Security log events

Note: This article contains the events that may appear in your user account's security log. For the events that can appear in an organization's audit log or the audit log for an enterprise, see "Audit log events for your organization" and "Audit log events for your enterprise."

`oauth_authorization` category actions

Action	Description
`create`	Triggered when you grant access to an OAuth app.
`destroy`	Triggered when you revoke an OAuth app's access to your account and when authorizations are revoked or expire.

`profile_picture` category actions

Action	Description
`update`	Triggered when you set or update your profile picture.

`project` category actions

Action	Description
`access`	Triggered when a project board's visibility is changed.
`create`	Triggered when a project board is created.
`rename`	Triggered when a project board is renamed.
`update`	Triggered when a project board is updated.
`delete`	Triggered when a project board is deleted.
`link`	Triggered when a repository is linked to a project board.
`unlink`	Triggered when a repository is unlinked from a project board.
`update_user_permission`	Triggered when an outside collaborator is added to or removed from a project board or has their permission level changed.

`public_key` category actions

Action	Description
`create`	Triggered when you add a new public SSH key to your account on your GitHub Enterprise Server instance.
`delete`	Triggered when you remove a public SSH key to your account on your GitHub Enterprise Server instance.

`repo` category actions

Action	Description
`access`	Triggered when you change the visibility of a repository.
`add_member`	Triggered when a GitHub Enterprise Server user is given collaboration access to a repository.
`add_topic`	Triggered when a repository owner adds a topic to a repository.
`archived`	Triggered when a repository owner archives a repository.
`config.disable_anonymous_git_access`	Triggered when anonymous Git read access is disabled in a public repository.
`config.enable_anonymous_git_access`	Triggered when anonymous Git read access is enabled in a public repository.
`config.lock_anonymous_git_access`	Triggered when a repository's anonymous Git read access setting is locked.
`config.unlock_anonymous_git_access`	Triggered when a repository's anonymous Git read access setting is unlocked.
`create`	Triggered when a new repository is created.
`destroy`	Triggered when a repository is deleted.
`remove_member`	Triggered when a GitHub Enterprise Server user is removed from a repository as a collaborator.
`remove_topic`	Triggered when a repository owner removes a topic from a repository.
`rename`	Triggered when a repository is renamed.
`staff_unlock`	Triggered when an enterprise owner or GitHub Support (with permission from a repository administrator) temporarily unlocks the repository. The visibility of the repository isn't changed.
`transfer`	Triggered when a repository is transferred.
`transfer_start`	Triggered when a repository transfer is about to occur.
`unarchived`	Triggered when a repository owner unarchives a repository.

`team` category actions

Action	Description
`add_member`	Triggered when a member of an organization you belong to adds you to a team.
`add_repository`	Triggered when a team you are a member of is given control of a repository.
`create`	Triggered when a new team in an organization you belong to is created.
`destroy`	Triggered when a team you are a member of is deleted from the organization.
`remove_member`	Triggered when a member of an organization is removed from a team you are a member of.
`remove_repository`	Triggered when a repository is no longer under a team's control.

`two_factor_authentication` category actions

Action	Description
`enabled`	Triggered when two-factor authentication is enabled.
`disabled`	Triggered when two-factor authentication is disabled.

`user` category actions

Action	Description
`add_email`	Triggered when you add a new email address.
`create`	Triggered when you create a new personal account.
`change_password`	Triggered when you change your password.
`forgot_password`	Triggered when you ask for a password reset.
`hide_private_contributions_count`	Triggered when you hide private contributions on your profile.
`login`	Triggered when you log in to your GitHub Enterprise Server instance.
`mandatory_message_viewed`	Triggered when you view a mandatory message (see "Customizing user messages for your enterprise" for details)
`failed_login`	Triggered when you failed to log in successfully.
`remove_email`	Triggered when you remove an email address.
`rename`	Triggered when you rename your account.
`show_private_contributions_count`	Triggered when you publicize private contributions on your profile.
`two_factor_requested`	Triggered when GitHub Enterprise Server asks you for your two-factor authentication code.

`user_status` category actions

Action	Description
`update`	Triggered when you set or change the status on your profile. For more information, see "Personalizing your profile."
`destroy`	Triggered when you clear the status on your profile.

Security log events

In this article