Enterprise の監査ログイベント

Note: This article contains the events that may appear in the audit log for an enterprise. For the events that can appear in a user account's security log or the audit log for an organization, see "Security log events" and "Audit log events for your organization."

About audit log events for your enterprise

The scope of the events that appear in your enterprise's audit log depend on whether your enterprise uses Enterprise Managed Users. For more information about Enterprise Managed Users, see "About Enterprise Managed Users."

If your enterprise does not use Enterprise Managed Users, the audit log only includes events related to the enterprise account and the organizations within the enterprise account, which are listed in this article.
If your enterprise uses Enterprise Managed Users, the audit log also includes user events for managed user accounts, such as each time the user logs in to GitHub Enterprise Cloud and actions they take within their user account. For a list of these user account events, see "Security log events."

The name for each audit log entry is composed of a category of events, followed by an operation type. For example, the repo.create entry refers to the create operation on the repo category. The reference information in this article is grouped by categories.

アクション	説明
`advisory_credit.accept`	Credit was accepted for a security advisory.
`advisory_credit.create`	Someone was added to the credit section of a security advisory.
`advisory_credit.decline`	Credit was declined for a security advisory.
`advisory_credit.destroy`	Someone was removed from the credit section of a security advisory.

アクション	説明
`audit_log_streaming.check`	A manual check of the endpoint configured for audit log streaming was performed.
`audit_log_streaming.create`	An endpoint was added for audit log streaming.
`audit_log_streaming.destroy`	An audit log streaming endpoint was deleted.
`audit_log_streaming.update`	An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.

アクション	説明
`auto_approve_personal_access_token_requests.disable`	Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources.
`auto_approve_personal_access_token_requests.enable`	Triggered when fine-grained personal access tokens can access organization resources without prior approval.

アクション	説明
`billing.change_billing_type`	The way the account pays for GitHub was changed.
`billing.change_email`	The billing email address changed.

アクション	説明
`business.add_admin`	An enterprise owner was added to an enterprise.
`business.add_billing_manager`	A billing manager was added to an enterprise.
`business.add_organization`	An organization was added to an enterprise.
`business.add_support_entitlee`	A support entitlement was added to a member of an enterprise.
`business.advanced_security_policy_update`	An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.
`business.cancel_admin_invitation`	An invitation for someone to be an owner of an enterprise was canceled.
`business.cancel_billing_manager_invitation`	An invitation for someone to be an billing manager of an enterprise was canceled.
`business.clear_actions_settings`	An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.
`business.clear_default_repository_permission`	An enterprise owner cleared the base repository permission policy setting for an enterprise.
`business.clear_members_can_create_repos`	An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.
`business.create`	An enterprise was created.
`business.disable_oidc`	OIDC single sign-on was disabled for an enterprise.
`business.disable_saml`	SAML single sign-on was disabled for an enterprise.
`business.disable_two_factor_requirement`	The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.
`business.enable_oidc`	OIDC single sign-on was enabled for an enterprise.
`business.enable_saml`	SAML single sign-on was enabled for an enterprise.
`business.enable_two_factor_requirement`	The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.
`business.enterprise_server_license_download`	A GitHub Enterprise Server license was downloaded.
`business.import_license_usage`	License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.
`business.invite_admin`	An invitation for someone to be an enterprise owner of an enterprise was sent.
`business.invite_billing_manager`	An invitation for someone to be an billing manager of an enterprise was sent.
`business.members_can_update_protected_branches.clear`	An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.
`business.members_can_update_protected_branches.disable`	The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.
`business.members_can_update_protected_branches.enable`	The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.
`business.remove_admin`	An enterprise owner was removed from an enterprise.
`business.remove_billing_manager`	A billing manager was removed from an enterprise.
`business.remove_member`	A member was removed from an enterprise.
`business.remove_organization`	An organization was removed from an enterprise.
`business.remove_support_entitlee`	A support entitlement was removed from a member of an enterprise.
`business.rename_slug`	The slug for the enterprise URL was renamed.
`business.revoke_external_identity`	The external identity for a member in an enterprise was revoked.
`business.revoke_sso_session`	The SAML single sign-on session for a member in an enterprise was revoked.
`business.set_actions_fork_pr_approvals_policy`	The setting for requiring approvals for workflows from public forks was changed for an enterprise.
`business.set_actions_retention_limit`	The retention period for GitHub Actions artifacts and logs was changed for an enterprise.
`business.set_fork_pr_workflows_policy`	The policy for fork pull requests is changed.
`business.update_actions_settings`	An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.
`business.update_default_repository_permission`	The base repository permission setting was updated for all organizations in an enterprise.
`business.update_member_repository_creation_permission`	The repository creation setting was updated for an enterprise.
`business.update_member_repository_invitation_permission`	The policy setting for enterprise members inviting outside collaborators to repositories was updated.
`business.update_saml_provider_settings`	The SAML single sign-on provider settings for an enterprise were updated.

アクション	説明
`business_advanced_security.disabled`	GitHub Advanced Security was disabled for your enterprise.
`business_advanced_security.disabled_for_new_repos`	GitHub Advanced Security was disabled for new repositories in your enterprise.
`business_advanced_security.enabled`	GitHub Advanced Security was enabled for your enterprise.
`business_advanced_security.enabled_for_new_repos`	GitHub Advanced Security was enabled for new repositories in your enterprise.

アクション	説明
`business_secret_scanning.disable`	Secret scanning was disabled for your enterprise.
`business_secret_scanning.disabled_for_new_repos`	Secret scanning was disabled for new repositories in your enterprise.
`business_secret_scanning.enable`	Secret scanning was enabled for your enterprise.
`business_secret_scanning.enabled_for_new_repos`	Secret scanning was enabled for new repositories in your enterprise.

アクション	説明
`business_secret_scanning_automatic_validity_checks.disabled`	Automatic partner validation checks have been disabled at the business level
`business_secret_scanning_automatic_validity_checks.enabled`	Automatic partner validation checks have been enabled at the business level

アクション	説明
`business_secret_scanning_custom_pattern.create`	An enterprise-level custom pattern was created for secret scanning.
`business_secret_scanning_custom_pattern.delete`	An enterprise-level custom pattern was removed from secret scanning.
`business_secret_scanning_custom_pattern.publish`	An enterprise-level custom pattern was published for secret scanning.
`business_secret_scanning_custom_pattern.update`	Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.

アクション	説明
`business_secret_scanning_custom_pattern_push_protection.disabled`	Push protection for a custom pattern for secret scanning was disabled for your enterprise.
`business_secret_scanning_custom_pattern_push_protection.enabled`	Push protection for a custom pattern for secret scanning was enabled for your enterprise.

アクション	説明
`codespaces.allow_permissions`	A codespace using custom permissions from its devcontainer.json file was launched.
`codespaces.attempted_to_create_from_prebuild`	An attempt to create a codespace from a prebuild was made.
`codespaces.connect`	A codespace was started.
`codespaces.create`	A codespace was created
`codespaces.destroy`	A user deleted a codespace.
`codespaces.trusted_repositories_access_update`	Triggered when you change your personal account's access and security setting for Codespaces.

アクション	説明
`commit_comment.destroy`	A commit comment was deleted.
`commit_comment.update`	A commit comment was updated.

アクション	説明
`copilot.cfb_enterprise_org_enablement_changed`	The Copilot for Business enablement policy changed at the enterprise level or for an organization within the enterprise.
`copilot.cfb_enterprise_settings_changed`	Settings for Copilot for Business were changed at the enterprise level.
`copilot.cfb_org_settings_changed`	Settings for Copilot for Business were changed at the organization level.
`copilot.cfb_seat_added`	A seat was added to the Copilot for Business subscription for a user and they have received access to GitHub Copilot.
`copilot.cfb_seat_assignment_created`	A seat assignment was newly created for a user.
`copilot.cfb_seat_assignment_refreshed`	A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to GitHub Copilot.
`copilot.cfb_seat_assignment_reused`	A seat assignment was re-created for a user who already had a seat with no pending cancellation date.
`copilot.cfb_seat_assignment_unassigned`	A seat was unassigned from a user and they will lose access to GitHub Copilot at the end of the billing cycle.
`copilot.cfb_seat_cancelled`	A seat was canceled from the Copilot for Business subscription and the user no longer has access to GitHub Copilot.
`copilot.cfb_seat_cancelled_by_staff`	A seat was canceled from the Copilot for Business subscription manually by GitHub and the user no longer has access to GitHub Copilot.
`copilot.cfb_seat_management_changed`	The seat management setting was changed for the Copilot for Business subscription.
`copilot.clickwrap_save_event`	The GitHub Copilot Product Terms or Pre-Release Preview Terms were accepted.

アクション	説明
`dependabot_alerts.disable`	Dependabot alerts were disabled for all existing repositories.
`dependabot_alerts.enable`	Dependabot alerts were enabled for all existing repositories.

アクション	説明
`business_secret_scanning_push_protection.disable`	Push protection for secret scanning was disabled for your enterprise.
`business_secret_scanning_push_protection.disabled_for_new_repos`	Push protection for secret scanning was disabled for new repositories in your enterprise.
`business_secret_scanning_push_protection.enable`	Push protection for secret scanning was enabled for your enterprise.
`business_secret_scanning_push_protection.enabled_for_new_repos`	Push protection for secret scanning was enabled for new repositories in your enterprise.

アクション	説明
`business_secret_scanning_push_protection_custom_message.disable`	The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.
`business_secret_scanning_push_protection_custom_message.enable`	The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.
`business_secret_scanning_push_protection_custom_message.update`	The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.

アクション	説明
`checks.auto_trigger_disabled`	Automatic creation of check suites was disabled on a repository in the organization or enterprise.
`checks.auto_trigger_enabled`	Automatic creation of check suites was enabled on a repository in the organization or enterprise.
`checks.delete_logs`	Logs in a check suite were deleted.

アクション	説明
`dependabot_alerts_new_repos.disable`	Dependabot alerts were disabled for all new repositories.
`dependabot_alerts_new_repos.enable`	Dependabot alerts were enabled for all new repositories.

アクション	説明
`dependabot_security_updates.disable`	Dependabot security updates were disabled for all existing repositories.
`dependabot_security_updates.enable`	Dependabot security updates were enabled for all existing repositories.

アクション	説明
`dependabot_security_updates_new_repos.disable`	Dependabot security updates were disabled for all new repositories.
`dependabot_security_updates_new_repos.enable`	Dependabot security updates were enabled for all new repositories.

アクション	説明
`dependency_graph.disable`	The dependency graph was disabled for all existing repositories.
`dependency_graph.enable`	The dependency graph was enabled for all existing repositories.

アクション	説明
`dependency_graph_new_repos.disable`	The dependency graph was disabled for all new repositories.
`dependency_graph_new_repos.enable`	The dependency graph was enabled for all new repositories.

アクション	説明
`discussion_post.destroy`	Triggered when a team discussion post is deleted.
`discussion_post.update`	Triggered when a team discussion post is edited.

アクション	説明
`discussion_post_reply.destroy`	Triggered when a reply to a team discussion post is deleted.
`discussion_post_reply.update`	Triggered when a reply to a team discussion post is edited.

Enterprise の監査ログ イベント

この記事の内容

Enterprise の監査ログイベント

アクション	説明
`enterprise.register_self_hosted_runner`	A new GitHub Actions self-hosted runner was registered.
`enterprise.remove_self_hosted_runner`	A GitHub Actions self-hosted runner was removed.
`enterprise.runner_group_created`	A GitHub Actions self-hosted runner group was created.
`enterprise.runner_group_removed`	A GitHub Actions self-hosted runner group was removed.
`enterprise.runner_group_renamed`	A GitHub Actions self-hosted runner group was renamed.
`enterprise.runner_group_runners_added`	A GitHub Actions self-hosted runner was added to a group.
`enterprise.runner_group_runners_updated`	A GitHub Actions runner group's list of members was updated.
`enterprise.runner_group_runner_removed`	The REST API was used to remove a GitHub Actions self-hosted runner from a group.
`enterprise.runner_group_updated`	The configuration of a GitHub Actions self-hosted runner group was changed.
`enterprise.runner_group_visiblity_updated`	The visibility of a GitHub Actions self-hosted runner group was updated via the REST API.
`enterprise.self_hosted_runner_updated`	The GitHub Actions runner application was updated. Can be viewed using the REST API and the UI; not visible in the JSON/CSV export.

アクション	説明
`enterprise_domain.approve`	An enterprise domain was approved for an enterprise.
`enterprise_domain.create`	An enterprise domain was added to an enterprise.
`enterprise_domain.destroy`	An enterprise domain was removed from an enterprise.
`enterprise_domain.verify`	An enterprise domain was verified for an enterprise.

アクション	説明
`enterprise_installation.create`	The GitHub App associated with an GitHub Connect enterprise connection was created.
`enterprise_installation.destroy`	The GitHub App associated with an GitHub Connect enterprise connection was deleted.

アクション	説明
`environment.add_protection_rule`	A GitHub Actions deployment protection rule was created via the API.
`environment.create_actions_secret`	A secret was created for a GitHub Actions environment.
`environment.delete`	An environment was deleted.
`environment.remove_actions_secret`	A secret was deleted for a GitHub Actions environment.
`environment.remove_protection_rule`	A GitHub Actions deployment protection rule was deleted via the API.
`environment.update_actions_secret`	A secret was updated for a GitHub Actions environment.
`environment.update_protection_rule`	A GitHub Actions deployment protection rule was updated via the API.

アクション	説明
`external_group.add_member`	A user was added to an external group.
`external_group.delete`	An external group was deleted.
`external_group.link`	An external group was linked to a GitHub team.
`external_group.provision`	An external group was created.
`external_group.remove_member`	A user was removed from an external group.
`external_group.unlink`	An external group was unlinked to a GitHub team.
`external_group.update`	An external group was updated.
`external_group.update_display_name`	An external group's display name was updated.

アクション	説明
`git.clone`	A repository was cloned.
`git.fetch`	Changes were fetched from a repository.
`git.push`	Changes were pushed to a repository.

アクション	説明
`hook.active_changed`	A hook's active status was updated.
`hook.config_changed`	A hook's configuration was changed.
`hook.create`	A new hook was added.
`hook.destroy`	A hook was deleted.
`hook.events_changed`	A hook's configured events were changed.

アクション	説明
`integration.create`	An integration was created.
`integration.destroy`	An integration was deleted.
`integration.manager_added`	A member of an enterprise or organization was added as an integration manager.
`integration.manager_removed`	A member of an enterprise or organization was removed from being an integration manager.
`integration.remove_client_secret`	A client secret for an integration was removed.
`integration.revoke_all_tokens`	All user tokens for an integration were requested to be revoked.
`integration.revoke_tokens`	Token(s) for an integration were revoked.
`integration.transfer`	Ownership of an integration was transferred to another user or organization.

アクション	説明
`integration_installation.create`	An integration was installed.
`integration_installation.destroy`	An integration was uninstalled.
`integration_installation.repositories_added`	Repositories were added to an integration.
`integration_installation.repositories_removed`	Repositories were removed from an integration.
`integration_installation.suspend`	An integration was suspended.
`integration_installation.unsuspend`	An integration was unsuspended.
`integration_installation.version_updated`	Permissions for an integration were updated.

アクション	説明
`integration_installation_request.close`	A request to install an integration was either approved or denied by an owner, or canceled by the member who opened the request.
`integration_installation_request.create`	An member requested that an owner install an integration.