Skip to main content

エンタープライズの監査ログに記録されたイベントを確認します。

この機能を使用できるユーザーについて

Enterprise owners and site administrators

この記事の内容

メモ

この記事では、エンタープライズの監査ログに表示される可能性のあるイベントの一覧を示します。 ユーザー アカウントのセキュリティ ログまたは organization の監査ログに記録できるイベントについては、「セキュリティ ログのイベント」と「組織の監査ログ イベント」をご覧ください。

この記事では、エンタープライズ設定に表示されるイベントの一覧を示します。 サイト管理者ダッシュボードには、ここに記載されていないその他のイベントが含まれている場合があります。

Audit log events

account

account.plan_change
The account's plan changed.
Fields
No fields available
Reference
/billing/managing-the-plan-for-your-github-account/about-billing-for-plans

actions_cache

actions_cache.delete
A GitHub Actions cache was deleted using the REST API.
Fields
No fields available

api

api.request
An API request was made to an endpoint for the enterprise, or an enterprise owned resource. This event is only included if API Request Events is enabled in the enterprise's audit log settings. This event is only available via audit log streaming.
Fields
No fields available
Reference
Streaming the audit log for your enterprise

artifact

artifact.destroy
A workflow run artifact was manually deleted.
Fields
No fields available

audit_log_streaming

audit_log_streaming.check
A manual check of the endpoint configured for audit log streaming was performed.
Fields
No fields available
audit_log_streaming.create
An endpoint was added for audit log streaming.
Fields
No fields available
audit_log_streaming.destroy
An audit log streaming endpoint was deleted.
Fields
No fields available
audit_log_streaming.update
An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.
Fields
No fields available

billing

billing.change_billing_type
The way the account pays for GitHub was changed.
Fields
No fields available
Reference
Managing your payment and billing information
billing.change_email
The billing email address changed.
Fields
No fields available
Reference
Managing your payment and billing information

business

business.add_admin
An enterprise owner was added to an enterprise.
Fields
No fields available
Reference
Inviting people to manage your enterprise
business.add_organization
An organization was added to an enterprise.
Fields
No fields available
business.advanced_security_policy_update
An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.
Fields
No fields available
Reference
Enforcing policies for code security and analysis for your enterprise
business.clear_actions_settings
An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.clear_default_repository_permission
An enterprise owner cleared the base repository permission policy setting for an enterprise.
Fields
No fields available
Reference
Enforcing repository management policies in your enterprise
business.clear_members_can_create_repos
An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.
Fields
No fields available
Reference
Enforcing repository management policies in your enterprise
business.code_scanning_autofix_policy_update
The policy for Code scanning autofix was updated for an enterprise.
Fields
No fields available
business.create
An enterprise was created.
Fields
No fields available
business.disable_open_scim
SCIM provisioning for custom integrations that use the REST API was disabled for the enterprise.
Fields
No fields available
business.disable_source_ip_disclosure
Display of IP addresses within audit log events for the enterprise was disabled.
Fields
No fields available
Reference
Displaying IP addresses in the audit log for your enterprise
business.disable_two_factor_requirement
The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.
Fields
No fields available
business.enable_open_scim
SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.
Fields
No fields available
business.enable_source_ip_disclosure
Display of IP addresses within audit log events for the enterprise was enabled.
Fields
No fields available
Reference
Displaying IP addresses in the audit log for your enterprise
business.enable_two_factor_requirement
The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.
Fields
No fields available
business.members_can_update_protected_branches.clear
An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.
Fields
No fields available
business.members_can_update_protected_branches.disable
The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.
Fields
No fields available
business.members_can_update_protected_branches.enable
The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.
Fields
No fields available
business.remove_admin
An enterprise owner was removed from an enterprise.
Fields
No fields available
Reference
Inviting people to manage your enterprise
business.remove_organization
An organization was removed from an enterprise.
Fields
No fields available
business.rename_slug
The slug for the enterprise URL was renamed.
Fields
No fields available
business.revoke_sso_session
The SAML single sign-on session for a member in an enterprise was revoked.
Fields
No fields available
business.set_actions_fork_pr_approvals_policy
The policy for requiring approvals for workflows from public forks was changed for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.set_actions_private_fork_pr_approvals_policy
The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.set_actions_retention_limit
The retention period for GitHub Actions artifacts and logs was changed for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.set_default_workflow_permissions
The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.set_fork_pr_workflows_policy
The policy for fork pull request workflows was changed for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.set_workflow_permission_can_approve_pr
The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.sso_response
A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
business.update_actions_settings
An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.
Fields
No fields available
Reference
Enforcing policies for GitHub Actions in your enterprise
business.update_default_repository_permission
The base repository permission setting was updated for all organizations in an enterprise.
Fields
No fields available
Reference
Enforcing repository management policies in your enterprise
business.update_member_repository_creation_permission
The repository creation setting was updated for an enterprise.
Fields
No fields available
Reference
Enforcing repository management policies in your enterprise
business.update_member_repository_invitation_permission
The policy setting for enterprise members inviting outside collaborators to repositories was updated.
Fields
No fields available
Reference
Enforcing repository management policies in your enterprise

business_advanced_security

business_advanced_security.disabled
GitHub Advanced Security was disabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.disabled_for_new_repos
GitHub Advanced Security was disabled for new repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.disabled_for_new_user_namespace_repos
GitHub Advanced Security was disabled for new user namespace repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.enabled
GitHub Advanced Security was enabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.enabled_for_new_repos
GitHub Advanced Security was enabled for new repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.enabled_for_new_user_namespace_repos
GitHub Advanced Security was enabled for new user namespace repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.user_namespace_repos_disabled
GitHub Advanced Security was disabled for user namespace repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_advanced_security.user_namespace_repos_enabled
GitHub Advanced Security was enabled for user namespace repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

business_dependabot_alerts_new_repos

business_dependabot_alerts_new_repos.disable
Dependabot alerts were disabled for new repositories in your enterprise.
Fields
No fields available
business_dependabot_alerts_new_repos.enable
Dependabot alerts were enabled for new repositories in your enterprise.
Fields
No fields available

business_secret_scanning_automatic_validity_checks

business_secret_scanning_automatic_validity_checks.disabled
Automatic partner validation checks have been disabled at the business level
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_automatic_validity_checks.enabled
Automatic partner validation checks have been enabled at the business level
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

business_secret_scanning_custom_pattern

business_secret_scanning_custom_pattern.create
An enterprise-level custom pattern was created for secret scanning.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
business_secret_scanning_custom_pattern.delete
An enterprise-level custom pattern was removed from secret scanning.
Fields
No fields available
business_secret_scanning_custom_pattern.publish
An enterprise-level custom pattern was published for secret scanning.
Fields
No fields available
business_secret_scanning_custom_pattern.update
Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.
Fields
No fields available

business_secret_scanning_custom_pattern_push_protection

business_secret_scanning_custom_pattern_push_protection.disabled
Push protection for a custom pattern for secret scanning was disabled for your enterprise.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
business_secret_scanning_custom_pattern_push_protection.enabled
Push protection for a custom pattern for secret scanning was enabled for your enterprise.
Fields
No fields available
Reference
Defining custom patterns for secret scanning

business_secret_scanning

business_secret_scanning.disable
Secret scanning was disabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning.disabled_for_new_repos
Secret scanning was disabled for new repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning.enable
Secret scanning was enabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning.enabled_for_new_repos
Secret scanning was enabled for new repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

business_secret_scanning_non_provider_patterns

business_secret_scanning_non_provider_patterns.disabled
Secret scanning for non-provider patterns was disabled at the enterprise level.
Fields
No fields available
Reference
Supported secret scanning patterns
business_secret_scanning_non_provider_patterns.enabled
Secret scanning for non-provider patterns was enabled at the enterprise level.
Fields
No fields available
Reference
Supported secret scanning patterns

business_secret_scanning_push_protection_custom_message

business_secret_scanning_push_protection_custom_message.disable
The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_push_protection_custom_message.enable
The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_push_protection_custom_message.update
The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

business_secret_scanning_push_protection

business_secret_scanning_push_protection.disable
Push protection for secret scanning was disabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_push_protection.disabled_for_new_repos
Push protection for secret scanning was disabled for new repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_push_protection.enable
Push protection for secret scanning was enabled for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_push_protection.enabled_for_new_repos
Push protection for secret scanning was enabled for new repositories in your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

business_secret_scanning_push_protection_pattern_configuration

business_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed
The push protection setting was changed for a secret type for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
business_secret_scanning_push_protection_pattern_configuration.updated
The push protection pattern configuration was updated for your enterprise.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

checks

checks.auto_trigger_disabled
Automatic creation of check suites was disabled on a repository in the organization or enterprise.
Fields
No fields available
Reference
/rest/checks#update-repository-preferences-for-check-suites
checks.auto_trigger_enabled
Automatic creation of check suites was enabled on a repository in the organization or enterprise.
Fields
No fields available
Reference
/rest/checks#update-repository-preferences-for-check-suites
checks.delete_logs
Logs in a check suite were deleted.
Fields
No fields available

code

code.search
A code search was run targeting an organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
/search-github/github-code-search

codespaces

codespaces.allow_permissions
A codespace using custom permissions from its devcontainer.json file was launched.
Fields
No fields available
codespaces.connect
Credentials for a codespace were refreshed.
Fields
No fields available
codespaces.create
A codespace was created
Fields
No fields available
Reference
Creating a codespace for a repository
codespaces.destroy
A user deleted a codespace.
Fields
No fields available
Reference
Deleting a codespace
codespaces.export_environment
A codespace was exported to a branch on GitHub.
Fields
No fields available
codespaces.restore
A codespace was restored.
Fields
No fields available
codespaces.start_environment
A codespace was started.
Fields
No fields available
codespaces.suspend_environment
A codespace was stopped.
Fields
No fields available
codespaces.trusted_repositories_access_update
A personal account's access and security setting for Codespaces were updated.
Fields
No fields available
Reference
Managing access to other repositories within your codespace

copilot

copilot.cfb_seat_added
A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.
Fields
No fields available
copilot.cfb_seat_assignment_created
A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.
Fields
No fields available
Reference
What is GitHub Copilot?
copilot.cfb_seat_assignment_refreshed
A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.
Fields
No fields available
copilot.cfb_seat_assignment_reused
A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.
Fields
No fields available
copilot.cfb_seat_assignment_unassigned
A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.
Fields
No fields available
copilot.cfb_seat_cancelled
A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.
Fields
No fields available
copilot.cfb_seat_cancelled_by_staff
A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.
Fields
No fields available

custom_property_definition

custom_property_definition.create
A new custom property definition was created.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization
custom_property_definition.destroy
A custom property definition was deleted.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization
custom_property_definition.update
A custom property definition was updated.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization

custom_property_value

custom_property_value.create
A repository's custom property value was manually set for the first time.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization
custom_property_value.destroy
A repository's custom property value was deleted.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization
custom_property_value.update
A repository's custom property value was updated.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization

dependabot_alerts

dependabot_alerts_new_repos

dependabot_repository_access

dependabot_repository_access.repositories_updated
The repositories that Dependabot can access were updated.
Fields
No fields available

dependabot_security_updates

dependabot_security_updates.disable
Dependabot security updates were disabled for all existing repositories.
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization
dependabot_security_updates.enable
Dependabot security updates were enabled for all existing repositories.
Fields
No fields available

dependabot_security_updates_new_repos

dependabot_security_updates_new_repos.disable
Dependabot security updates were disabled for all new repositories.
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization
dependabot_security_updates_new_repos.enable
Dependabot security updates were enabled for all new repositories.
Fields
No fields available

dependency_graph

dependency_graph.disable
The dependency graph was disabled for all existing repositories.
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization
dependency_graph.enable
The dependency graph was enabled for all existing repositories.
Fields
No fields available

dependency_graph_new_repos

dependency_graph_new_repos.disable
The dependency graph was disabled for all new repositories.
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization
dependency_graph_new_repos.enable
The dependency graph was enabled for all new repositories.
Fields
No fields available

discussion_post

discussion_post.destroy
Triggered when a team discussion post is deleted.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/managing-disruptive-comments#deleting-a-comment
discussion_post.update
Triggered when a team discussion post is edited.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/managing-disruptive-comments#editing-a-comment

discussion_post_reply

discussion_post_reply.destroy
Triggered when a reply to a team discussion post is deleted.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/managing-disruptive-comments#deleting-a-comment
discussion_post_reply.update
Triggered when a reply to a team discussion post is edited.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/managing-disruptive-comments#editing-a-comment

enterprise_announcement

enterprise_announcement.create
A global announcement banner was created for the enterprise.
Fields
No fields available
Reference
Customizing user messages for your enterprise
enterprise_announcement.destroy
A global announcement banner was removed from the enterprise.
Fields
No fields available
Reference
Customizing user messages for your enterprise
enterprise_announcement.update
A global announcement banner was updated for the enterprise.
Fields
No fields available
Reference
Customizing user messages for your enterprise

enterprise_domain

enterprise_domain.approve
A domain was approved for an enterprise.
Fields
No fields available
Reference
Verifying or approving a domain for your enterprise
enterprise_domain.create
A domain was added to an enterprise.
Fields
No fields available
Reference
Verifying or approving a domain for your enterprise
enterprise_domain.destroy
A domain was removed from an enterprise.
Fields
No fields available
Reference
Verifying or approving a domain for your enterprise
enterprise_domain.verify
A domain was verified for an enterprise.
Fields
No fields available
Reference
Verifying or approving a domain for your enterprise

enterprise

enterprise.register_self_hosted_runner
A new GitHub Actions self-hosted runner was registered.
Fields
No fields available
Reference
Adding self-hosted runners
enterprise.remove_self_hosted_runner
A GitHub Actions self-hosted runner was removed.
Fields
No fields available
Reference
Removing self-hosted runners
enterprise.runner_group_created
A GitHub Actions self-hosted runner group was created.
Fields
No fields available
Reference
Removing self-hosted runners
enterprise.runner_group_removed
A GitHub Actions self-hosted runner group was removed.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
enterprise.runner_group_runner_removed
The REST API was used to remove a GitHub Actions self-hosted runner from a group.
Fields
No fields available
Reference
/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization
enterprise.runner_group_runners_added
A GitHub Actions self-hosted runner was added to a group.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
enterprise.runner_group_runners_updated
A GitHub Actions runner group's list of members was updated.
Fields
No fields available
Reference
/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization
enterprise.runner_group_updated
The configuration of a GitHub Actions self-hosted runner group was changed.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
enterprise.self_hosted_runner_offline
The GitHub Actions runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Monitoring and troubleshooting self-hosted runners
enterprise.self_hosted_runner_online
The GitHub Actions runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Monitoring and troubleshooting self-hosted runners
enterprise.self_hosted_runner_updated
The GitHub Actions runner application was updated. This event is not included in the JSON/CSV export.
Fields
No fields available
Reference
About self-hosted runners

enterprise_team

enterprise_team.add_member
A new member was added to the enterprise team or an IdP group linked to an enterprise team, or an IdP group was linked to an enterprise team.
Fields
No fields available
enterprise_team.copilot_assignment
A license for GitHub Copilot was assigned to an enterprise team.
Fields
No fields available
enterprise_team.copilot_unassignment
A license for GitHub Copilot was unassigned from an enterprise team.
Fields
No fields available
enterprise_team.create
A new enterprise team was created.
Fields
No fields available
enterprise_team.destroy
An enterprise team was deleted.
Fields
No fields available
enterprise_team.remove_member
A member was removed from the enterprise team or an IdP group linked to an enterprise team, or an IdP group was unlinked from an enterprise team.
Fields
No fields available
enterprise_team.rename
The name of an enterprise team was changed.
Fields
No fields available

environment

environment.add_protection_rule
A GitHub Actions deployment protection rule was created via the API.
Fields
No fields available
Reference
Managing environments for deployment
environment.create_actions_secret
A secret was created for a GitHub Actions environment.
Fields
No fields available
Reference
Managing environments for deployment
environment.create_actions_variable
A variable was created for a GitHub Actions environment.
Fields
No fields available
Reference
Store information in variables
environment.delete
An environment was deleted.
Fields
No fields available
Reference
Managing environments for deployment
environment.remove_actions_secret
A secret was deleted for a GitHub Actions environment.
Fields
No fields available
Reference
Managing environments for deployment
environment.remove_actions_variable
A variable was deleted for a GitHub Actions environment.
Fields
No fields available
Reference
Store information in variables
environment.remove_protection_rule
A GitHub Actions deployment protection rule was deleted via the API.
Fields
No fields available
Reference
Managing environments for deployment
environment.update_actions_secret
A secret was updated for a GitHub Actions environment.
Fields
No fields available
Reference
Managing environments for deployment
environment.update_actions_variable
A variable was updated for a GitHub Actions environment.
Fields
No fields available
Reference
Store information in variables
environment.update_protection_rule
A GitHub Actions deployment protection rule was updated via the API.
Fields
No fields available
Reference
Managing environments for deployment

external_group

external_group.add_member
A user was added to an external group.
Fields
No fields available
external_group.delete
An external group was deleted.
Fields
No fields available
external_group.link
An external group was linked to a GitHub team.
Fields
No fields available
external_group.provision
An external group was created.
Fields
No fields available
external_group.remove_member
A user was removed from an external group.
Fields
No fields available
external_group.scim_api_failure
Failed external group SCIM API request.
Fields
No fields available
Reference
REST API endpoints for SCIM
external_group.scim_api_success
Successful external group SCIM API request. Excludes GET API requests.
Fields
No fields available
Reference
REST API endpoints for SCIM
external_group.unlink
An external group was unlinked to a GitHub team.
Fields
No fields available
external_group.update
An external group was updated.
Fields
No fields available
external_group.update_display_name
An external group's display name was updated.
Fields
No fields available

external_identity

external_identity.deprovision
An external identity was deprovisioned, suspending the linked GitHub user.
Fields
No fields available
external_identity.provision
An external identity was created and linked to a GitHub user.
Fields
No fields available
external_identity.scim_api_failure
Failed external identity SCIM API request.
Fields
No fields available
Reference
REST API endpoints for SCIM
external_identity.scim_api_success
Successful external identity SCIM API request. Excludes GET API requests.
Fields
No fields available
Reference
REST API endpoints for SCIM
external_identity.update
An external identity was updated.
Fields
No fields available

gist

gist.create
A gist was created.
Fields
No fields available
gist.destroy
A gist was deleted.
Fields
No fields available
gist.visibility_change
The visibility of a gist was updated.
Fields
No fields available

git

git.clone
A repository was cloned.
Fields
No fields available
git.fetch
Changes were fetched from a repository.
Fields
No fields available
git.push
Changes were pushed to a repository.
Fields
No fields available

git_signing_ssh_public_key

git_signing_ssh_public_key.create
An SSH key was added to a user account as a Git commit signing key.
Fields
No fields available
Reference
/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key
git_signing_ssh_public_key.delete
An SSH key was removed from a user account as a Git commit signing key.
Fields
No fields available
Reference
/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key

hook

hook.active_changed
A hook's active status was updated.
Fields
No fields available
hook.config_changed
A hook's configuration was changed.
Fields
No fields available
hook.create
A new hook was added.
Fields
No fields available
Reference
About webhooks
hook.destroy
A hook was deleted.
Fields
No fields available
hook.events_changed
A hook's configured events were changed.
Fields
No fields available

integration

integration.create
A GitHub App was created.
Fields
No fields available
integration.destroy
A GitHub App was deleted.
Fields
No fields available
integration.manager_removed
A member of an enterprise or organization was removed from being a GitHub App manager.
Fields
No fields available
Reference
/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization
integration.remove_client_secret
A client secret for a GitHub App was removed.
Fields
No fields available
integration.revoke_all_tokens
All user tokens for a GitHub App were requested to be revoked.
Fields
No fields available
integration.revoke_tokens
Token(s) for a GitHub App were revoked.
Fields
No fields available
integration.suspend
A GitHub App was suspended.
Fields
No fields available
Reference
/apps/maintaining-github-apps/suspending-a-github-app-installation
integration.transfer
Ownership of a GitHub App was transferred to another user or organization.
Fields
No fields available
Reference
/apps/maintaining-github-apps/transferring-ownership-of-a-github-app
integration.unsuspend
A GitHub App was unsuspended.
Fields
No fields available
Reference
/apps/maintaining-github-apps/suspending-a-github-app-installation

integration_installation

integration_installation.create
A GitHub App was installed.
Fields
No fields available
Reference
/apps/using-github-apps/authorizing-github-apps
integration_installation.destroy
A GitHub App was uninstalled.
Fields
No fields available
Reference
/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access
integration_installation.repositories_added
Repositories were added to a GitHub App.
Fields
No fields available
Reference
/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access
integration_installation.repositories_removed
Repositories were removed from a GitHub App.
Fields
No fields available
Reference
/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access
integration_installation.suspend
A GitHub App was suspended.
Fields
No fields available
Reference
/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access
integration_installation.unsuspend
A GitHub App was unsuspended.
Fields
No fields available
Reference
/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access
integration_installation.version_updated
Permissions for a GitHub App were updated.
Fields
No fields available
Reference
/apps/using-github-apps/approving-updated-permissions-for-a-github-app

ip_allow_list

ip_allow_list.disable
An IP allow list was disabled.
Fields
No fields available
ip_allow_list.disable_for_installed_apps
An IP allow list was disabled for installed GitHub Apps.
Fields
No fields available
ip_allow_list.disable_user_level_enforcement
IP allow list user level enforcement was disabled.
Fields
No fields available
ip_allow_list.enable
An IP allow list was enabled.
Fields
No fields available
ip_allow_list.enable_for_installed_apps
An IP allow list was enabled for installed GitHub Apps.
Fields
No fields available
ip_allow_list.enable_user_level_enforcement
IP allow list user level enforcement was enabled.
Fields
No fields available

ip_allow_list_entry

ip_allow_list_entry.create
An IP address was added to an IP allow list.
Fields
No fields available
ip_allow_list_entry.destroy
An IP address was deleted from an IP allow list.
Fields
No fields available
ip_allow_list_entry.update
An IP address or its description was changed.
Fields
No fields available

marketplace_agreement_signature

marketplace_agreement_signature.create
The GitHub Marketplace Developer Agreement was signed.
Fields
No fields available

marketplace_listing

marketplace_listing.approve
A listing was approved for inclusion in GitHub Marketplace.
Fields
No fields available
marketplace_listing.change_category
A category for a listing for an app in GitHub Marketplace was changed.
Fields
No fields available
marketplace_listing.create
A listing for an app in GitHub Marketplace was created.
Fields
No fields available
marketplace_listing.delist
A listing was removed from GitHub Marketplace.
Fields
No fields available
marketplace_listing.redraft
A listing was sent back to draft state.
Fields
No fields available
marketplace_listing.reject
A listing was not accepted for inclusion in GitHub Marketplace.
Fields
No fields available

migration

migration.create
A migration file was created for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance.
Fields
No fields available

oauth_access

oauth_access.create
An OAuth access token was generated.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, Managing your personal access tokens
oauth_access.destroy
An OAuth access token was deleted.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps
oauth_access.regenerate
An OAuth access token was regenerated.
Fields
No fields available
oauth_access.update
An OAuth access token was updated.
Fields
No fields available

oauth_application

oauth_application.create
An OAuth application was created.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.destroy
An OAuth application was deleted.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.generate_client_secret
An OAuth application's secret key was generated.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.remove_client_secret
An OAuth application's secret key was deleted.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.reset_secret
The secret key for an OAuth application was reset.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.revoke_all_tokens
All user tokens for an OAuth application were requested to be revoked.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.revoke_tokens
Token(s) for an OAuth application were revoked.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.transfer
An OAuth application was transferred from one account to another.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app
oauth_application.unsuspend
An OAuth application was unsuspended for a user or organization account.
Fields
No fields available
Reference
/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app

oauth_authorization

oauth_authorization.create
An authorization for an OAuth application was created.
Fields
No fields available
Reference
/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps
oauth_authorization.destroy
An authorization for an OAuth application was deleted.
Fields
No fields available
Reference
Reviewing and revoking authorization of GitHub Apps
oauth_authorization.update
An authorization for an OAuth application was updated.
Fields
No fields available
Reference
/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps

org

org.accept_business_invitation
An invitation sent to an organization to join an enterprise was accepted.
Fields
No fields available
Reference
Adding organizations to your enterprise
org.add_billing_manager
A billing manager was added to an organization.
Fields
No fields available
Reference
/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization
org.add_member
A user joined an organization.
Fields
No fields available
org.add_outside_collaborator
An outside collaborator was added to a repository.
Fields
No fields available
org.advanced_security_disabled_for_new_repos
GitHub Advanced Security was disabled for new repositories in an organization.
Fields
No fields available
org.advanced_security_disabled_on_all_repos
GitHub Advanced Security was disabled for all repositories in an organization.
Fields
No fields available
org.advanced_security_enabled_for_new_repos
GitHub Advanced Security was enabled for new repositories in an organization.
Fields
No fields available
org.advanced_security_enabled_on_all_repos
GitHub Advanced Security was enabled for all repositories in an organization.
Fields
No fields available
org.advanced_security_policy_selected_member_disabled
An enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.
Fields
No fields available
Reference
Enforcing policies for code security and analysis for your enterprise
org.advanced_security_policy_selected_member_enabled
An enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.
Fields
No fields available
Reference
Enforcing policies for code security and analysis for your enterprise
org.async_delete
A user initiated a background job to delete an organization.
Fields
No fields available
org.block_user
An organization owner blocked a user from accessing the organization's repositories.
Fields
No fields available
Reference
/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization
org.cancel_business_invitation
An invitation for an organization to join an enterprise was revoked
Fields
No fields available
Reference
Adding organizations to your enterprise
org.cancel_invitation
An invitation sent to a user to join an organization was revoked.
Fields
No fields available
org.code_scanning_autofix_disabled
Autofix for code scanning alerts was disabled for an organization.
Fields
No fields available
org.code_scanning_autofix_enabled
Autofix for code scanning alerts was enabled for an organization.
Fields
No fields available
org.codeql_disabled
Code scanning using the default setup was disabled for an organization.
Fields
No fields available
Reference
/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale
org.codeql_enabled
Code scanning using the default setup was enabled for an organization.
Fields
No fields available
Reference
/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale
org.config.disable_collaborators_only
The interaction limit for collaborators only for an organization was disabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization
org.config.disable_contributors_only
The interaction limit for prior contributors only for an organization was disabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization
org.config.disable_sockpuppet_disallowed
The interaction limit for existing users only for an organization was disabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization
org.config.enable_collaborators_only
The interaction limit for collaborators only for an organization was enabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization
org.config.enable_contributors_only
The interaction limit for prior contributors only for an organization was enabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization
org.config.enable_sockpuppet_disallowed
The interaction limit for existing users only for an organization was enabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization
org.confirm_business_invitation
An invitation for an organization to join an enterprise was confirmed.
Fields
No fields available
Reference
Adding organizations to your enterprise
org.create
An organization was created.
Fields
No fields available
Reference
/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch
org.delete
An organization was deleted by a user or staff.
Fields
No fields available
org.disable_member_team_creation_permission
Team creation was limited to owners.
Fields
No fields available
Reference
/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization
org.disable_reader_discussion_creation_permission
An organization owner limited discussion creation to users with at least triage permission in an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization
org.disable_saml
SAML single sign-on was disabled for an organization.
Fields
No fields available
org.disable_two_factor_requirement
A two-factor authentication requirement was disabled for the organization.
Fields
No fields available
org.display_commenter_full_name_disabled
An organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.
Fields
No fields available
org.display_commenter_full_name_enabled
An organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.
Fields
No fields available
org.enable_member_team_creation_permission
Team creation by members was allowed.
Fields
No fields available
Reference
/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization
org.enable_reader_discussion_creation_permission
An organization owner allowed users with read access to create discussions in an organization
Fields
No fields available
Reference
/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization
org.enable_saml
SAML single sign-on was enabled for the organization.
Fields
No fields available
Reference
Enabling and testing SAML single sign-on for your organization
org.enable_two_factor_requirement
Two-factor authentication is now required for the organization.
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization
org.integration_manager_added
An organization owner granted a member access to manage all GitHub Apps owned by an organization.
Fields
No fields available
org.integration_manager_removed
An organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.
Fields
No fields available
org.invite_member
A new user was invited to join an organization.
Fields
No fields available
Reference
/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization
org.invite_to_business
An organization was invited to join an enterprise.
Fields
No fields available
org.members_can_update_protected_branches.disable
The ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.
Fields
No fields available
org.members_can_update_protected_branches.enable
The ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.
Fields
No fields available
org.recreate
An organization was restored.
Fields
No fields available
org.register_self_hosted_runner
A new self-hosted runner was registered.
Fields
No fields available
Reference
Adding self-hosted runners
org.remove_member
A member was removed from an organization, either manually or due to a two-factor authentication requirement.
Fields
No fields available
org.remove_outside_collaborator
An outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.
Fields
No fields available
org.remove_self_hosted_runner
A self-hosted runner was removed.
Fields
No fields available
Reference
Removing self-hosted runners
org.rename
An organization was renamed.
Fields
No fields available
org.restore_member
An organization member was restored.
Fields
No fields available
Reference
/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization
org.runner_group_created
A self-hosted runner group was created.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
org.runner_group_removed
A self-hosted runner group was removed.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
org.runner_group_runner_removed
The REST API was used to remove a self-hosted runner from a group.
Fields
No fields available
Reference
/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization
org.runner_group_runners_added
A self-hosted runner was added to a group.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
org.runner_group_runners_updated
A runner group's list of members was updated.
Fields
No fields available
Reference
/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization
org.runner_group_updated
The configuration of a self-hosted runner group was changed.
Fields
No fields available
Reference
Managing access to self-hosted runners using groups
org.secret_scanning_custom_pattern_push_protection_disabled
Push protection for a custom pattern for secret scanning was disabled for an organization.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
org.secret_scanning_custom_pattern_push_protection_enabled
Push protection for a custom pattern for secret scanning was enabled for an organization.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
org.secret_scanning_push_protection_custom_message_disabled
The custom message triggered by an attempted push to a push-protected repository was disabled for an organization.
Fields
No fields available
Reference
About push protection
org.secret_scanning_push_protection_custom_message_enabled
The custom message triggered by an attempted push to a push-protected repository was enabled for an organization.
Fields
No fields available
Reference
About push protection
org.secret_scanning_push_protection_custom_message_updated
The custom message triggered by an attempted push to a push-protected repository was updated for an organization.
Fields
No fields available
Reference
About push protection
org.secret_scanning_push_protection_disable
Push protection for secret scanning was disabled.
Fields
No fields available
Reference
About push protection
org.secret_scanning_push_protection_enable
Push protection for secret scanning was enabled.
Fields
No fields available
Reference
About push protection
org.secret_scanning_push_protection_new_repos_disable
Push protection for secret scanning was disabled for all new repositories in the organization.
Fields
No fields available
Reference
About push protection
org.secret_scanning_push_protection_new_repos_enable
Push protection for secret scanning was enabled for all new repositories in the organization.
Fields
No fields available
Reference
About push protection
org.security_center_export_coverage
A CSV export was requested on the Coverage page.
Fields
No fields available
org.security_center_export_overview_dashboard
A CSV export was requested on the Overview Dashboard page.
Fields
No fields available
org.security_center_export_risk
A CSV export was requested on the Risk page.
Fields
No fields available
org.self_hosted_runner_offline
The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Monitoring and troubleshooting self-hosted runners
org.self_hosted_runner_online
The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Monitoring and troubleshooting self-hosted runners
org.self_hosted_runner_updated
The runner application was updated. This event is not included in the JSON/CSV export.
Fields
No fields available
Reference
About self-hosted runners
org.set_actions_fork_pr_approvals_policy
The setting for requiring approvals for workflows from public forks was changed for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks
org.set_actions_private_fork_pr_approvals_policy
The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks
org.set_actions_retention_limit
The retention period for GitHub Actions artifacts and logs in an organization was changed.
Fields
No fields available
Reference
/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization
org.set_default_workflow_permissions
The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization
org.set_fork_pr_workflows_policy
The policy for workflows on private repository forks was changed.
Fields
No fields available
Reference
/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks
org.set_workflow_permission_can_approve_pr
The policy for allowing GitHub Actions to create and approve pull requests was changed for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests
org.sso_response
A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
org.unblock_user
A user was unblocked from an organization.
Fields
No fields available
Reference
/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization
org.update_actions_settings
An organization owner or site administrator updated GitHub Actions policy settings for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization
org.update_default_repository_permission
The default repository permission level for organization members was changed.
Fields
No fields available
org.update_member
A person's role was changed from owner to member or member to owner.
Fields
No fields available
org.update_member_repository_creation_permission
The create repository permission for organization members was changed.
Fields
No fields available
org.update_member_repository_invitation_permission
An organization owner changed the policy setting for organization members inviting outside collaborators to repositories.
Fields
No fields available
Reference
Setting permissions for adding outside collaborators
org.update_saml_provider_settings
An organization's SAML provider settings were updated.
Fields
No fields available
org.update_terms_of_service
An organization changed between the Standard Terms of Service and the GitHub Customer Agreement.
Fields
No fields available
Reference
/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement

org_secret_scanning_automatic_validity_checks

org_secret_scanning_automatic_validity_checks.disabled
Automatic partner validation checks have been disabled at the organization level
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization
org_secret_scanning_automatic_validity_checks.enabled
Automatic partner validation checks have been enabled at the organization level
Fields
No fields available
Reference
/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization

org_secret_scanning_custom_pattern

org_secret_scanning_custom_pattern.create
A custom pattern was created for secret scanning in an organization.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
org_secret_scanning_custom_pattern.delete
A custom pattern was removed from secret scanning in an organization.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
org_secret_scanning_custom_pattern.publish
A custom pattern was published for secret scanning in an organization.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
org_secret_scanning_custom_pattern.update
Changes to a custom pattern were saved and a dry run was executed for secret scanning in an organization.
Fields
No fields available
Reference
Defining custom patterns for secret scanning

org_secret_scanning_non_provider_patterns

org_secret_scanning_non_provider_patterns.disabled
Secret scanning for non-provider patterns was disabled at the organization level.
Fields
No fields available
Reference
Supported secret scanning patterns
org_secret_scanning_non_provider_patterns.enabled
Secret scanning for non-provider patterns was enabled at the organization level.
Fields
No fields available
Reference
Supported secret scanning patterns

org_secret_scanning_push_protection_bypass_list

org_secret_scanning_push_protection_bypass_list.add
A role or team was added to the push protection bypass list at the organization level.
Fields
No fields available
Reference
About push protection
org_secret_scanning_push_protection_bypass_list.disable
Push protection settings for "Users who can bypass push protection for secret scanning" changed from "Specific roles or teams" to "Anyone with write access" at the organization level.
Fields
No fields available
Reference
About push protection
org_secret_scanning_push_protection_bypass_list.enable
Push protection settings for "Users who can bypass push protection for secret scanning" changed from "Anyone with write access" to "Specific roles or teams" at the organization level.
Fields
No fields available
Reference
About push protection
org_secret_scanning_push_protection_bypass_list.remove
A role or team was removed from the push protection bypass list at the organization level.
Fields
No fields available
Reference
About push protection

org_secret_scanning_push_protection_pattern_configuration

org_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed
The push protection setting was changed for a secret type for your org.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise
org_secret_scanning_push_protection_pattern_configuration.updated
The push protection pattern configuration was updated for your org.
Fields
No fields available
Reference
Managing GitHub Advanced Security features for your enterprise

organization_domain

organization_domain.approve
A domain was approved for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization
organization_domain.create
A domain was added to an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization
organization_domain.destroy
A domain was removed from an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain
organization_domain.verify
A domain was verified for an organization.
Fields
No fields available
Reference
/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization

packages

packages.package_deleted
An entire package was deleted.
Fields
No fields available
Reference
/packages/learn-github-packages/deleting-and-restoring-a-package
packages.package_published
A package was published or republished to an organization.
Fields
No fields available
packages.package_version_deleted
A specific package version was deleted.
Fields
No fields available
Reference
/packages/learn-github-packages/deleting-and-restoring-a-package
packages.package_version_published
A specific package version was published or republished to a package.
Fields
No fields available

pages_protected_domain

pages_protected_domain.create
A GitHub Pages verified domain was created for an organization or enterprise.
Fields
No fields available
Reference
/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages
pages_protected_domain.delete
A GitHub Pages verified domain was deleted from an organization or enterprise.
Fields
No fields available
Reference
/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages
pages_protected_domain.verify
A GitHub Pages domain was verified for an organization or enterprise.
Fields
No fields available
Reference
/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages

passkey

passkey.register
A new passkey was added.
Fields
No fields available
passkey.remove
A new passkey was removed.
Fields
No fields available

payment_method

payment_method.create
A new payment method was added, such as a new credit card or PayPal account.
Fields
No fields available
payment_method.remove
A payment method was removed.
Fields
No fields available
payment_method.update
An existing payment method was updated.
Fields
No fields available

personal_access_token

personal_access_token.access_granted
A fine-grained personal access token was granted access to resources.
Fields
No fields available
Reference
/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization
personal_access_token.access_revoked
A fine-grained personal access token was revoked. The token can still read public organization resources.
Fields
No fields available
Reference
/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization
personal_access_token.create
Triggered when you create a fine-grained personal access token.
Fields
No fields available
personal_access_token.credential_regenerated
Triggered when you regenerate a fine-grained personal access token.
Fields
No fields available
personal_access_token.credential_revoked
A fine-grained personal access token was revoked by GitHub Advanced Security.
Fields
No fields available
Reference
/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users
personal_access_token.destroy
Triggered when you delete a fine-grained personal access token.
Fields
No fields available
personal_access_token.request_cancelled
A pending request for a fine-grained personal access token to access organization resources was canceled.
Fields
No fields available
personal_access_token.request_created
Triggered when a fine-grained personal access token was created to access organization resources and the organization requires approval before the token can access organization resources.
Fields
No fields available
Reference
/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization
personal_access_token.request_denied
A request for a fine-grained personal access token to access organization resources was denied.
Fields
No fields available
Reference
/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization
personal_access_token.update
A fine-grained personal access token was updated.
Fields
No fields available
Reference
/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens

profile_picture

profile_picture.update
A profile picture was updated.
Fields
No fields available
Reference
/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile

project

project.access
A project board visibility was changed.
Fields
No fields available
project.close
A project board was closed.
Fields
No fields available
Reference
Closing a project (classic)
project.create
A project board was created.
Fields
No fields available
project.delete
A project board was deleted.
Fields
No fields available
project.link
A repository was linked to a project board.
Fields
No fields available
project.open
A project board was reopened.
Fields
No fields available
Reference
Reopening a closed project (classic)
project.rename
A project board was renamed.
Fields
No fields available
project.unlink
A repository was unlinked from a project board.
Fields
No fields available
project.update_org_permission
The project's base-level permission for all organization members was changed or removed.
Fields
No fields available
project.update_team_permission
A team's project board permission level was changed or when a team was added or removed from a project board.
Fields
No fields available
project.update_user_permission
A user was added to or removed from a project board or had their permission level changed.
Fields
No fields available
project.visibility_private
A project's visibility was changed from public to private.
Fields
No fields available
project.visibility_public
A project's visibility was changed from private to public.
Fields
No fields available

project_collaborator

project_collaborator.add
A collaborator was added to a project.
Fields
No fields available
project_collaborator.remove
A collaborator was removed from a project.
Fields
No fields available
project_collaborator.update
A project collaborator's permission level was changed.
Fields
No fields available

project_field

project_field.create
A field was created in a project board.
Fields
No fields available
Reference
/issues/planning-and-tracking-with-projects/understanding-fields
project_field.delete
A field was deleted in a project board.
Fields
No fields available
Reference
/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields

project_view

project_view.create
A view was created in a project board.
Fields
No fields available
Reference
/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views
project_view.delete
A view was deleted in a project board.
Fields
No fields available
Reference
/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views

protected_branch

protected_branch.authorized_users_teams
The users, teams, or integrations allowed to bypass a branch protection were changed.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches
protected_branch.branch_allowances
A protected branch allowance was given to a specific user, team or integration.
Fields
No fields available
protected_branch.create
Branch protection was enabled on a branch.
Fields
No fields available
protected_branch.destroy
Branch protection was disabled on a branch.
Fields
No fields available
protected_branch.dismiss_stale_reviews
Enforcement of dismissing stale pull requests was updated on a branch.
Fields
No fields available
protected_branch.dismissal_restricted_users_teams
Enforcement of restricting users and/or teams who can dismiss reviews was updated on a branch.
Fields
No fields available
protected_branch.policy_override
A branch protection requirement was overridden by a repository administrator.
Fields
No fields available
protected_branch.rejected_ref_update
A branch update attempt was rejected.
Fields
No fields available
protected_branch.update_admin_enforced
Branch protection was enforced for repository administrators.
Fields
No fields available
protected_branch.update_allow_deletions_enforcement_level
Branch deletion was enabled or disabled for a protected branch.
Fields
No fields available
protected_branch.update_allow_force_pushes_enforcement_level
Force pushes were enabled or disabled for a branch.
Fields
No fields available
protected_branch.update_ignore_approvals_from_contributors
Ignoring of approvals from contributors to a pull request was enabled or disabled for a branch.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule
protected_branch.update_linear_history_requirement_enforcement_level
Required linear commit history was enabled or disabled for a branch.
Fields
No fields available
protected_branch.update_lock_allows_fetch_and_merge
Fork syncing was enabled or disabled for a read-only branch
Fields
No fields available
Reference
repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch
protected_branch.update_lock_branch_enforcement_level
The enforcement of a branch lock was updated.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch
protected_branch.update_merge_queue_enforcement_level
Enforcement of the merge queue was modified for a branch.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue
protected_branch.update_name
A branch name pattern was updated for a branch.
Fields
No fields available
protected_branch.update_pull_request_reviews_enforcement_level
Enforcement of required pull request reviews was updated for a branch. Can be 0 (deactivated), 1 (non-admins), or 2 (everyone).
Fields
No fields available
protected_branch.update_require_code_owner_review
Enforcement of required code owner review was updated for a branch.
Fields
No fields available
protected_branch.update_require_last_push_approval
Someone other than the person who pushed the last code-modifying commit to the branch must approve pull requests for the branch.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging
protected_branch.update_required_approving_review_count
Enforcement of the required number of approvals before merging was updated on a branch.
Fields
No fields available
protected_branch.update_required_status_checks_enforcement_level
Enforcement of required status checks was updated for a branch.
Fields
No fields available
protected_branch.update_signature_requirement_enforcement_level
Enforcement of required commit signing was updated for a branch.
Fields
No fields available
protected_branch.update_strict_required_status_checks_policy
Enforcement of required status checks was updated for a branch.
Fields
No fields available

public_key

public_key.create
An SSH key was added to a user account or a deploy key was added to a repository.
Fields
No fields available
Reference
/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account
public_key.delete
An SSH key was removed from a user account or a deploy key was removed from a repository.
Fields
No fields available
Reference
/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys
public_key.unverification_failure
A user account's SSH key or a repository's deploy key was unable to be unverified.
Fields
No fields available
Reference
/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys
public_key.unverify
A user account's SSH key or a repository's deploy key was unverified.
Fields
No fields available
Reference
/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys
public_key.update
A user account's SSH key or a repository's deploy key was updated.
Fields
No fields available
Reference
/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys
public_key.verification_failure
A user account's SSH key or a repository's deploy key was unable to be verified.
Fields
No fields available
Reference
/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys
public_key.verify
A user account's SSH key or a repository's deploy key was verified.
Fields
No fields available
Reference
/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys

pull_request

pull_request.close
A pull request was closed without being merged.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/closing-a-pull-request
pull_request.create_review_request
A review was requested on a pull request.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews
pull_request.in_progress
A pull request was marked as in progress.
Fields
No fields available
pull_request.indirect_merge
A pull request was considered merged because the pull request's commits were merged into the target branch.
Fields
No fields available
pull_request.merge
A pull request was merged.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/merging-a-pull-request
pull_request.remove_review_request
A review request was removed from a pull request.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews
pull_request.reopen
A pull request was reopened after previously being closed.
Fields
No fields available

pull_request_review_comment

pull_request_review_comment.create
A review comment was added to a pull request.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews
pull_request_review_comment.delete
A review comment on a pull request was deleted.
Fields
No fields available
pull_request_review_comment.update
A review comment on a pull request was changed.
Fields
No fields available

pull_request_review

pull_request_review.delete
A review on a pull request was deleted.
Fields
No fields available
pull_request_review.dismiss
A review on a pull request was dismissed.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/dismissing-a-pull-request-review
pull_request_review.submit
A review on a pull request was submitted.
Fields
No fields available
Reference
/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-proposed-changes-in-a-pull-request#submitting-your-review

repo

repo.access
The visibility of a repository changed.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility
repo.advanced_security_disabled
GitHub Advanced Security was disabled for a repository.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository
repo.advanced_security_enabled
GitHub Advanced Security was enabled for a repository.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository
repo.archived
A repository was archived.
Fields
No fields available
Reference
/repositories/archiving-a-github-repository
repo.change_merge_setting
Pull request merge options were changed for a repository.
Fields
No fields available
repo.code_scanning_analysis_deleted
Code scanning analysis for a repository was deleted.
Fields
No fields available
Reference
/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository
repo.code_scanning_autofix_disabled
Autofix for code scanning alerts was disabled for a repository.
Fields
No fields available
repo.code_scanning_autofix_enabled
Autofix for code scanning alerts was enabled for a repository.
Fields
No fields available
repo.code_scanning_configuration_for_branch_deleted
A code scanning configuration for a branch of a repository was deleted.
Fields
No fields available
Reference
Resolving code scanning alerts
repo.codeql_disabled
Code scanning using the default setup was disabled for a repository.
Fields
No fields available
Reference
/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning
repo.codeql_enabled
Code scanning using the default setup was enabled for a repository.
Fields
No fields available
Reference
/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning
repo.codeql_updated
Code scanning using the default setup was updated for a repository.
Fields
No fields available
Reference
/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning
repo.config.disable_collaborators_only
The interaction limit for collaborators only was disabled.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository
repo.config.disable_contributors_only
The interaction limit for prior contributors only was disabled in a repository.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository
repo.config.disable_sockpuppet_disallowed
The interaction limit for existing users only was disabled in a repository.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository
repo.config.enable_collaborators_only
The interaction limit for collaborators only was enabled in a repository Users that are not collaborators or organization members were unable to interact with a repository for a set duration.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository
repo.config.enable_contributors_only
The interaction limit for prior contributors only was enabled in a repository Users that are not prior contributors, collaborators or organization members were unable to interact with a repository for a set duration.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository
repo.config.enable_sockpuppet_disallowed
The interaction limit for existing users was enabled in a repository New users aren't able to interact with a repository for a set duration Existing users of the repository, contributors, collaborators or organization members are able to interact with a repository.
Fields
No fields available
Reference
/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository
repo.create
A repository was created.
Fields
No fields available
Reference
/repositories/creating-and-managing-repositories/creating-a-new-repository
repo.create_actions_secret
A GitHub Actions secret was created for a repository.
Fields
No fields available
Reference
Using secrets in GitHub Actions
repo.create_actions_variable
A GitHub Actions variable was created for a repository.
Fields
No fields available
Reference
Store information in variables
repo.create_integration_secret
A Codespaces or Dependabot secret was created for a repository.
Fields
No fields available
repo.destroy
A repository was deleted.
Fields
No fields available
Reference
/repositories/creating-and-managing-repositories/deleting-a-repository
repo.disk_archive
A repository was archived on disk.
Fields
No fields available
Reference
/repositories/archiving-a-github-repository/archiving-repositories
repo.download_zip
A source code archive of a repository was downloaded as a ZIP file.
Fields
No fields available
Reference
/repositories/working-with-files/using-files/downloading-source-code-archives
repo.override_unlock
The repository was unlocked.
Fields
No fields available
repo.pages_cname
A GitHub Pages custom domain was modified in a repository.
Fields
No fields available
repo.pages_create
A GitHub Pages site was created.
Fields
No fields available
repo.pages_destroy
A GitHub Pages site was deleted.
Fields
No fields available
repo.pages_https_redirect_disabled
HTTPS redirects were disabled for a GitHub Pages site.
Fields
No fields available
repo.pages_https_redirect_enabled
HTTPS redirects were enabled for a GitHub Pages site.
Fields
No fields available
repo.pages_private
A GitHub Pages site visibility was changed to private.
Fields
No fields available
repo.pages_public
A GitHub Pages site visibility was changed to public.
Fields
No fields available
repo.pages_soft_delete
A GitHub Pages site was soft-deleted because its owner's plan changed.
Fields
No fields available
repo.pages_soft_delete_restore
A GitHub Pages site that was previously soft-deleted was restored.
Fields
No fields available
repo.pages_source
A GitHub Pages source was modified.
Fields
No fields available
repo.register_self_hosted_runner
A new self-hosted runner was registered.
Fields
No fields available
Reference
Adding self-hosted runners
repo.remove_actions_secret
A GitHub Actions secret was deleted for a repository.
Fields
No fields available
Reference
Using secrets in GitHub Actions
repo.remove_actions_variable
A GitHub Actions variable was deleted for a repository.
Fields
No fields available
Reference
Store information in variables
repo.remove_integration_secret
A Codespaces or Dependabot secret was deleted for a repository.
Fields
No fields available
repo.remove_self_hosted_runner
A self-hosted runner was removed.
Fields
No fields available
Reference
Removing self-hosted runners
repo.remove_topic
A topic was removed from a repository.
Fields
No fields available
repo.rename
A repository was renamed.
Fields
No fields available
Reference
/repositories/creating-and-managing-repositories/renaming-a-repository
repo.self_hosted_runner_offline
The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Monitoring and troubleshooting self-hosted runners
repo.self_hosted_runner_online
The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Monitoring and troubleshooting self-hosted runners
repo.self_hosted_runner_updated
The runner application was updated. This event is not included in the JSON/CSV export.
Fields
No fields available
Reference
About self-hosted runners
repo.set_actions_fork_pr_approvals_policy
The setting for requiring approvals for workflows from public forks was changed for a repository.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks
repo.set_actions_private_fork_pr_approvals_policy
The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for a repository.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories
repo.set_default_workflow_permissions
The default permissions granted to the GITHUB_TOKEN when running workflows were changed for a repository.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository
repo.set_fork_pr_workflows_policy
Triggered when the policy for workflows on private repository forks is changed.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks
repo.set_workflow_permission_can_approve_pr
The policy for allowing GitHub Actions to create and approve pull requests was changed for a repository.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests
repo.staff_unlock
An enterprise owner or GitHub staff (with permission from a repository administrator) temporarily unlocked the repository.
Fields
No fields available
repo.temporary_access_granted
Temporary access was enabled for a repository.
Fields
No fields available
Reference
Accessing user-owned repositories in your enterprise
repo.transfer
A user accepted a request to receive a transferred repository.
Fields
No fields available
Reference
/repositories/creating-and-managing-repositories/transferring-a-repository
repo.transfer_outgoing
A repository was transferred to another repository network.
Fields
No fields available
repo.transfer_start
A user sent a request to transfer a repository to another user or organization.
Fields
No fields available
repo.unarchived
A repository was unarchived.
Fields
No fields available
Reference
/repositories/archiving-a-github-repository
repo.update_actions_access_settings
The setting to control how a repository was used by GitHub Actions workflows in other repositories was changed.
Fields
No fields available
repo.update_actions_secret
A GitHub Actions secret was updated for a repository.
Fields
No fields available
Reference
Using secrets in GitHub Actions
repo.update_actions_settings
A repository administrator changed GitHub Actions policy settings for a repository.
Fields
No fields available
repo.update_actions_variable
A GitHub Actions variable was updated for a repository.
Fields
No fields available
Reference
Store information in variables
repo.update_default_branch
The default branch for a repository was changed.
Fields
No fields available
repo.update_integration_secret
A Codespaces or Dependabot secret was updated for a repository.
Fields
No fields available
repo.update_member
A user's permission to a repository was changed.
Fields
No fields available

repository_branch_protection_evaluation

repository_branch_protection_evaluation.disable
Branch protections were disabled for the repository.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule
repository_branch_protection_evaluation.enable
Branch protections were enabled for this repository.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule

repository_image

repository_image.create
An image to represent a repository was uploaded.
Fields
No fields available
repository_image.destroy
An image to represent a repository was deleted.
Fields
No fields available

repository_invitation

repository_invitation.accept
An invitation to join a repository was accepted.
Fields
No fields available
repository_invitation.cancel
An invitation to join a repository was canceled.
Fields
No fields available
repository_invitation.create
An invitation to join a repository was sent.
Fields
No fields available
repository_invitation.reject
An invitation to join a repository was declined.
Fields
No fields available

repository_ruleset

repository_ruleset.create
A repository ruleset was created.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository
repository_ruleset.destroy
A repository ruleset was deleted.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset
repository_ruleset.update
A repository ruleset was edited.
Fields
No fields available
Reference
/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset

repository_secret_scanning_automatic_validity_checks

repository_secret_scanning_automatic_validity_checks.disabled
Automatic partner validation checks have been disabled at the repository level
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository
repository_secret_scanning_automatic_validity_checks.enabled
Automatic partner validation checks have been enabled at the repository level
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository

repository_secret_scanning_custom_pattern

repository_secret_scanning_custom_pattern.create
A custom pattern was created for secret scanning in a repository.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
repository_secret_scanning_custom_pattern.delete
A custom pattern was removed from secret scanning in a repository.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
repository_secret_scanning_custom_pattern.publish
A custom pattern was published for secret scanning in a repository.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
repository_secret_scanning_custom_pattern.update
Changes to a custom pattern were saved and a dry run was executed for secret scanning in a repository.
Fields
No fields available
Reference
Defining custom patterns for secret scanning

repository_secret_scanning_custom_pattern_push_protection

repository_secret_scanning_custom_pattern_push_protection.disabled
Push protection for a custom pattern for secret scanning was disabled for your repository.
Fields
No fields available
Reference
Defining custom patterns for secret scanning
repository_secret_scanning_custom_pattern_push_protection.enabled
Push protection for a custom pattern for secret scanning was enabled for your repository.
Fields
No fields available
Reference
Defining custom patterns for secret scanning

repository_secret_scanning

repository_secret_scanning.disable
Secret scanning was disabled for a repository.
Fields
No fields available
Reference
About secret scanning
repository_secret_scanning.enable
Secret scanning was enabled for a repository.
Fields
No fields available

repository_secret_scanning_non_provider_patterns

repository_secret_scanning_non_provider_patterns.disabled
Secret scanning for non-provider patterns was disabled at the repository level.
Fields
No fields available
Reference
Supported secret scanning patterns
repository_secret_scanning_non_provider_patterns.enabled
Secret scanning for non-provider patterns was enabled at the repository level.
Fields
No fields available
Reference
Supported secret scanning patterns

repository_secret_scanning_push_protection_bypass_list

repository_secret_scanning_push_protection_bypass_list.add
A role or team was added to the push protection bypass list at the repository level.
Fields
No fields available
Reference
About push protection
repository_secret_scanning_push_protection_bypass_list.disable
Push protection settings for "Users who can bypass push protection for secret scanning" changed from "Specific roles or teams" to "Anyone with write access" at the repository level.
Fields
No fields available
Reference
About push protection
repository_secret_scanning_push_protection_bypass_list.enable
Push protection settings for "Users who can bypass push protection for secret scanning" changed from "Anyone with write access" to "Specific roles or teams" at the repository level.
Fields
No fields available
Reference
About push protection
repository_secret_scanning_push_protection_bypass_list.remove
A role or team was removed from the push protection bypass list at the repository level.
Fields
No fields available
Reference
About push protection

repository_secret_scanning_push_protection

repository_secret_scanning_push_protection.disable
Secret scanning push protection was disabled for a repository.
Fields
No fields available
Reference
About push protection
repository_secret_scanning_push_protection.enable
Secret scanning push protection was enabled for a repository.
Fields
No fields available
Reference
About push protection

restrict_notification_delivery

restrict_notification_delivery.disable
Email notification restrictions for an organization or enterprise were disabled.
Fields
No fields available
Reference
Restricting email notifications for your organization, Restricting email notifications for your enterprise
restrict_notification_delivery.enable
Email notification restrictions for an organization or enterprise were enabled.
Fields
No fields available
Reference
Restricting email notifications for your organization, Restricting email notifications for your enterprise

secret_scanning_alert

secret_scanning_alert.create
GitHub detected a secret and created a secret scanning alert.
Fields
No fields available
Reference
/code-security/secret-scanning/managing-alerts-from-secret-scanning
secret_scanning_alert.reopen
A secret scanning alert was reopened.
Fields
No fields available
secret_scanning_alert.resolve
A secret scanning alert was resolved.
Fields
No fields available
secret_scanning_alert.revoke
A secret scanning alert was revoked.
Fields
No fields available
secret_scanning_alert.validate
A secret scanning alert was validated.
Fields
No fields available
Reference
/code-security/secret-scanning/managing-alerts-from-secret-scanning

secret_scanning

secret_scanning.disable
Secret scanning was disabled for all existing repositories.
Fields
No fields available
Reference
About secret scanning
secret_scanning.enable
Secret scanning was enabled for all existing repositories.
Fields
No fields available
Reference
About secret scanning

secret_scanning_new_repos

secret_scanning_new_repos.disable
Secret scanning was disabled for all new repositories.
Fields
No fields available
Reference
About secret scanning
secret_scanning_new_repos.enable
Secret scanning was enabled for all new repositories.
Fields
No fields available
Reference
About secret scanning

secret_scanning_push_protection

secret_scanning_push_protection.bypass
Triggered when a user bypasses the push protection on a secret detected by secret scanning.
Fields
No fields available
Reference
About push protection

secret_scanning_push_protection_request

secret_scanning_push_protection_request.approve
A request to bypass secret scanning push protection was approved by a user.
Fields
No fields available
Reference
About push protection
secret_scanning_push_protection_request.deny
A request to bypass secret scanning push protection was denied by a user.
Fields
No fields available
Reference
About push protection
secret_scanning_push_protection_request.request
A user requested to bypass secret scanning push protection.
Fields
No fields available
Reference
Working with secret scanning and push protection

security_key

security_key.register
A security key was registered for an account.
Fields
No fields available
security_key.remove
A security key was removed from an account.
Fields
No fields available

sponsors

sponsors.agreement_sign
A GitHub Sponsors agreement was signed on behalf of an organization.
Fields
No fields available
sponsors.custom_amount_settings_change
Custom amounts for GitHub Sponsors were enabled or disabled, or the suggested custom amount was changed.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers
sponsors.fiscal_host_change
The fiscal host for a GitHub Sponsors listing was updated.
Fields
No fields available
sponsors.repo_funding_links_file_action
The FUNDING file in a repository was changed.
Fields
No fields available
Reference
/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository
sponsors.sponsor_sponsorship_cancel
A sponsorship was canceled.
Fields
No fields available
Reference
Downgrading a sponsorship
sponsors.sponsor_sponsorship_create
A sponsorship was created, by sponsoring an account.
Fields
No fields available
Reference
/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes
sponsors.sponsor_sponsorship_payment_complete
After you sponsor an account and a payment has been processed, the sponsorship payment was marked as complete.
Fields
No fields available
Reference
/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes
sponsors.sponsor_sponsorship_preference_change
The option to receive email updates from a sponsored account was changed.
Fields
No fields available
Reference
/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship
sponsors.sponsor_sponsorship_tier_change
A sponsorship was upgraded or downgraded.
Fields
No fields available
Reference
Upgrading a sponsorship, Downgrading a sponsorship
sponsors.sponsored_developer_approve
A GitHub Sponsors account was approved.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account
sponsors.sponsored_developer_create
A GitHub Sponsors account was created.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account
sponsors.sponsored_developer_disable
A GitHub Sponsors account was disabled.
Fields
No fields available
sponsors.sponsored_developer_profile_update
The profile for GitHub Sponsors account was edited.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors
sponsors.sponsored_developer_redraft
A GitHub Sponsors account was returned to draft state from approved state.
Fields
No fields available
sponsors.sponsored_developer_request_approval
An application for GitHub Sponsors was submitted for approval.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account
sponsors.sponsored_developer_tier_description_update
The description for a sponsorship tier was changed.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers
sponsors.sponsored_developer_update_newsletter_send
Triggered when you send an email update to your sponsors.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors
sponsors.sponsors_patreon_user_create
A Patreon account was linked to a user account for use with GitHub Sponsors.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account
sponsors.sponsors_patreon_user_destroy
A Patreon account for use with GitHub Sponsors was unlinked from a user account.
Fields
No fields available
Reference
Unlinking your Patreon account from GitHub
sponsors.update_tier_repository
A GitHub Sponsors tier changed access for a repository.
Fields
No fields available
sponsors.update_tier_welcome_message
The welcome message for a GitHub Sponsors tier for an organization was updated.
Fields
No fields available
sponsors.waitlist_join
You join the waitlist to join GitHub Sponsors.
Fields
No fields available
Reference
/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account
sponsors.withdraw_agreement_signature
A signature was withdrawn from a GitHub Sponsors agreement that applies to an organization.
Fields
No fields available

ssh_certificate_authority

ssh_certificate_authority.create
An SSH certificate authority for an organization or enterprise was created.
Fields
No fields available
Reference
Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise
ssh_certificate_authority.destroy
An SSH certificate authority for an organization or enterprise was deleted.
Fields
No fields available
Reference
Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise

ssh_certificate_requirement

ssh_certificate_requirement.disable
The requirement for members to use SSH certificates to access an organization resources was disabled.
Fields
No fields available
Reference
Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise
ssh_certificate_requirement.enable
The requirement for members to use SSH certificates to access an organization resources was enabled.
Fields
No fields available
Reference
Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise

staff

staff.set_domain_token_expiration
The verification code expiry time for an organization or enterprise domain was set.
Fields
No fields available
staff.unverify_domain
An organization or enterprise domain was unverified.
Fields
No fields available
staff.verify_domain
An organization or enterprise domain was verified.
Fields
No fields available

successor_invitation

team

team.add_member
A member of an organization was added to a team.
Fields
No fields available
Reference
/organizations/organizing-members-into-teams/adding-organization-members-to-a-team
team.add_repository
A team was given access and permissions to a repository.
Fields
No fields available
team.change_parent_team
A child team was created or a child team's parent was changed.
Fields
No fields available
Reference
/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy
team.change_privacy
A team's privacy level was changed.
Fields
No fields available
Reference
/organizations/organizing-members-into-teams/changing-team-visibility
team.create
A new team is created.
Fields
No fields available
team.demote_maintainer
A user was demoted from a team maintainer to a team member.
Fields
No fields available
Reference
/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member
team.destroy
A team was deleted.
Fields
No fields available
team.promote_maintainer
A user was promoted from a team member to a team maintainer.
Fields
No fields available
Reference
/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer
team.remove_member
An organization member was removed from a team.
Fields
No fields available
Reference
/organizations/organizing-members-into-teams/removing-organization-members-from-a-team
team.remove_repository
A repository was removed from a team's control.
Fields
No fields available
team.rename
A team's name was changed.
Fields
No fields available
team.update_repository_permission
A team's permission to a repository was changed.
Fields
No fields available

team_discussions

team_discussions.clear
An organization owner cleared the setting to allow team discussions for an organization or enterprise.
Fields
No fields available
team_discussions.disable
Team discussions were disabled for an organization.
Fields
No fields available
Reference
Organizations and teams documentation
team_discussions.enable
Team discussions were enabled for an organization.
Fields
No fields available

team_sync_tenant

team_sync_tenant.disabled
Team synchronization with a tenant was disabled.
Fields
No fields available
Reference
Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise
team_sync_tenant.enabled
Team synchronization with a tenant was enabled.
Fields
No fields available
Reference
Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise

trusted_device

trusted_device.register
A new trusted device was added.
Fields
No fields available
trusted_device.remove
A trusted device was removed.
Fields
No fields available

two_factor_authentication

two_factor_authentication.add_factor
A secondary authentication factor was added to a user account.
Fields
No fields available
Reference
/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication
two_factor_authentication.disabled
Two-factor authentication was disabled for a user account.
Fields
No fields available
Reference
Disabling two-factor authentication for your personal account
two_factor_authentication.enabled
Two-factor authentication was enabled for a user account.
Fields
No fields available
Reference
Configuring two-factor authentication
two_factor_authentication.password_reset_fallback_sms
A one-time password code was sent to a user account fallback phone number.
Fields
No fields available
two_factor_authentication.recovery_codes_regenerated
Two factor recovery codes were regenerated for a user account.
Fields
No fields available
two_factor_authentication.remove_factor
A secondary authentication factor was removed from a user account.
Fields
No fields available
Reference
/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication
two_factor_authentication.sign_in_fallback_sms
A one-time password code was sent to a user account fallback phone number.
Fields
No fields available
two_factor_authentication.update_fallback
The two-factor authentication fallback for a user account was changed.
Fields
No fields available

user

user.async_delete
An asynchronous job was started to destroy a user account, eventually triggering a user.delete event.
Fields
No fields available
user.audit_log_export
Audit log entries were exported.
Fields
No fields available
user.block_user
A user was blocked by another user.
Fields
No fields available
user.change_password
A user changed their password.
Fields
No fields available
user.codespaces_trusted_repo_access_granted
Triggered when you allow the codespaces you create for a repository to access other repositories owned by your personal account.
Fields
No fields available
Reference
Managing access to other repositories within your codespace
user.codespaces_trusted_repo_access_revoked
Triggered when you disallow the codespaces you create for a repository to access other repositories owned by your personal account.
Fields
No fields available
Reference
Managing access to other repositories within your codespace
user.create
A new user account was created.
Fields
No fields available
user.create_integration_secret
A user secret for Codespaces was created.
Fields
No fields available
user.creation_rate_limit_exceeded
The rate of creation of user accounts, applications, issues, pull requests or other resources exceeded the configured rate limits, or too many users were followed too quickly.
Fields
No fields available
user.delete
A user account was destroyed by an asynchronous job.
Fields
No fields available
user.demote
A site administrator was demoted to an ordinary user account.
Fields
No fields available
user.destroy
A user deleted his or her account, triggering user.async_delete.
Fields
No fields available
user.failed_login
A user tried to sign in with an incorrect username, password, or two-factor authentication code.
Fields
No fields available
user.flag_as_large_scale_contributor
A user account was flagged as a large scale contributor. Only contributions from public repositories the user owns will be shown in their contribution graph, in order to prevent timeouts.
Fields
No fields available
user.forgot_password
A user requested a password reset.
Fields
No fields available
Reference
/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials
user.hide_private_contributions_count
A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now hidden.
Fields
No fields available
Reference
/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile
user.login
A user signed in.
Fields
No fields available
user.logout
A user signed out.
Fields
No fields available
user.minimize_comment
A comment made by a user was minimized.
Fields
No fields available
user.new_device_used
A user signed in from a new device.
Fields
No fields available
user.promote
An ordinary user account was promoted to a site administrator.
Fields
No fields available
user.recreate
A user's account was restored.
Fields
No fields available
user.remove_email
An email address was removed from a user account.
Fields
No fields available
user.remove_integration_secret
A user secret for Codespaces was deleted.
Fields
No fields available
user.remove_large_scale_contributor_flag
A user account was no longer flagged as a large scale contributor.
Fields
No fields available
user.rename
A username was changed.
Fields
No fields available
user.report_content
Triggered when you report an issue or pull request, or a comment on an issue, pull request, or commit.
Fields
No fields available
Reference
/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam
user.reset_password
A user reset their account password.
Fields
No fields available
user.show_private_contributions_count
A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now shown.
Fields
No fields available
Reference
/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile
user.sign_in_from_unrecognized_device
A user signed in from an unrecognized device.
Fields
No fields available
user.sign_in_from_unrecognized_device_and_location
A user signed in from an unrecognized device and location.
Fields
No fields available
user.sign_in_from_unrecognized_location
A user signed in from an unrecognized location.
Fields
No fields available
user.suspend
A user account was suspended.
Fields
No fields available
user.two_factor_challenge_failure
A 2FA challenge issued for a user account failed.
Fields
No fields available
user.two_factor_challenge_success
A 2FA challenge issued for a user account succeeded.
Fields
No fields available
user.two_factor_recover
A user used their 2FA recovery codes.
Fields
No fields available
user.two_factor_recovery_codes_downloaded
A user downloaded 2FA recovery codes for their account.
Fields
No fields available
user.two_factor_recovery_codes_printed
A user printed 2FA recovery codes for their account.
Fields
No fields available
user.two_factor_recovery_codes_viewed
A user viewed 2FA recovery codes for their account.
Fields
No fields available
user.two_factor_requested
A user was prompted for a two-factor authentication code.
Fields
No fields available
Reference
/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication
user.unblock_user
A user was unblocked by another user.
Fields
No fields available
user.unminimize_comment
A comment made by a user was unminimized.
Fields
No fields available
user.unsuspend
A user account was unsuspended.
Fields
No fields available
user.update_integration_secret
A user secret for Codespaces was updated.
Fields
No fields available

user_email

user_email.confirm_claim
An enterprise managed user claimed an email address.
Fields
No fields available

user_status

user_status.destroy
Triggered when you clear the status on your profile.
Fields
No fields available
user_status.update
Triggered when you set or change the status on your profile.
Fields
No fields available
Reference
/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile#setting-a-status

workflows

workflows.approve_workflow_job
A workflow job was approved.
Fields
No fields available
Reference
Reviewing deployments
workflows.cancel_workflow_run
A workflow run was cancelled.
Fields
No fields available
Reference
Canceling a workflow
workflows.completed_workflow_run
A workflow status changed to completed. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Viewing workflow run history
workflows.created_workflow_run
A workflow run was create. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Understanding GitHub Actions
workflows.delete_workflow_run
A workflow run was deleted.
Fields
No fields available
Reference
Deleting a workflow run
workflows.disable_workflow
A workflow was disabled.
Fields
No fields available
workflows.enable_workflow
A workflow was enabled, after previously being disabled by disable_workflow.
Fields
No fields available
workflows.pin_workflow
A workflow was pinned.
Fields
No fields available
workflows.prepared_workflow_job
A workflow job was started. Includes the list of secrets that were provided to the job. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
Fields
No fields available
Reference
Events that trigger workflows
workflows.reject_workflow_job
A workflow job was rejected.
Fields
No fields available
Reference
Reviewing deployments
workflows.rerun_workflow_run
A workflow run was re-run.
Fields
No fields available
Reference
Re-running workflows and jobs
workflows.unpin_workflow
A workflow was unpinned after previously being pinned.
Fields
No fields available