엔터프라이즈에 대한 감사 로그 이벤트

Note

이 문서에는 엔터프라이즈의 감사 로그에 표시될 수 있는 이벤트가 나열되어 있습니다. 사용자 계정의 보안 로그 또는 조직의 감사 로그에 표시할 수 있는 이벤트는 "보안 로그 이벤트" 및 "조직의 감사 로그 이벤트"을 참조하세요.

이 문서에서는 엔터프라이즈 설정에 표시되는 이벤트를 나열합니다. 사이트 관리자 대시보드에는 여기에 나열되지 않은 다른 이벤트가 포함될 수 있습니다.

작업	설명
`billing.change_billing_type`	The way the account pays for GitHub was changed.
`billing.change_email`	The billing email address changed.

작업	설명
`business.add_admin`	An enterprise owner was added to an enterprise.
`business.add_organization`	An organization was added to an enterprise.
`business.advanced_security_policy_update`	An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.
`business.clear_actions_settings`	An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.
`business.clear_default_repository_permission`	An enterprise owner cleared the base repository permission policy setting for an enterprise.
`business.clear_members_can_create_repos`	An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.
`business.create`	An enterprise was created.
`business.disable_source_ip_disclosure`	Display of IP addresses within audit log events for the enterprise was disabled.
`business.disable_two_factor_requirement`	The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.
`business.enable_source_ip_disclosure`	Display of IP addresses within audit log events for the enterprise was enabled.
`business.enable_two_factor_requirement`	The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.
`business.members_can_update_protected_branches.clear`	An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.
`business.members_can_update_protected_branches.disable`	The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.
`business.members_can_update_protected_branches.enable`	The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.
`business.remove_admin`	An enterprise owner was removed from an enterprise.
`business.remove_organization`	An organization was removed from an enterprise.
`business.rename_slug`	The slug for the enterprise URL was renamed.
`business.set_actions_fork_pr_approvals_policy`	The policy for requiring approvals for workflows from public forks was changed for an enterprise.
`business.set_actions_private_fork_pr_approvals_policy`	The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.
`business.set_actions_retention_limit`	The retention period for GitHub Actions artifacts and logs was changed for an enterprise.
`business.set_default_workflow_permissions`	The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.
`business.set_fork_pr_workflows_policy`	The policy for fork pull request workflows was changed for an enterprise.
`business.set_workflow_permission_can_approve_pr`	The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.
`business.sso_response`	A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`business.update_actions_settings`	An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.
`business.update_default_repository_permission`	The base repository permission setting was updated for all organizations in an enterprise.
`business.update_member_repository_creation_permission`	The repository creation setting was updated for an enterprise.
`business.update_member_repository_invitation_permission`	The policy setting for enterprise members inviting outside collaborators to repositories was updated.

작업	설명
`business_advanced_security.disabled`	GitHub Advanced Security was disabled for your enterprise.
`business_advanced_security.disabled_for_new_repos`	GitHub Advanced Security was disabled for new repositories in your enterprise.
`business_advanced_security.enabled`	GitHub Advanced Security was enabled for your enterprise.
`business_advanced_security.enabled_for_new_repos`	GitHub Advanced Security was enabled for new repositories in your enterprise.

작업	설명
`business_dependabot_alerts_new_repos.disable`	Dependabot alerts were disabled for new repositories in your enterprise.
`business_dependabot_alerts_new_repos.enable`	Dependabot alerts were enabled for new repositories in your enterprise.

작업	설명
`business_secret_scanning_custom_pattern.create`	An enterprise-level custom pattern was created for secret scanning.
`business_secret_scanning_custom_pattern.delete`	An enterprise-level custom pattern was removed from secret scanning.
`business_secret_scanning_custom_pattern.update`	Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.

작업	설명
`business_secret_scanning_custom_pattern_push_protection.disabled`	Push protection for a custom pattern for secret scanning was disabled for your enterprise.
`business_secret_scanning_custom_pattern_push_protection.enabled`	Push protection for a custom pattern for secret scanning was enabled for your enterprise.

작업	설명
`business_secret_scanning.disable`	Secret scanning was disabled for your enterprise.
`business_secret_scanning.disabled_for_new_repos`	Secret scanning was disabled for new repositories in your enterprise.
`business_secret_scanning.enable`	Secret scanning was enabled for your enterprise.
`business_secret_scanning.enabled_for_new_repos`	Secret scanning was enabled for new repositories in your enterprise.

작업	설명
`business_secret_scanning_push_protection_custom_message.disable`	The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.
`business_secret_scanning_push_protection_custom_message.enable`	The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.
`business_secret_scanning_push_protection_custom_message.update`	The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.

작업	설명
`business_secret_scanning_push_protection.disable`	Push protection for secret scanning was disabled for your enterprise.
`business_secret_scanning_push_protection.disabled_for_new_repos`	Push protection for secret scanning was disabled for new repositories in your enterprise.
`business_secret_scanning_push_protection.enable`	Push protection for secret scanning was enabled for your enterprise.
`business_secret_scanning_push_protection.enabled_for_new_repos`	Push protection for secret scanning was enabled for new repositories in your enterprise.

작업	설명
`checks.auto_trigger_disabled`	Automatic creation of check suites was disabled on a repository in the organization or enterprise.
`checks.auto_trigger_enabled`	Automatic creation of check suites was enabled on a repository in the organization or enterprise.
`checks.delete_logs`	Logs in a check suite were deleted.

작업	설명
`codespaces.allow_permissions`	A codespace using custom permissions from its devcontainer.json file was launched.
`codespaces.connect`	Credentials for a codespace were refreshed.
`codespaces.create`	A codespace was created
`codespaces.destroy`	A user deleted a codespace.
`codespaces.export_environment`	A codespace was exported to a branch on GitHub.
`codespaces.restore`	A codespace was restored.
`codespaces.suspend_environment`	A codespace was stopped.
`codespaces.trusted_repositories_access_update`	A personal account's access and security setting for Codespaces were updated.

작업	설명
`discussion_post.destroy`	Triggered when a team discussion post is deleted.
`discussion_post.update`	Triggered when a team discussion post is edited.

작업	설명
`discussion_post_reply.destroy`	Triggered when a reply to a team discussion post is deleted.
`discussion_post_reply.update`	Triggered when a reply to a team discussion post is edited.

작업	설명
`git_signing_ssh_public_key.create`	An SSH key was added to a user account as a Git commit signing key.
`git_signing_ssh_public_key.delete`	An SSH key was removed from a user account as a Git commit signing key.

작업	설명
`dependabot_alerts.disable`	Dependabot alerts were disabled for all existing repositories.
`dependabot_alerts.enable`	Dependabot alerts were enabled for all existing repositories.

작업	설명
`dependabot_alerts_new_repos.disable`	Dependabot alerts were disabled for all new repositories.
`dependabot_alerts_new_repos.enable`	Dependabot alerts were enabled for all new repositories.

작업	설명
`dependabot_security_updates.disable`	Dependabot security updates were disabled for all existing repositories.
`dependabot_security_updates.enable`	Dependabot security updates were enabled for all existing repositories.

작업	설명
`dependabot_security_updates_new_repos.disable`	Dependabot security updates were disabled for all new repositories.
`dependabot_security_updates_new_repos.enable`	Dependabot security updates were enabled for all new repositories.

작업	설명
`dependency_graph.disable`	The dependency graph was disabled for all existing repositories.
`dependency_graph.enable`	The dependency graph was enabled for all existing repositories.

작업	설명
`dependency_graph_new_repos.disable`	The dependency graph was disabled for all new repositories.
`dependency_graph_new_repos.enable`	The dependency graph was enabled for all new repositories.

작업	설명
`enterprise_announcement.create`	A global announcement banner was created for the enterprise.
`enterprise_announcement.destroy`	A global announcement banner was removed from the enterprise.
`enterprise_announcement.update`	A global announcement banner was updated for the enterprise.

작업	설명
`enterprise_domain.approve`	A domain was approved for an enterprise.
`enterprise_domain.create`	A domain was added to an enterprise.
`enterprise_domain.destroy`	A domain was removed from an enterprise.
`enterprise_domain.verify`	A domain was verified for an enterprise.

작업	설명
`enterprise.register_self_hosted_runner`	A new GitHub Actions self-hosted runner was registered.
`enterprise.remove_self_hosted_runner`	A GitHub Actions self-hosted runner was removed.
`enterprise.runner_group_created`	A GitHub Actions self-hosted runner group was created.
`enterprise.runner_group_removed`	A GitHub Actions self-hosted runner group was removed.
`enterprise.runner_group_runner_removed`	The REST API was used to remove a GitHub Actions self-hosted runner from a group.
`enterprise.runner_group_runners_added`	A GitHub Actions self-hosted runner was added to a group.
`enterprise.runner_group_runners_updated`	A GitHub Actions runner group's list of members was updated.
`enterprise.runner_group_updated`	The configuration of a GitHub Actions self-hosted runner group was changed.
`enterprise.self_hosted_runner_offline`	The GitHub Actions runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`enterprise.self_hosted_runner_online`	The GitHub Actions runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`enterprise.self_hosted_runner_updated`	The GitHub Actions runner application was updated. This event is not included in the JSON/CSV export.

작업	설명
`environment.add_protection_rule`	A GitHub Actions deployment protection rule was created via the API.
`environment.create_actions_secret`	A secret was created for a GitHub Actions environment.
`environment.create_actions_variable`	A variable was created for a GitHub Actions environment.
`environment.delete`	An environment was deleted.
`environment.remove_actions_secret`	A secret was deleted for a GitHub Actions environment.
`environment.remove_actions_variable`	A variable was deleted for a GitHub Actions environment.
`environment.remove_protection_rule`	A GitHub Actions deployment protection rule was deleted via the API.
`environment.update_actions_secret`	A secret was updated for a GitHub Actions environment.
`environment.update_actions_variable`	A variable was updated for a GitHub Actions environment.
`environment.update_protection_rule`	A GitHub Actions deployment protection rule was updated via the API.

엔터프라이즈에 대한 감사 로그 이벤트

누가 이 기능을 사용할 수 있는 있나요?

이 문서의 내용

작업	설명
`git.clone`	A repository was cloned.
`git.fetch`	Changes were fetched from a repository.
`git.push`	Changes were pushed to a repository.

작업	설명
`hook.active_changed`	A hook's active status was updated.
`hook.config_changed`	A hook's configuration was changed.
`hook.create`	A new hook was added.
`hook.destroy`	A hook was deleted.
`hook.events_changed`	A hook's configured events were changed.

작업	설명
`integration.create`	A GitHub App was created.
`integration.destroy`	A GitHub App was deleted.
`integration.manager_added`	A member of an enterprise or organization was added as a GitHub App manager.
`integration.manager_removed`	A member of an enterprise or organization was removed from being a GitHub App manager.
`integration.remove_client_secret`	A client secret for a GitHub App was removed.
`integration.revoke_all_tokens`	All user tokens for a GitHub App were requested to be revoked.
`integration.revoke_tokens`	Token(s) for a GitHub App were revoked.
`integration.transfer`	Ownership of a GitHub App was transferred to another user or organization.

작업	설명
`integration_installation.create`	A GitHub App was installed.
`integration_installation.destroy`	A GitHub App was uninstalled.
`integration_installation.repositories_added`	Repositories were added to a GitHub App.
`integration_installation.repositories_removed`	Repositories were removed from a GitHub App.
`integration_installation.suspend`	A GitHub App was suspended.
`integration_installation.unsuspend`	A GitHub App was unsuspended.
`integration_installation.version_updated`	Permissions for a GitHub App were updated.

작업	설명
`ip_allow_list.disable`	An IP allow list was disabled.
`ip_allow_list.disable_for_installed_apps`	An IP allow list was disabled for installed GitHub Apps.
`ip_allow_list.disable_user_level_enforcement`	IP allow list user level enforcement was disabled.
`ip_allow_list.enable`	An IP allow list was enabled.
`ip_allow_list.enable_for_installed_apps`	An IP allow list was enabled for installed GitHub Apps.
`ip_allow_list.enable_user_level_enforcement`	IP allow list user level enforcement was enabled.

작업	설명
`ip_allow_list_entry.create`	An IP address was added to an IP allow list.
`ip_allow_list_entry.destroy`	An IP address was deleted from an IP allow list.
`ip_allow_list_entry.update`	An IP address or its description was changed.

작업	설명
`marketplace_listing.approve`	A listing was approved for inclusion in GitHub Marketplace.
`marketplace_listing.change_category`	A category for a listing for an app in GitHub Marketplace was changed.
`marketplace_listing.create`	A listing for an app in GitHub Marketplace was created.
`marketplace_listing.delist`	A listing was removed from GitHub Marketplace.
`marketplace_listing.redraft`	A listing was sent back to draft state.
`marketplace_listing.reject`	A listing was not accepted for inclusion in GitHub Marketplace.

작업	설명
`oauth_application.create`	An OAuth application was created.
`oauth_application.destroy`	An OAuth application was deleted.
`oauth_application.generate_client_secret`	An OAuth application's secret key was generated.
`oauth_application.remove_client_secret`	An OAuth application's secret key was deleted.
`oauth_application.reset_secret`	The secret key for an OAuth application was reset.
`oauth_application.revoke_all_tokens`	All user tokens for an OAuth application were requested to be revoked.
`oauth_application.revoke_tokens`	Token(s) for an OAuth application were revoked.
`oauth_application.transfer`	An OAuth application was transferred from one account to another.
`oauth_application.unsuspend`	An OAuth application was unsuspended for a user or organization account.

작업	설명
`oauth_authorization.create`	An authorization for an OAuth application was created.
`oauth_authorization.destroy`	An authorization for an OAuth application was deleted.
`oauth_authorization.update`	An authorization for an OAuth application was updated.

작업	설명
`org.accept_business_invitation`	An invitation sent to an organization to join an enterprise was accepted.
`org.add_billing_manager`	A billing manager was added to an organization.
`org.add_member`	A user joined an organization.
`org.add_outside_collaborator`	An outside collaborator was added to a repository.
`org.advanced_security_disabled_for_new_repos`	GitHub Advanced Security was disabled for new repositories in an organization.
`org.advanced_security_disabled_on_all_repos`	GitHub Advanced Security was disabled for all repositories in an organization.
`org.advanced_security_enabled_for_new_repos`	GitHub Advanced Security was enabled for new repositories in an organization.
`org.advanced_security_enabled_on_all_repos`	GitHub Advanced Security was enabled for all repositories in an organization.
`org.advanced_security_policy_selected_member_disabled`	An enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.
`org.advanced_security_policy_selected_member_enabled`	An enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.
`org.async_delete`	A user initiated a background job to delete an organization.
`org.audit_log_export`	An export of the organization audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.
`org.block_user`	An organization owner blocked a user from accessing the organization's repositories.
`org.cancel_business_invitation`	An invitation for an organization to join an enterprise was revoked
`org.cancel_invitation`	An invitation sent to a user to join an organization was revoked.
`org.codeql_disabled`	Code scanning using the default setup was disabled for an organization.
`org.codeql_enabled`	Code scanning using the default setup was enabled for an organization.
`org.config.disable_collaborators_only`	The interaction limit for collaborators only for an organization was disabled.
`org.config.disable_contributors_only`	The interaction limit for prior contributors only for an organization was disabled.
`org.config.disable_sockpuppet_disallowed`	The interaction limit for existing users only for an organization was disabled.
`org.config.enable_collaborators_only`	The interaction limit for collaborators only for an organization was enabled.
`org.config.enable_contributors_only`	The interaction limit for prior contributors only for an organization was enabled.
`org.config.enable_sockpuppet_disallowed`	The interaction limit for existing users only for an organization was enabled.
`org.confirm_business_invitation`	An invitation for an organization to join an enterprise was confirmed.
`org.create`	An organization was created.
`org.delete`	An organization was deleted by a user-initiated background job.
`org.disable_member_team_creation_permission`	Team creation was limited to owners.
`org.disable_reader_discussion_creation_permission`	An organization owner limited discussion creation to users with at least triage permission in an organization.
`org.disable_saml`	SAML single sign-on was disabled for an organization.
`org.disable_two_factor_requirement`	A two-factor authentication requirement was disabled for the organization.
`org.display_commenter_full_name_disabled`	An organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.
`org.display_commenter_full_name_enabled`	An organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.
`org.enable_member_team_creation_permission`	Team creation by members was allowed.
`org.enable_reader_discussion_creation_permission`	An organization owner allowed users with read access to create discussions in an organization
`org.enable_saml`	SAML single sign-on was enabled for the organization.
`org.enable_two_factor_requirement`	Two-factor authentication is now required for the organization.
`org.integration_manager_added`	An organization owner granted a member access to manage all GitHub Apps owned by an organization.
`org.integration_manager_removed`	An organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.
`org.invite_member`	A new user was invited to join an organization.
`org.invite_to_business`	An organization was invited to join an enterprise.
`org.members_can_update_protected_branches.disable`	The ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.
`org.members_can_update_protected_branches.enable`	The ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.
`org.recreate`	An organization was restored.
`org.register_self_hosted_runner`	A new self-hosted runner was registered.
`org.remove_billing_manager`	A billing manager was removed from an organization, either manually or due to a two-factor authentication requirement.
`org.remove_member`	A member was removed from an organization, either manually or due to a two-factor authentication requirement.
`org.remove_outside_collaborator`	An outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.
`org.remove_self_hosted_runner`	A self-hosted runner was removed.
`org.rename`	An organization was renamed.
`org.restore_member`	An organization member was restored.
`org.runner_group_created`	A self-hosted runner group was created.
`org.runner_group_removed`	A self-hosted runner group was removed.
`org.runner_group_runner_removed`	The REST API was used to remove a self-hosted runner from a group.
`org.runner_group_runners_added`	A self-hosted runner was added to a group.
`org.runner_group_runners_updated`	A runner group's list of members was updated.
`org.runner_group_updated`	The configuration of a self-hosted runner group was changed.
`org.secret_scanning_custom_pattern_push_protection_disabled`	Push protection for a custom pattern for secret scanning was disabled for an organization.
`org.secret_scanning_custom_pattern_push_protection_enabled`	Push protection for a custom pattern for secret scanning was enabled for an organization.
`org.secret_scanning_push_protection_custom_message_disabled`	The custom message triggered by an attempted push to a push-protected repository was disabled for an organization.
`org.secret_scanning_push_protection_custom_message_enabled`	The custom message triggered by an attempted push to a push-protected repository was enabled for an organization.
`org.secret_scanning_push_protection_custom_message_updated`	The custom message triggered by an attempted push to a push-protected repository was updated for an organization.
`org.secret_scanning_push_protection_disable`	Push protection for secret scanning was disabled.
`org.secret_scanning_push_protection_enable`	Push protection for secret scanning was enabled.
`org.secret_scanning_push_protection_new_repos_disable`	Push protection for secret scanning was disabled for all new repositories in the organization.
`org.secret_scanning_push_protection_new_repos_enable`	Push protection for secret scanning was enabled for all new repositories in the organization.
`org.self_hosted_runner_offline`	The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`org.self_hosted_runner_online`	The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`org.self_hosted_runner_updated`	The runner application was updated. This event is not included in the JSON/CSV export.
`org.set_actions_fork_pr_approvals_policy`	The setting for requiring approvals for workflows from public forks was changed for an organization.
`org.set_actions_private_fork_pr_approvals_policy`	The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an organization.
`org.set_actions_retention_limit`	The retention period for GitHub Actions artifacts and logs in an organization was changed.
`org.set_default_workflow_permissions`	The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an organization.
`org.set_fork_pr_workflows_policy`	The policy for workflows on private repository forks was changed.
`org.set_workflow_permission_can_approve_pr`	The policy for allowing GitHub Actions to create and approve pull requests was changed for an organization.
`org.sso_response`	A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.
`org.transform`	A user account was converted into an organization.
`org.unblock_user`	A user was unblocked from an organization.
`org.update_actions_settings`	An organization owner or site administrator updated GitHub Actions policy settings for an organization.
`org.update_default_repository_permission`	The default repository permission level for organization members was changed.
`org.update_member`	A person's role was changed from owner to member or member to owner.
`org.update_member_repository_creation_permission`	The create repository permission for organization members was changed.
`org.update_member_repository_invitation_permission`	An organization owner changed the policy setting for organization members inviting outside collaborators to repositories.
`org.update_saml_provider_settings`	An organization's SAML provider settings were updated.
`org.update_terms_of_service`	An organization changed between the Standard Terms of Service and the GitHub Customer Agreement.