a pull request.
button: Make a contribution
to_guidelines: Learn how to contribute
@@ -314,6 +317,7 @@ webhooks:
footer:
support_heading: Help and support
legal_heading: Legal
+ back_to_top: Back to top
imprint: Imprint
terms: Terms
privacy: Privacy
diff --git a/src/fixtures/playwright.config.ts b/src/fixtures/playwright.config.ts
index 9ba48a14ccaf..7d4e382171aa 100644
--- a/src/fixtures/playwright.config.ts
+++ b/src/fixtures/playwright.config.ts
@@ -1,11 +1,5 @@
import { defineConfig } from '@playwright/test'
-/**
- * Read environment variables from file.
- * https://github.com/motdotla/dotenv
- */
-// require('dotenv').config();
-
const CI = Boolean(JSON.parse(process.env.CI || 'false'))
const PLAYWRIGHT_START_SERVER_COMMAND =
@@ -36,7 +30,6 @@ const EXPECT_TIMEOUT = process.env.PLAYWRIGHT_EXPECT_TIMEOUT
*/
export default defineConfig({
testDir: './tests',
- /* Maximum time one test can run for. */
timeout: TIMEOUT,
expect: {
/**
@@ -45,13 +38,9 @@ export default defineConfig({
*/
timeout: EXPECT_TIMEOUT,
},
- /* Run tests in files in parallel */
fullyParallel: true,
- /* Fail the build on CI if you accidentally left test.only in the source code. */
forbidOnly: !!process.env.CI,
- /* Retry on CI only */
retries: RETRIES,
- /* Opt out of parallel tests on CI. */
workers: process.env.PLAYWRIGHT_WORKERS
? JSON.parse(process.env.PLAYWRIGHT_WORKERS)
: CI
@@ -63,14 +52,12 @@ export default defineConfig({
use: {
/* Maximum time each action such as `click()` can take. Defaults to 0 (no limit). */
actionTimeout: 0,
- /* Base URL to use in actions like `await page.goto('/')`. */
baseURL: 'http://localhost:4000',
/* Collect trace when retrying the failed test. See https://playwright.dev/docs/trace-viewer */
trace: 'on-first-retry',
},
- /* Configure projects for major browsers */
projects: [
// {
// name: 'chromium',
@@ -125,7 +112,6 @@ export default defineConfig({
/* Folder for test artifacts such as screenshots, videos, traces, etc. */
// outputDir: 'test-results/',
- /* Run your local dev server before starting the tests */
webServer: {
command: PLAYWRIGHT_START_SERVER_COMMAND,
port: 4000,
diff --git a/src/fixtures/tests/api-article-body.ts b/src/fixtures/tests/api-article-body.ts
index 05006793549c..fb4d3de6d23a 100644
--- a/src/fixtures/tests/api-article-body.ts
+++ b/src/fixtures/tests/api-article-body.ts
@@ -55,9 +55,7 @@ describe('article body api', () => {
const res = await get(makeURL('/en/get-started/start-your-journey/api-article-body-test-page'))
expect(res.statusCode).toBe(200)
- // Should not contain frontmatter
expect(res.body).not.toMatch(/^---/)
- // Should have at least one heading
expect(res.body).toMatch(/^#{1,6}\s+\w+/m)
})
@@ -80,21 +78,17 @@ describe('article body api', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Should contain all tool-specific content variants
expect(res.body).toContain('')
expect(res.body).toContain('')
expect(res.body).toContain('')
- // Should contain the actual content from each tool
expect(res.body).toContain('This is webui content')
expect(res.body).toContain('This is cli content')
expect(res.body).toContain('This is desktop content')
- // Should contain tool-specific sections
expect(res.body).toContain('Webui section specific content')
expect(res.body).toContain('Desktop section specific content')
- // Verify multiple instances of the same tool are preserved
const webuiMatches = res.body.match(//g)
const desktopMatches = res.body.match(//g)
expect(webuiMatches).toBeDefined()
@@ -108,11 +102,9 @@ describe('article body api', () => {
expect(res.statusCode).toBe(200)
expect(res.headers['content-type']).toContain('text/markdown')
- // Should contain both webui and codespaces tool content
expect(res.body).toContain('')
expect(res.body).toContain('')
- // Should contain the actual content from both tools
expect(res.body).toContain('Under your repository name, click **Pull requests**')
expect(res.body).toContain('Open the pull request in your codespace')
expect(res.body).toContain(
@@ -122,7 +114,6 @@ describe('article body api', () => {
'After reviewing the files, you can submit your review directly from Codespaces',
)
- // Verify both tools appear in multiple sections
const webuiMatches = res.body.match(//g)
const codespacesMatches = res.body.match(//g)
expect(webuiMatches).toBeDefined()
@@ -139,7 +130,6 @@ describe('article body api', () => {
),
)
- // Skip test if page doesn't exist in fixture environment
if (res.statusCode === 404) {
console.log('Production page not available in fixture environment, skipping test')
return
@@ -147,11 +137,9 @@ describe('article body api', () => {
expect(res.statusCode).toBe(200)
- // Verify the fix is working - codespaces content should now be present
const hasCodespacesContent = res.body.includes('')
expect(hasCodespacesContent).toBe(true)
- // Also verify that webui content is still present
expect(res.body).toContain('')
})
@@ -164,7 +152,6 @@ describe('article body api', () => {
),
)
- // Skip test if page doesn't exist in fixture environment
if (res.statusCode === 404) {
console.log(
'Production page not available in fixture environment, skipping issue verification test',
@@ -179,11 +166,9 @@ describe('article body api', () => {
expect(res.body).toContain('')
expect(res.body).toContain('')
- // Verify specific codespaces content that was missing before the fix
expect(res.body).toContain('GitHub Codespaces')
expect(res.body).toContain('Open the pull request in a codespace')
- // Ensure both tools are rendered with their respective content
const webuiMatches = res.body.match(//g)
const codespacesMatches = res.body.match(//g)
diff --git a/src/fixtures/tests/categories-and-subcategory.ts b/src/fixtures/tests/categories-and-subcategory.ts
index fcbf6375987d..24aa47af6056 100644
--- a/src/fixtures/tests/categories-and-subcategory.ts
+++ b/src/fixtures/tests/categories-and-subcategory.ts
@@ -17,7 +17,7 @@ describe('subcategories', () => {
expect(
hrefs.every((href: string) => href.startsWith('/en/get-started/start-your-journey/')),
).toBeTruthy()
- // The all resolve to a 200 OK without redirects
+ // They all resolve to a 200 OK without redirects
const responses = await Promise.all(hrefs.map((href: string) => head(href)))
expect(responses.every((r: { statusCode: number }) => r.statusCode === 200)).toBeTruthy()
})
@@ -53,7 +53,7 @@ describe('categories', () => {
// They all have the same prefix
const hrefs = links.map((i: number, el: Element) => $(el).attr('href')).get()
expect(hrefs.every((href: string) => href.startsWith('/en/actions/category/'))).toBeTruthy()
- // The all resolve to a 200 OK without redirects
+ // They all resolve to a 200 OK without redirects
const responses = await Promise.all(hrefs.map((href: string) => head(href)))
expect(responses.every((r: { statusCode: number }) => r.statusCode === 200)).toBeTruthy()
})
diff --git a/src/fixtures/tests/playwright-a11y.spec.ts b/src/fixtures/tests/playwright-a11y.spec.ts
index 5aff5bc5bec9..e3e24039c38d 100644
--- a/src/fixtures/tests/playwright-a11y.spec.ts
+++ b/src/fixtures/tests/playwright-a11y.spec.ts
@@ -2,6 +2,8 @@ import { test, expect } from '@playwright/test'
import AxeBuilder from '@axe-core/playwright'
import { turnOffExperimentsInPage, turnOnExperimentsInPage } from '../helpers/turn-off-experiments'
+const SEARCH_TESTS = !!process.env.ELASTICSEARCH_URL
+
const pages: { [key: string]: string } = {
category: '/actions/category',
codeAnnotations: '/get-started/markdown/code-annotations',
@@ -45,3 +47,35 @@ for (const pageName of Object.keys(pages)) {
})
})
}
+
+// The search facet filters collapse behind a "Show filters" disclosure below
+// Primer Brand's `medium` breakpoint. The scans above run at the default desktop
+// viewport, where that disclosure is display:none, so the expanded panel would
+// otherwise never be scanned.
+test.describe('search filters (narrow viewport)', () => {
+ // Without a local Elasticsearch the middleware proxies to production, so there are no
+ // aggregations, the disclosure never renders, and this would time out rather than
+ // skip. Matches the guard every search test in playwright-rendering.spec.ts uses.
+ test.skip(!SEARCH_TESTS, 'No local Elasticsearch, no tests involving search')
+
+ test('expanded filter disclosure passes axe', async ({ page }) => {
+ await page.setViewportSize({ width: 390, height: 820 })
+ await page.goto('/search?query=foo')
+ await turnOffExperimentsInPage(page)
+
+ const toggle = page.getByTestId('search-filter-toggle')
+ await expect(toggle).toBeVisible()
+ await expect(toggle).toHaveAttribute('aria-expanded', 'false')
+
+ await toggle.click()
+ await expect(toggle).toHaveAttribute('aria-expanded', 'true')
+ // Scoped to the disclosure's own panel: a bare `fieldset` locator would hit strict
+ // mode the moment anything else on the page renders one.
+ const panelId = await toggle.getAttribute('aria-controls')
+ await expect(page.locator(`#${panelId} fieldset`)).toBeVisible()
+
+ const accessibilityScanResults = await new AxeBuilder({ page }).analyze()
+
+ expect(accessibilityScanResults.violations).toEqual([])
+ })
+})
diff --git a/src/fixtures/tests/playwright-rendering.spec.ts b/src/fixtures/tests/playwright-rendering.spec.ts
index 461b8e3643a6..c5e18a7880b8 100644
--- a/src/fixtures/tests/playwright-rendering.spec.ts
+++ b/src/fixtures/tests/playwright-rendering.spec.ts
@@ -145,12 +145,9 @@ test('do a search from home page and click on "Foo" page', async ({ page }) => {
await page.goto('/')
await turnOffExperimentsInPage(page)
- // Use the search overlay
await page.locator('[data-testid="search"]:visible').click()
await page.getByTestId('overlay-search-input').fill('serve playwright')
- // Wait for search results to load
await page.waitForTimeout(1000)
- // Click "View more results" to get to the search page
await page.getByText('View more results').click()
await expect(page).toHaveURL(
@@ -202,9 +199,7 @@ test('open search, and select a general search article', async ({ page }) => {
// Let new suggestions load
const searchOverlay = page.getByTestId('general-autocomplete-suggestions')
await expect(searchOverlay.getByText('For Playwright')).toBeVisible()
- // Navigate to general search item, "For Playwright"
await page.keyboard.press('ArrowDown')
- // Select the general search item, "For Playwright"
await page.keyboard.press('Enter')
// We should now be on the page for "For Playwright"
@@ -241,9 +236,7 @@ test('open search, and get auto-complete results', async ({ page }) => {
await expect(searchInput).toBeVisible()
await expect(searchInput).toBeEnabled()
- // Type the text "rest" into the search input
await searchInput.fill('rest')
- // For for 1 second for the suggestions to load
await page.waitForTimeout(1000)
// Ask AI suggestions
@@ -267,12 +260,9 @@ test('search from enterprise-cloud and filter by top-level Fooing', async ({ pag
await page.goto('/enterprise-cloud@latest')
await turnOffExperimentsInPage(page)
- // Use the search overlay
await page.locator('[data-testid="search"]:visible').click()
await page.getByTestId('overlay-search-input').fill('fixture')
- // Wait for search results to load
await page.waitForTimeout(1000)
- // Click "View more results" to get to the search page
await page.getByText('View more results').click()
// Now we're on the search results page, apply the filter
@@ -309,7 +299,7 @@ test.describe('platform picker', () => {
})
test('minitoc matches picker', async ({ page }) => {
- // default platform set to windows in fixture fronmatter
+ // The fixture frontmatter defaults the platform to Windows.
await page.goto('/get-started/liquid/platform-specific')
await turnOffExperimentsInPage(page)
await expect(
@@ -450,12 +440,10 @@ test('navigate with side bar into article inside a subcategory inside a category
})
test('sidebar custom link functionality works', async ({ page }) => {
- // Test that sidebar functionality is not broken by custom links feature
await page.goto('/get-started')
await expect(page).toHaveTitle(/Getting started with HubGit/)
- // Verify that regular sidebar navigation still works by clicking on known sections
await page.getByTestId('product-sidebar').getByText('Start your journey').click()
await page.getByTestId('product-sidebar').getByText('Hello World').click()
await expect(page).toHaveURL(/\/en\/get-started\/start-your-journey\/hello-world/)
@@ -550,7 +538,6 @@ test.describe('hover cards', () => {
),
).toBeVisible()
- // Press Escape to close it
await page.keyboard.press('Escape')
await expect(
page.getByText(
@@ -574,7 +561,6 @@ test.describe('hover cards', () => {
),
).toBeVisible()
- // click the Esc key to close the hovercard
await page.keyboard.press('Escape')
await expect(
page.getByText(
@@ -603,7 +589,7 @@ test.describe('test nav at different viewports', () => {
await expect(page.getByTestId('breadcrumbs-bar')).toBeVisible()
// breadcrumbs show up in one of the pages that use the AutomatedPage
- // component (e.g. graphql, audit log, etc.) -- we test the webhooks
+ // component (e.g. graphql, audit log). This one uses the webhooks
// reference page here
await page.goto('/webhooks/webhook-events-and-payloads')
await expect(page.getByTestId('breadcrumbs-bar')).toBeVisible()
@@ -627,7 +613,7 @@ test.describe('test nav at different viewports', () => {
height: 700,
})
- // Opening the mobile nav must still render the doc-tree drawer -- before the
+ // Opening the mobile nav must still render the doc-tree drawer. Before the
// fix, `collapsed` short-circuited the sidebar to null while the open state
// hid the content column, leaving a blank area with no drawer.
await page.getByTestId('sidebar-mobile-toggle').click()
@@ -651,7 +637,7 @@ test.describe('test nav at different viewports', () => {
const nav = page.locator('[data-container="nav"]')
await expect(nav).toHaveAttribute('data-mobile-open', 'true')
- // Resize up to the desktop breakpoint -- the inline nav should close and the
+ // Resize up to the desktop breakpoint. The inline nav should close and the
// fixed desktop rail (326px) should take over rather than the full-width
// mobile markup persisting over the page.
await page.setViewportSize({
@@ -669,16 +655,13 @@ test.describe('test nav at different viewports', () => {
})
await page.goto('/get-started/foo/bar')
- // version picker should be visible
await page.getByTestId('version-picker').getByRole('button').click()
expect((await page.getByRole('menuitemradio').all()).length).toBeGreaterThan(0)
await expect(page.getByRole('menuitemradio', { name: 'Enterprise Cloud' })).toBeVisible()
- // language picker is visible
await page.getByRole('button', { name: 'Select language: current language is English' }).click()
await expect(page.getByRole('menuitemradio', { name: 'English' })).toBeVisible()
- // header sign up button is visible
await expect(page.getByTestId('header-signup')).toBeVisible()
})
@@ -707,19 +690,15 @@ test.describe('test nav at different viewports', () => {
})
await page.goto('/get-started/foo/bar')
- // version picker is visible
await page.getByTestId('version-picker').getByRole('button').click()
expect((await page.getByRole('menuitemradio').all()).length).toBeGreaterThan(0)
await expect(page.getByRole('menuitemradio', { name: 'Enterprise Cloud' })).toBeVisible()
- // language picker is in mobile menu
await page.getByTestId('mobile-menu').click()
await expect(page.getByRole('menuitemradio', { name: 'English' })).toBeVisible()
- // sign up button is in mobile menu
await expect(page.getByTestId('mobile-signup')).toBeVisible()
- // hamburger button for sidebar overlay is visible
await expect(page.getByTestId('sidebar-mobile-toggle')).toBeVisible()
await page.getByTestId('sidebar-mobile-toggle').click()
await expect(page.getByTestId('sidebar')).toBeVisible()
@@ -732,23 +711,17 @@ test.describe('test nav at different viewports', () => {
})
await page.goto('/get-started/foo/bar')
- // header sign-up button is not visible
await expect(page.getByTestId('header-signup')).not.toBeVisible()
- // language picker is not visible
await expect(page.getByTestId('language-picker')).not.toBeVisible()
- // version picker is visible
await expect(page.getByTestId('version-picker').getByRole('button')).toBeVisible()
- // language picker is in mobile menu
await page.getByTestId('mobile-menu').click()
await expect(page.getByRole('menuitemradio', { name: 'English' })).toBeVisible()
- // sign up button is in mobile menu
await expect(page.getByTestId('mobile-signup')).toBeVisible()
- // hamburger button for sidebar overlay is visible
await expect(page.getByTestId('sidebar-mobile-toggle')).toBeVisible()
await page.getByTestId('sidebar-mobile-toggle').click()
await expect(page.getByTestId('sidebar')).toBeVisible()
@@ -762,27 +735,20 @@ test.describe('test nav at different viewports', () => {
await page.goto('/get-started/foo/bar')
await turnOffExperimentsInPage(page)
- // header sign-up button is not visible
await expect(page.getByTestId('header-signup')).not.toBeVisible()
- // language picker is not visible
await expect(page.getByTestId('language-picker')).not.toBeVisible()
- // version picker is not visible
await expect(page.getByTestId('version-picker').getByRole('button')).not.toBeVisible()
- // version picker is in mobile menu
await expect(page.getByTestId('version-picker')).not.toBeVisible()
await page.getByTestId('mobile-menu').click()
await expect(page.getByTestId('open-mobile-menu').getByTestId('version-picker')).toBeVisible()
- // language picker is in mobile menu
await expect(page.getByTestId('open-mobile-menu').getByTestId('language-picker')).toBeVisible()
- // sign up button is in mobile menu
await expect(page.getByTestId('mobile-signup')).toBeVisible()
- // hamburger button for sidebar overlay is visible
await expect(page.getByTestId('sidebar-mobile-toggle')).toBeVisible()
await page.getByTestId('sidebar-mobile-toggle').click()
await expect(page.getByTestId('sidebar')).toBeVisible()
@@ -798,12 +764,9 @@ test.describe('test nav at different viewports', () => {
await page.goto('/get-started/foo/bar')
await turnOffExperimentsInPage(page)
- // Use the search overlay
await page.locator('[data-testid="mobile-search-button"]:visible').click()
await page.getByTestId('overlay-search-input').fill('serve playwright')
- // Wait for search results to load
await page.waitForTimeout(1000)
- // Click "View more results" to get to the search page
await page.getByText('View more results').click()
await expect(page).toHaveURL(
@@ -822,12 +785,9 @@ test.describe('test nav at different viewports', () => {
await page.goto('/get-started/foo/bar')
await turnOffExperimentsInPage(page)
- // Use the search overlay
await page.locator('[data-testid="mobile-search-button"]:visible').click()
await page.getByTestId('overlay-search-input').fill('serve playwright')
- // Wait for search results to load
await page.waitForTimeout(1000)
- // Click "View more results" to get to the search page
await page.getByText('View more results').click()
await expect(page).toHaveURL(
@@ -841,7 +801,7 @@ test.describe('secondary-bar breadcrumb scroller', () => {
// The secondary bar (and its breadcrumb scroller) only renders at wide
// viewports, and the fixture trail is short enough to fit there, so we cap the
// scroller width to force a deterministic overflow independent of title
- // lengths — then exercise the chevrons.
+ // lengths, then exercise the chevrons.
test('chevrons scroll one crumb at a time instead of jumping to the ends', async ({ page }) => {
// Smooth-scroll settle waits across several chevron clicks add up past the
// default 5s cap.
diff --git a/src/frame/components/CodeTabsGroup.tsx b/src/frame/components/CodeTabsGroup.tsx
index 2d326d26eb03..d6b701399090 100644
--- a/src/frame/components/CodeTabsGroup.tsx
+++ b/src/frame/components/CodeTabsGroup.tsx
@@ -27,11 +27,11 @@ import { useTranslation } from '@/languages/components/useTranslation'
// React-native replacement for the imperative CodeTabs enhancer (#6619). The old
// component scanned `#article-contents` for `.ghd-codetabs`, inserted a foreign
// `.ghd-codetabs-nav` mountPoint as the container's first child, portaled a nav
-// into it, and toggled panel attributes — destructive surgery on React-owned
-// nodes that breaks on client-side navigation teardown. Instead, the article body
-// hast maps each `.ghd-codetabs` container to , which reads its
-// `.ghd-codetab` panel children straight from props and renders the nav + panels
-// itself. No DOM scanning, no portal, no foreign nodes.
+// into it, and toggled panel attributes. Those mutations are destructive surgery
+// on React-owned nodes and break on client-side navigation teardown. Instead, the
+// article body hast maps each `.ghd-codetabs` container to , which
+// reads its `.ghd-codetab` panel children straight from props and renders the nav
+// and panels itself. No DOM scanning, no portal, no foreign nodes.
//
// The selected language lives in CodeLanguageContext so multiple code-tab groups
// on one page stay in sync and share the language cookie, matching the previous
diff --git a/src/frame/components/DefaultLayout.module.scss b/src/frame/components/DefaultLayout.module.scss
index 9d113e41e172..d71ccc296c89 100644
--- a/src/frame/components/DefaultLayout.module.scss
+++ b/src/frame/components/DefaultLayout.module.scss
@@ -1,10 +1,20 @@
@import "src/frame/stylesheets/breakpoint-xxl.scss";
+@import "@primer/react-brand/lib/design-tokens/scss/tokens/functional/size/breakpoints.scss";
.mainContent {
scroll-margin-top: 5rem;
}
-// When the inline mobile/tablet nav is open, it takes over the viewport — hide
+// The search results page splits into rail + results at brand's `medium`
+// breakpoint rather than waiting for `d-lg-flex` at 1012px, so the facet rail is
+// available on tablets. Applied only on /search.
+.searchColumns {
+ @media (min-width: $brand-breakpoint-medium) {
+ display: flex;
+ }
+}
+
+// When the inline mobile/tablet nav is open, it takes over the viewport, so hide
// the content column so the full-width rail isn't squeezed beside it. Above the
// xxl breakpoint the rail is a fixed-width sibling, so content always shows.
.contentHiddenForNav {
diff --git a/src/frame/components/DefaultLayout.tsx b/src/frame/components/DefaultLayout.tsx
index 68e014aa4261..ea174a327aa8 100644
--- a/src/frame/components/DefaultLayout.tsx
+++ b/src/frame/components/DefaultLayout.tsx
@@ -10,9 +10,7 @@ import {
SidebarCollapseProvider,
useSidebarCollapsed,
} from '@/frame/components/sidebar/SidebarCollapseContext'
-import { LegalFooter } from '@/frame/components/page-footer/LegalFooter'
-import { ScrollButton } from '@/frame/components/ui/ScrollButton'
-import { SupportSection } from '@/frame/components/page-footer/SupportSection'
+import { DocsFooter } from '@/frame/components/page-footer/DocsFooter'
import { DeprecationBanner } from '@/versions/components/DeprecationBanner'
import { RestBanner } from '@/rest/components/RestBanner'
import { useMainContext } from '@/frame/components/context/MainContext'
@@ -41,7 +39,7 @@ export const DefaultLayout = (props: Props) => {
} = mainContext
const xHost = mainContext.xHost
const page = mainContext.page!
- const { t } = useTranslation(['meta', 'scroll_button'])
+ const { t } = useTranslation('meta')
const router = useRouter()
const { languages } = useLanguages()
@@ -119,9 +117,7 @@ export const DefaultLayout = (props: Props) => {
return getCategoryImageUrl('default')
}
- // Helper function to build API article URLs with proper query parameter handling
function buildApiArticleUrl(apiPath: string): string {
- // Parse router.asPath to separate pathname and query parameters
const [pathname, queryString] = router.asPath.split('?')
const fullPathname = `/${router.locale}${pathname}`
const queryParams = queryString ? `&${queryString}` : ''
@@ -234,20 +230,13 @@ export const DefaultLayout = (props: Props) => {
{props.children}
-
+
) : (
<>
{props.children}
+ {props.children}
)}
@@ -260,17 +249,32 @@ export const DefaultLayout = (props: Props) => {
// collapsed; on mobile it shows inline (in the page flow, like desktop) only
// when the nav is opened from the secondary bar. The content column (flex-1)
// fills the row when the rail is absent.
-type LayoutBodyProps = { children?: React.ReactNode; scrollToTopLabel: string }
-const LayoutBody = ({ children, scrollToTopLabel }: LayoutBodyProps) => {
+type LayoutBodyProps = { children?: React.ReactNode }
+const LayoutBody = ({ children }: LayoutBodyProps) => {
const { collapsed, mobileNavOpen } = useSidebarCollapsed()
+ const { currentProduct } = useMainContext()
+ // Matches SidebarNav's own gate rather than testing router.route. There are two search
+ // pages, src/pages/search.tsx and src/pages/[versionId]/search.tsx, so a route test
+ // for '/search' misses every versioned search URL, and this check would then disagree
+ // with SidebarNav about whether the rail is a facet rail.
+ const isSearchResultsPage = currentProduct?.id === 'search'
return (
-
+ // `d-lg-flex` only goes side-by-side at 1012px. The search page's facet rail
+ // is meant to sit beside the results from brand's `medium` breakpoint, so it
+ // gets an earlier split of its own. Route-gated, so no other page moves.
+
{/* `collapsed` is the desktop rail-collapse state (persisted). The inline
- mobile nav is independent, so still render the sidebar when it's open —
- otherwise opening the mobile nav while the desktop rail is collapsed
+ mobile nav is independent, so still render the sidebar when it's open.
+ Otherwise opening the mobile nav while the desktop rail is collapsed
hides the content column (contentHiddenForNav) with no drawer to show,
- so the open nav displays a blank area instead of the doc tree. */}
- {collapsed && !mobileNavOpen ? null : `'s innerHTML —
-// destructive on a React-owned node. Instead, components that render code
+// called `hljs.highlightElement`, which REPLACES the ``'s innerHTML.
+// That is destructive on a React-owned node. Instead, components that render code
// (RestCodeSamples, Webhook) use , which highlights with
// `lowlight` (the hast-based highlighter behind rehype-highlight) and renders the
// tokens as real React elements via `toJsxRuntime`. No innerHTML, no DOM scan.
diff --git a/src/frame/components/UtmPreserver.tsx b/src/frame/components/UtmPreserver.tsx
index e92aad49f6bb..a6805d4bf64a 100644
--- a/src/frame/components/UtmPreserver.tsx
+++ b/src/frame/components/UtmPreserver.tsx
@@ -5,7 +5,6 @@ export const UtmPreserver = () => {
const router = useRouter()
useEffect(() => {
- // Extract UTM parameters from current URL
const getUtmParams = (): URLSearchParams => {
const urlParams = new URLSearchParams(window.location.search)
const utmParams = new URLSearchParams()
@@ -22,7 +21,6 @@ export const UtmPreserver = () => {
const utmParams = getUtmParams()
if (utmParams.toString() === '') return
- // Check if a link should have UTM parameters preserved
const shouldPreserveUtm = (url: string): boolean => {
const lowercaseUrl = url.toLowerCase()
@@ -35,7 +33,6 @@ export const UtmPreserver = () => {
return hasProtocol && isGithubCom && !isDocsGithubCom
}
- // Add UTM parameters to a URL
const addUtmParamsToUrl = (url: string, params: URLSearchParams): string => {
try {
const urlObj = new URL(url)
@@ -46,12 +43,10 @@ export const UtmPreserver = () => {
return urlObj.toString()
} catch {
- // If URL parsing fails, return original URL
return url
}
}
- // Apply UTM parameters to relevant links
const applyUtmToLinks = (): void => {
const links = document.querySelectorAll('a[href]')
@@ -62,7 +57,6 @@ export const UtmPreserver = () => {
}
}
- // Handle click events for dynamic link modification
const handleLinkClick = (event: Event): void => {
const link = (event.target as Element)?.closest('a') as HTMLAnchorElement
if (!link || !link.href) return
@@ -72,7 +66,6 @@ export const UtmPreserver = () => {
}
}
- // Apply UTM parameters immediately to existing links
applyUtmToLinks()
// Also handle clicks for any dynamically added links
@@ -86,13 +79,11 @@ export const UtmPreserver = () => {
router.events.on('routeChangeComplete', handleRouteChange)
- // Cleanup
return () => {
document.removeEventListener('click', handleLinkClick, true)
router.events.off('routeChangeComplete', handleRouteChange)
}
}, [router.asPath, router.events])
- // This component doesn't render anything
return null
}
diff --git a/src/frame/components/context/ArticleContext.tsx b/src/frame/components/context/ArticleContext.tsx
index 2b84f53b0a95..3582e7047469 100644
--- a/src/frame/components/context/ArticleContext.tsx
+++ b/src/frame/components/context/ArticleContext.tsx
@@ -55,7 +55,7 @@ const PagePathToVaFlowMapping: Record = {
'pages_ssl_check',
}
-// Request type for context extraction — uses Record for the page
+// Request type for context extraction. Uses Record for the page
// because the Page type doesn't include all runtime-computed properties.
interface ContextRequest {
context: {
diff --git a/src/frame/components/context/CategoryLandingContext.tsx b/src/frame/components/context/CategoryLandingContext.tsx
index 41da55f48f96..d92d382fb29d 100644
--- a/src/frame/components/context/CategoryLandingContext.tsx
+++ b/src/frame/components/context/CategoryLandingContext.tsx
@@ -32,7 +32,7 @@ export const useCategoryLandingContext = (): CategoryLandingContextT => {
return context
}
-// Request type for context extraction — uses Record for the page
+// Request type for context extraction. Uses Record for the page
// because the Page type doesn't include all runtime-computed properties.
interface ContextRequest {
context: {
diff --git a/src/frame/components/context/TocLandingContext.tsx b/src/frame/components/context/TocLandingContext.tsx
index 7864f3bbbf5b..e69284f5b784 100644
--- a/src/frame/components/context/TocLandingContext.tsx
+++ b/src/frame/components/context/TocLandingContext.tsx
@@ -27,7 +27,7 @@ export const useTocLandingContext = (): TocLandingContextT => {
return context
}
-// Request type for context extraction — uses Record for the page
+// Request type for context extraction. Uses Record for the page
// because the Page type doesn't include all runtime-computed properties.
interface ContextRequest {
context: {
diff --git a/src/frame/components/lib/prefetch.ts b/src/frame/components/lib/prefetch.ts
index 84f7b3833a0c..7213b3cacca0 100644
--- a/src/frame/components/lib/prefetch.ts
+++ b/src/frame/components/lib/prefetch.ts
@@ -4,7 +4,7 @@ import type { useRouter } from 'next/router'
type Router = ReturnType
// Session-lived de-dupe set. Module scope (not a per-component useRef) so it
-// survives the sidebar's per-navigation remount — otherwise the cache would
+// survives the sidebar's per-navigation remount. Otherwise the cache would
// reset every nav and "de-duped per href" would only hold within a single page.
// Bounded by the number of distinct internal hrefs the user hovers/focuses.
const prefetchedHrefs = new Set()
diff --git a/src/frame/components/lib/toggle-annotations.ts b/src/frame/components/lib/toggle-annotations.ts
index cdce002b7821..628391ec7c1e 100644
--- a/src/frame/components/lib/toggle-annotations.ts
+++ b/src/frame/components/lib/toggle-annotations.ts
@@ -8,15 +8,9 @@ enum annotationMode {
Inline = 'inline',
}
-/**
- * Validates if a given mode is one of expected annotation modes. If no acceptable mode is found, a default mode is returned.. Optionally, returns a default mode.
- * @param mode The mode to validate, ideally "#annotation-beside" or "#annotation-inline"
- * @param leaveNull Alters the return value of this function. If false, the function will return the mode that was passed in or, in the case of null, the default mode. If true, the function will return null instead of using the default mode.
- * @returns The validated mode, or null if leaveNull is true and no valid mode is found.
- */
+// Returns the mode if it is 'beside' or 'inline', otherwise falls back to Beside.
function validateMode(mode?: string) {
if (mode === annotationMode.Beside || mode === annotationMode.Inline) return mode
- // default to Beside
else return annotationMode.Beside
}
@@ -24,15 +18,13 @@ export default function toggleAnnotation() {
const annotationButtons = Array.from(document.querySelectorAll('.annotate-toggle button'))
if (!annotationButtons.length) return
- const cookie = validateMode(Cookies.get(ANNOTATE_MODE_COOKIE_NAME)) // will default to beside
+ const cookie = validateMode(Cookies.get(ANNOTATE_MODE_COOKIE_NAME))
displayAnnotationMode(annotationButtons, cookie)
- // this loop adds event listeners for both the annotation buttons
for (const annotationBtn of annotationButtons) {
annotationBtn.addEventListener('click', (evt) => {
evt.preventDefault()
- // validate the annotation mode and set the cookie with the valid mode
const validMode = validateMode(annotationBtn.getAttribute('value')!)
Cookies.set(ANNOTATE_MODE_COOKIE_NAME, validMode!)
sendEvent({
@@ -41,14 +33,15 @@ export default function toggleAnnotation() {
preference_value: validMode,
})
- // set and display the annotation mode
setActive(annotationButtons, validMode)
displayAnnotationMode(annotationButtons, validMode)
})
}
}
-// sets the active element's aria-current, if no targetMode is set we default to "Beside", errors if it can't set either Beside or the passed in targetMode
+// Sets aria-current on every button whose value matches the validated mode, and
+// clears it from the rest. Missing or invalid modes validate to Beside. Throws if
+// no button matches.
function setActive(annotationButtons: Array, targetMode?: string) {
const activeElements: Array = []
targetMode = validateMode(targetMode)
@@ -69,7 +62,6 @@ function setActive(annotationButtons: Array, targetMode?: string) {
return activeElements
}
-// displays the chosen annotation mode
function displayAnnotationMode(annotationBtnItems: Array, targetMode?: string) {
if (!targetMode || targetMode === annotationMode.Beside) {
for (const el of annotationBtnItems) {
diff --git a/src/frame/components/page-footer/Contribution.tsx b/src/frame/components/page-footer/Contribution.tsx
index 17875ec0e82a..0468a0dfd5f8 100644
--- a/src/frame/components/page-footer/Contribution.tsx
+++ b/src/frame/components/page-footer/Contribution.tsx
@@ -1,5 +1,3 @@
-import { GitPullRequestIcon } from '@primer/octicons-react'
-
import { useMainContext } from '@/frame/components/context/MainContext'
import { useTranslation } from '@/languages/components/useTranslation'
@@ -11,19 +9,16 @@ export const Contribution = () => {
? `https://github.com/github/docs/blob/main/content/${relativePath}`
: 'https://github.com/github/docs'
+ // Heading and body styling comes from the footer column rules in
+ // SupportSection.module.scss. The Docs 2026 design renders these as plain body
+ // text rather than a bold heading plus muted copy.
return (
)
}
diff --git a/src/frame/components/page-footer/DocsFooter.module.scss b/src/frame/components/page-footer/DocsFooter.module.scss
new file mode 100644
index 000000000000..bd9d633f43b8
--- /dev/null
+++ b/src/frame/components/page-footer/DocsFooter.module.scss
@@ -0,0 +1,180 @@
+// In dark mode the footer sits on the repo's canvas (#0d1117) while brand's
+// canvas-subtle comes from brand's own palette (#0f1511). Those are near-identical,
+// so the controls would lose their fill and read as bare outlines. Use Primer's
+// surfaces there instead: they're built to contrast with this background. Selector
+// pattern follows octicon-table-optimization.scss.
+@mixin footer-control-surfaces-dark {
+ --color-btn-bg: var(--color-canvas-subtle);
+ --color-btn-border: var(--color-border-default);
+ --color-btn-text: var(--color-fg-default);
+ --brand-footer-backToTop-bgColor-rest: var(--color-canvas-subtle);
+ // Brand's own dark border token is a different grey from Primer's, which would
+ // leave Back to top outlined differently from the three buttons beside it.
+ --brand-footer-backToTop-borderColor-rest: var(--color-border-default);
+}
+
+.docsFooter {
+ // Brand defaults the footer to canvas-subtle (a grey panel); the design puts it on
+ // the page canvas so it reads as continuous with the article and the band above.
+ // Deliberately the *repo's* canvas, not brand's: brand's canvas-default is pure
+ // black in dark mode while these pages sit on #0d1117, which would make the footer
+ // a visibly darker slab.
+ --brand-footer-bg-color: var(--bgColor-default, var(--color-canvas-default));
+
+ // The design draws all four footer controls (Yes, No, Make a contribution and
+ // Back to top) on brand's subtle canvas with a subtle border (#f2f5f3 on #d2d9d4,
+ // which is exactly what these brand tokens resolve to).
+ //
+ // Yes/No and the contribution CTA are Primer `.btn`s, so set the variables they
+ // read rather than overriding the rules: the survey's selected states apply
+ // `color-bg-success-emphasis` / `color-bg-danger-emphasis`, which set
+ // background-color directly and must keep winning over the rest state.
+ --color-btn-bg: var(--brand-color-canvas-subtle);
+ --color-btn-border: var(--brand-color-border-subtle);
+ --color-btn-text: var(--brand-color-text-default);
+
+ // Brand gives Back to top a near-transparent fill by default; the design gives it
+ // the same treatment as the other three. Its border already matches.
+ --brand-footer-backToTop-bgColor-rest: var(--brand-color-canvas-subtle);
+
+ :global([data-color-mode="dark"]) & {
+ @include footer-control-surfaces-dark;
+ }
+
+ @media (prefers-color-scheme: dark) {
+ :global([data-color-mode="auto"][data-dark-theme*="dark"]) & {
+ @include footer-control-surfaces-dark;
+ }
+ }
+
+ // The band above supplies the visual break, and the design puts a 2px emphasized
+ // rule directly beneath it, on the footer's own top edge. Brand's default here is
+ // a much brighter green (scale-green-3), so this stays an explicit override.
+ border-top: 2px solid var(--brand-color-text-emphasized);
+
+ // Brand's section padding is roughly double the design's. Targeted through markers
+ // we own rather than brand's hashed module classes, which change between releases.
+ //
+ // Top bar: 76px in the design, sized by the 44px back-to-top control plus 16px.
+ > div:has(.backToTop) > section {
+ padding-top: var(--base-size-16);
+ padding-bottom: var(--base-size-16);
+ }
+
+ // Help region: the columns own their padding, so the section adds none. Without
+ // this the columns sit 32px below the rule that introduces them, and because the
+ // rules between rows are column borders, those rules would stop short of the
+ // footer edges instead of spanning it as the design shows. The inline inset moves
+ // onto the columns in SupportSection.module.scss so content stays aligned with the
+ // top and bottom bars.
+ > div:has(.centerSlot) > section {
+ padding: 0;
+ }
+
+ // Bottom bar: 76px in the design around a single 18px line.
+ > div:has(.bottomRow) > section {
+ padding-top: var(--base-size-28);
+ padding-bottom: var(--base-size-28);
+ }
+
+ // `copyrightStatement` renders inside a brand that is a flex item of
+ // the bottom row. Let it fill the row so the copyright and links can sit at
+ // opposite ends, and drop the uppercasing the component applies to the whole
+ // (the design uppercases only the copyright, not the links).
+ p:has(> .bottomRow) {
+ flex: 1;
+ // Inert while the bottom row is horizontal (flex-basis wins), but needed at
+ // narrow, where brand's bottom row turns into a column with align-items:
+ // flex-start and would otherwise shrink this to its content width.
+ width: 100%;
+ min-width: 0;
+ text-transform: none;
+ }
+}
+
+.bottomRow {
+ display: flex;
+ flex-wrap: wrap;
+ align-items: center;
+ justify-content: space-between;
+ gap: var(--base-size-16);
+ width: 100%;
+}
+
+.copyrightText {
+ text-transform: uppercase;
+}
+
+// Narrow: the design stacks the legal links above the copyright, and gives each its
+// own band separated by a rule that spans the footer. So the bottom section hands its
+// padding to the two rows, the same move the help region makes, which lets the rule
+// between them reach the edges while both rows stay inset and aligned with each other.
+@media (max-width: 767px) {
+ .docsFooter > div:has(.bottomRow) > section {
+ padding-block: 0;
+ }
+
+ .docsFooter > div:has(.bottomRow) > section > div {
+ padding-inline: 0;
+ }
+
+ .bottomRow {
+ flex-direction: column;
+ align-items: stretch;
+ gap: 0;
+ }
+
+ .legalLinks {
+ order: 1;
+ padding: var(--base-size-20);
+ }
+
+ .copyrightText {
+ order: 2;
+ padding: var(--base-size-20);
+ border-top: 1px solid
+ var(--borderColor-muted, var(--color-border-muted, #d2d9d4));
+ }
+}
+
+.legalLinks {
+ display: flex;
+ flex-wrap: wrap;
+ align-items: center;
+ gap: var(--base-size-24);
+}
+
+.legalLink {
+ // The design sets these apart from the muted monospace copyright: link blue, and
+ // the body font at the same size as the other footer link columns.
+ font-family: var(--brand-body-fontFamily, inherit);
+ font-size: 14px;
+ font-weight: 500;
+ text-transform: none;
+ // Brand's link token, not Primer's accent blue. There is no
+ // `--brand-color-text-link`; the real token is `-rest`, and naming it wrong meant
+ // this quietly fell back to Primer (#0969da) instead of brand (#0055d5).
+ color: var(--brand-color-text-link-rest);
+
+ &:hover {
+ text-decoration: underline;
+ }
+
+ // Pipe separators between links, per the design. Decorative, so a pseudo-element
+ // keeps them out of the accessibility tree and out of the copied text.
+ &:not(:first-child)::before {
+ content: "";
+ display: inline-block;
+ width: 1px;
+ height: 10px;
+ margin-right: var(--base-size-24);
+ vertical-align: -1px;
+ background-color: var(--brand-color-border-subtle);
+ }
+
+ // KO law requires the privacy statement link to be conspicuous.
+ &[data-conspicuous="true"] {
+ color: var(--fgColor-attention, var(--color-fg-attention, #9a6700));
+ font-weight: 600;
+ }
+}
diff --git a/src/frame/components/page-footer/DocsFooter.tsx b/src/frame/components/page-footer/DocsFooter.tsx
new file mode 100644
index 000000000000..d2c29cdbd782
--- /dev/null
+++ b/src/frame/components/page-footer/DocsFooter.tsx
@@ -0,0 +1,137 @@
+import { type MouseEvent } from 'react'
+import { useRouter } from 'next/router'
+import { MinimalFooter, Text } from '@primer/react-brand'
+import cx from 'classnames'
+
+import { FooterDivider } from '@/frame/components/page-footer/FooterDivider'
+import { SupportSection } from '@/frame/components/page-footer/SupportSection'
+import { useTranslation } from '@/languages/components/useTranslation'
+
+import styles from './DocsFooter.module.scss'
+
+// The Docs 2026 site footer (Figma node 123-6013): decorative band, then brand
+// MinimalFooter supplying the logomark + back-to-top row, the help region, and the
+// legal/copyright strip.
+//
+// The design puts the legal links in the *bottom* row beside the copyright.
+// MinimalFooter.Link children render in the top row instead, and the two rows live
+// in separate DOM subtrees so no amount of CSS moves one into the other. Passing the
+// links through `copyrightStatement`, which accepts a ReactElement and renders in
+// the bottom row, gets the designed layout without overriding brand internals.
+// It also sidesteps the component's hard cap of five links.
+//
+// Note `copyrightStatement` is rendered inside a , so everything here
+// must be phrasing content: spans and anchors only, no lists or