Eventos de registro de auditoría de la empresa

Nota:

Este artículo enumera los eventos que pueden aparecer en el registro de auditoría de una empresa. Para los eventos que pueden aparecer en el registro de seguridad de una cuenta de usuario o en el registro de auditoría de una organización, consulta Eventos de registro de seguridad y Eventos de registro de auditoría de la organización.

Acción	Descripción
`advisory_credit.accept`	Credit was accepted for a security advisory.
`advisory_credit.create`	Someone was added to the credit section of a security advisory.
`advisory_credit.decline`	Credit was declined for a security advisory.
`advisory_credit.destroy`	Someone was removed from the credit section of a security advisory.

Acción	Descripción
`audit_log_streaming.check`	A manual check of the endpoint configured for audit log streaming was performed.
`audit_log_streaming.create`	An endpoint was added for audit log streaming.
`audit_log_streaming.destroy`	An audit log streaming endpoint was deleted.
`audit_log_streaming.update`	An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.

Acción	Descripción
`auto_approve_personal_access_token_requests.disable`	Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources. See also: personal_access_token.auto_approve_grant_requests_disabled
`auto_approve_personal_access_token_requests.enable`	Triggered when fine-grained personal access tokens can access organization resources without prior approval. See also: personal_access_token.auto_approve_grant_requests_enabled

Acción	Descripción
`billing.change_billing_type`	The way the account pays for GitHub was changed.
`billing.change_email`	The billing email address changed.

Acción	Descripción
`business.add_admin`	An enterprise owner was added to an enterprise.
`business.add_billing_manager`	A billing manager was added to an enterprise.
`business.add_disallowed_two_factor_method`	An enterprise prevented access to resources by users with the given two-factor method.
`business.add_organization`	An organization was added to an enterprise.
`business.add_support_entitlee`	A support entitlement was added to a member of an enterprise.
`business.advanced_security_policy_update`	An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.
`business.audit_log_export`	An export of the enterprise audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.
`business.audit_log_git_event_export`	An export of the enterprise's Git events was created.
`business.cancel_admin_invitation`	An invitation for someone to be an owner of an enterprise was canceled.
`business.cancel_billing_manager_invitation`	An invitation for someone to be an billing manager of an enterprise was canceled.
`business.cancel_trial`	The trial of GitHub Enterprise Cloud was canceled.
`business.change_seats_plan_type`	The seats plan type was changed for an enterprise.
`business.clear_actions_settings`	An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.
`business.clear_default_repository_permission`	An enterprise owner cleared the base repository permission policy setting for an enterprise.
`business.clear_disallowed_two_factor_methods`	Cleared two-factor authentication restrictions for an enterprise.
`business.clear_members_can_create_repos`	An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.
`business.code_scanning_autofix_policy_update`	The policy for Code scanning autofix was updated for an enterprise.
`business.code_scanning_autofix_third_party_tools_policy_update`	The policy for Code scanning autofix third party tools was updated for an enterprise.
`business.code_security_enablement_policy_update`	The policy for Code Security enablement was updated for an enterprise.
`business.connect_usage_metrics_export`	Server statistics were exported for the enterprise.
`business.convert_trial`	The enterprise account on a trial of GitHub Enterprise Cloud was upgraded to a paid enterprise account.
`business.create`	An enterprise was created.
`business.create_trial`	A trial of GitHub Enterprise Cloud began.
`business.delete`	The enterprise was deleted.
`business.disable_oidc`	OIDC single sign-on was disabled for an enterprise.
`business.disable_open_scim`	SCIM provisioning for custom integrations that use the REST API was disabled for the enterprise.
`business.disable_saml`	SAML single sign-on was disabled for an enterprise.
`business.disable_source_ip_disclosure`	Display of IP addresses within audit log events for the enterprise was disabled.
`business.disable_two_factor_requirement`	The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.
`business.enable_oidc`	OIDC single sign-on was enabled for an enterprise.
`business.enable_open_scim`	SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.
`business.enable_saml`	SAML single sign-on was enabled for an enterprise.
`business.enable_source_ip_disclosure`	Display of IP addresses within audit log events for the enterprise was enabled.
`business.enable_two_factor_requirement`	The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.
`business.enterprise_server_license_download`	A GitHub Enterprise Server license was downloaded.
`business.expire_trial`	The trial of GitHub Enterprise Cloud expired.
`business.github_models_billing_disabled`	GitHub Models billing was disabled for the business.
`business.github_models_billing_enabled`	GitHub Models billing was enabled for the business.
`business.import_license_usage`	License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.
`business.invite_admin`	An invitation for someone to be an enterprise owner of an enterprise was sent.
`business.invite_billing_manager`	An invitation for someone to be an billing manager of an enterprise was sent.
`business.members_can_update_protected_branches.clear`	An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.
`business.members_can_update_protected_branches.disable`	The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.
`business.members_can_update_protected_branches.enable`	The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.
`business.proxy_security_header_disabled`	The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.
`business.proxy_security_header_enabled`	The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.
`business.proxy_security_header_unsatisfied`	A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.
`business.recovery_code_failed`	An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.
`business.recovery_code_used`	An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.
`business.recovery_codes_downloaded`	An enterprise owner downloaded the enterprise's SSO recovery codes.
`business.recovery_codes_generated`	An enterprise owner generated the enterprise's SSO recovery codes.
`business.recovery_codes_printed`	An enterprise owner printed the enterprise's SSO recovery codes.
`business.recovery_codes_viewed`	An enterprise owner viewed the enterprise's SSO recovery codes.
`business.remove_admin`	An enterprise owner was removed from an enterprise.
`business.remove_billing_manager`	A billing manager was removed from an enterprise.
`business.remove_disallowed_two_factor_method`	Removed a two-factor authentication method restriction for an enterprise.
`business.remove_member`	A member was removed from an enterprise.
`business.remove_organization`	An organization was removed from an enterprise.
`business.remove_support_entitlee`	A support entitlement was removed from a member of an enterprise.
`business.rename_slug`	The slug for the enterprise URL was renamed.
`business.restore`	The deleted enterprise was restored.
`business.revoke_external_identity`	The external identity for a member in an enterprise was revoked.
`business.revoke_sso_session`	The SAML single sign-on session for a member in an enterprise was revoked.
`business.security_center_export_code_scanning_metrics`	A CSV export was requested on the "CodeQL pull request alerts" page.
`business.security_center_export_coverage`	A CSV export was requested on the "Coverage" page.
`business.security_center_export_overview_dashboard`	A CSV export was requested on the "Overview Dashboard" page.
`business.security_center_export_risk`	A CSV export was requested on the "Risk" page.
`business.set_actions_fork_pr_approvals_policy`	The policy for requiring approvals for workflows from public forks was changed for an enterprise.
`business.set_actions_private_fork_pr_approvals_policy`	The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.
`business.set_actions_retention_limit`	The retention period for GitHub Actions artifacts and logs was changed for an enterprise.
`business.set_default_workflow_permissions`	The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.
`business.set_fork_pr_workflows_policy`	The policy for fork pull request workflows was changed for an enterprise.
`business.set_workflow_permission_can_approve_pr`	The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.
`business.sso_response`	A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`business.update_actions_settings`	An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.
`business.update_default_repository_permission`	The base repository permission setting was updated for all organizations in an enterprise.
`business.update_member_repository_creation_permission`	The repository creation setting was updated for an enterprise.
`business.update_member_repository_invitation_permission`	The policy setting for enterprise members inviting outside collaborators to repositories was updated.
`business.update_saml_provider_settings`	The SAML single sign-on provider settings for an enterprise were updated.
`business.upgrade_from_organization`	The organization was upgraded to an enterprise account.

Acción	Descripción
`business_advanced_security.disabled`	GitHub Advanced Security was disabled for your enterprise.
`business_advanced_security.disabled_for_new_repos`	GitHub Advanced Security was disabled for new repositories in your enterprise.
`business_advanced_security.disabled_for_new_user_namespace_repos`	GitHub Advanced Security was disabled for new user namespace repositories in your enterprise.
`business_advanced_security.enabled`	GitHub Advanced Security was enabled for your enterprise.
`business_advanced_security.enabled_for_new_repos`	GitHub Advanced Security was enabled for new repositories in your enterprise.
`business_advanced_security.enabled_for_new_user_namespace_repos`	GitHub Advanced Security was enabled for new user namespace repositories in your enterprise.
`business_advanced_security.user_namespace_repos_disabled`	GitHub Advanced Security was disabled for user namespace repositories in your enterprise.
`business_advanced_security.user_namespace_repos_enabled`	GitHub Advanced Security was enabled for user namespace repositories in your enterprise.

Acción	Descripción
`business_dependabot_alerts.disable`	Dependabot alerts were disabled for your enterprise.
`business_dependabot_alerts.enable`	Dependabot alerts were enabled for your enterprise.

Acción	Descripción
`business_dependabot_alerts_new_repos.disable`	Dependabot alerts were disabled for new repositories in your enterprise.
`business_dependabot_alerts_new_repos.enable`	Dependabot alerts were enabled for new repositories in your enterprise.

Acción	Descripción
`business_secret_scanning_automatic_validity_checks.disabled`	Automatic partner validation checks have been disabled at the business level
`business_secret_scanning_automatic_validity_checks.enabled`	Automatic partner validation checks have been enabled at the business level

Acción	Descripción
`business_secret_scanning_custom_pattern.create`	An enterprise-level custom pattern was created for secret scanning.
`business_secret_scanning_custom_pattern.delete`	An enterprise-level custom pattern was removed from secret scanning.
`business_secret_scanning_custom_pattern.publish`	An enterprise-level custom pattern was published for secret scanning.
`business_secret_scanning_custom_pattern.update`	Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.

Acción	Descripción
`commit_comment.destroy`	A commit comment was deleted.
`commit_comment.update`	A commit comment was updated.

Acción	Descripción
`copilot.access_revoked`	Copilot access was revoked for the organization or enterprise due to its Copilot subscription ending, an issue with billing the entity, the entity being marked spammy, or the entity being suspended.
`copilot.cfb_enterprise_org_enablement_changed`	The Copilot enablement policy changed at the enterprise level to either allow or disable access for all organizations, or to allow access for selected organizations.
`copilot.cfb_enterprise_settings_changed`	Copilot feature settings were changed at the enterprise level.
`copilot.cfb_org_settings_changed`	Copilot feature settings were changed at the organization level.
`copilot.cfb_seat_added`	A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.
`copilot.cfb_seat_assignment_created`	A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.
`copilot.cfb_seat_assignment_refreshed`	A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.
`copilot.cfb_seat_assignment_reused`	A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.
`copilot.cfb_seat_assignment_unassigned`	A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.
`copilot.cfb_seat_cancelled`	A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.
`copilot.cfb_seat_cancelled_by_staff`	A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.
`copilot.cfb_seat_management_changed`	The seat management setting was changed at the organization level to either enable or disable Copilot access for all members of the organization, or to enable Copilot access for selected members or teams.
`copilot.clickwrap_save_event`	The GitHub Copilot Product Terms or Pre-Release Preview Terms were accepted.
`copilot.content_exclusion_changed`	The excluded paths for GitHub Copilot were updated.
`copilot.enterprise_enablement_changed`	Copilot access was enabled or disabled at the enterprise level.
`copilot.knowledge_base_created`	A knowledge base was created in the organization.
`copilot.knowledge_base_deleted`	A knowledge base was deleted from the organization.
`copilot.knowledge_base_updated`	A knowledge base was updated in the organization.
`copilot.plan_changed`	The plan for GitHub Copilot was updated.
`copilot.plan_downgrade_scheduled`	The plan for GitHub Copilot was scheduled to be downgraded.

Acción	Descripción
`custom_property_value.create`	A repository's custom property value was manually set for the first time.
`custom_property_value.destroy`	A repository's custom property value was deleted.
`custom_property_value.update`	A repository's custom property value was updated.

Acción	Descripción
`discussion_post.destroy`	Triggered when a team discussion post is deleted.
`discussion_post.update`	Triggered when a team discussion post is edited.

Acción	Descripción
`business_secret_scanning_custom_pattern_push_protection.disabled`	Push protection for a custom pattern for secret scanning was disabled for your enterprise.
`business_secret_scanning_custom_pattern_push_protection.enabled`	Push protection for a custom pattern for secret scanning was enabled for your enterprise.

Acción	Descripción
`business_secret_scanning.disable`	Secret scanning was disabled for your enterprise.
`business_secret_scanning.disabled_for_new_repos`	Secret scanning was disabled for new repositories in your enterprise.
`business_secret_scanning.enable`	Secret scanning was enabled for your enterprise.
`business_secret_scanning.enabled_for_new_repos`	Secret scanning was enabled for new repositories in your enterprise.

Acción	Descripción
`business_secret_scanning_generic_secrets.disabled`	Generic secrets have been disabled at the business level
`business_secret_scanning_generic_secrets.enabled`	Generic secrets have been enabled at the business level

Acción	Descripción
`business_secret_scanning_non_provider_patterns.disabled`	Secret scanning for non-provider patterns was disabled at the enterprise level.
`business_secret_scanning_non_provider_patterns.enabled`	Secret scanning for non-provider patterns was enabled at the enterprise level.

Acción	Descripción
`business_secret_scanning_push_protection_custom_message.disable`	The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.
`business_secret_scanning_push_protection_custom_message.enable`	The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.
`business_secret_scanning_push_protection_custom_message.update`	The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.

Acción	Descripción
`business_secret_scanning_push_protection.disable`	Push protection for secret scanning was disabled for your enterprise.
`business_secret_scanning_push_protection.disabled_for_new_repos`	Push protection for secret scanning was disabled for new repositories in your enterprise.
`business_secret_scanning_push_protection.enable`	Push protection for secret scanning was enabled for your enterprise.
`business_secret_scanning_push_protection.enabled_for_new_repos`	Push protection for secret scanning was enabled for new repositories in your enterprise.

Acción	Descripción
`checks.auto_trigger_disabled`	Automatic creation of check suites was disabled on a repository in the organization or enterprise.
`checks.auto_trigger_enabled`	Automatic creation of check suites was enabled on a repository in the organization or enterprise.
`checks.delete_logs`	Logs in a check suite were deleted.

Acción	Descripción
`code_scanning.alert_appeared_in_branch`	Existing code scanning alerts appeared in a branch.
`code_scanning.alert_closed_became_fixed`	Code scanning alerts were fixed.
`code_scanning.alert_closed_became_outdated`	Code scanning alerts were closed as outdated (all configurations they were detected in were deleted).
`code_scanning.alert_closed_by_user`	Code scanning alerts were manually dismissed.
`code_scanning.alert_closure_approved`	Dismissal of code scanning alerts was approved.
`code_scanning.alert_closure_denied`	Dismissal of code scanning alerts was denied.
`code_scanning.alert_closure_requested`	Dismissal of code scanning alerts was requested.
`code_scanning.alert_created`	Code scanning alerts were seen for the first time.
`code_scanning.alert_reappeared`	Code scanning alerts that were previously fixed reappeared.
`code_scanning.alert_reopened_by_user`	Code scanning alerts that were previously dismissed were reopened.

Acción	Descripción
`codespaces.allow_permissions`	A codespace using custom permissions from its devcontainer.json file was launched.
`codespaces.attempted_to_create_from_prebuild`	An attempt to create a codespace from a prebuild was made.
`codespaces.business_enablement_updated`	Enterprise setting for Codespaces ownership was updated.
`codespaces.connect`	Credentials for a codespace were refreshed.
`codespaces.create`	A codespace was created
`codespaces.destroy`	A user deleted a codespace.
`codespaces.export_environment`	A codespace was exported to a branch on GitHub.
`codespaces.policy_group_created`	Policies were applied to codespaces in an organization or enterprise.
`codespaces.policy_group_deleted`	Policies were removed from codespaces in an organization or enterprise.
`codespaces.policy_group_updated`	Policies were updated for codespaces in an organization or enterprise.
`codespaces.restore`	A codespace was restored.
`codespaces.start_environment`	A codespace was started.
`codespaces.suspend_environment`	A codespace was stopped.
`codespaces.trusted_repositories_access_update`	A personal account's access and security setting for Codespaces were updated.

Acción	Descripción
`custom_property_definition.create`	A new custom property definition was created.
`custom_property_definition.destroy`	A custom property definition was deleted.
`custom_property_definition.update`	A custom property definition was updated.

Eventos de registro de auditoría de la empresa

¿Quién puede utilizar esta característica?

En este artículo

Acción	Descripción
`dependabot_alerts.disable`	Dependabot alerts were disabled for all existing repositories.
`dependabot_alerts.enable`	Dependabot alerts were enabled for all existing repositories.

Acción	Descripción
`dependabot_alerts_new_repos.disable`	Dependabot alerts were disabled for all new repositories.
`dependabot_alerts_new_repos.enable`	Dependabot alerts were enabled for all new repositories.

Acción	Descripción
`dependabot_repository_access.default_access_level_updated`	The default repository access for Dependabot was updated.
`dependabot_repository_access.repositories_updated`	The repositories that Dependabot can access were updated.

Acción	Descripción
`dependabot_security_updates.disable`	Dependabot security updates were disabled for all existing repositories.
`dependabot_security_updates.enable`	Dependabot security updates were enabled for all existing repositories.

Acción	Descripción
`dependabot_security_updates_new_repos.disable`	Dependabot security updates were disabled for all new repositories.
`dependabot_security_updates_new_repos.enable`	Dependabot security updates were enabled for all new repositories.

Acción	Descripción
`dependency_graph.disable`	The dependency graph was disabled for all existing repositories.
`dependency_graph.enable`	The dependency graph was enabled for all existing repositories.

Acción	Descripción
`dependency_graph_new_repos.disable`	The dependency graph was disabled for all new repositories.
`dependency_graph_new_repos.enable`	The dependency graph was enabled for all new repositories.

Acción	Descripción
`discussion_post_reply.destroy`	Triggered when a reply to a team discussion post is deleted.
`discussion_post_reply.update`	Triggered when a reply to a team discussion post is edited.

Acción	Descripción
`enterprise_announcement.create`	A global announcement banner was created for the enterprise.
`enterprise_announcement.destroy`	A global announcement banner was removed from the enterprise.
`enterprise_announcement.update`	A global announcement banner was updated for the enterprise.

Acción	Descripción
`enterprise_domain.approve`	A domain was approved for an enterprise.
`enterprise_domain.create`	A domain was added to an enterprise.
`enterprise_domain.destroy`	A domain was removed from an enterprise.
`enterprise_domain.verify`	A domain was verified for an enterprise.