此版本的 GitHub Enterprise Server 已于以下日期停止服务 2023-09-25. 即使针对重大安全问题，也不会发布补丁。 为了获得更好的性能、更高的安全性和新功能，请升级到最新版本的 GitHub Enterprise。 如需升级帮助，请联系 GitHub Enterprise 支持。

企业的审核日志事件

本文内容

了解为企业记录的审核日志事件。

谁可以使用此功能

Enterprise owners and site administrators can interact with the audit log.

注意：

  • 本文包含可能出现在企业审核日志中的事件。 有关可在用户帐户的安全日志或组织的审核日志中显示的事件，请参阅“安全日志事件”和“组织的审核日志事件”。

  • 具体而言，本文包含可能出现在企业设置中的事件。 站点管理员仪表板中的审核日志可能包含此处未列出的其他事件。

artifact 类别操作

操作说明
artifact.destroy已手动删除工作流运行工件。

audit_log_streaming 类别操作

操作说明
audit_log_streaming.check已对为审核日志流式处理配置的终结点执行手动检查。
audit_log_streaming.create已添加用于审核日志流式处理的终结点。
audit_log_streaming.update审核日志流式处理的终结点配置已更新，例如暂停、启用或禁用流。
audit_log_streaming.destroy审核日志流式处理终结点已被删除。

business 类别操作

操作说明
business.add_admin已将企业所有者或站点管理员添加到企业。
business.clear_members_can_create_repos企业所有者或站点管理员清除了对在企业组织中创建存储库的限制。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
business.create企业已创建。
business.members_can_update_protected_branches.disable已禁用企业成员更新分支保护规则的功能。 只有企业所有者可以更新受保护的分支。
business.members_can_update_protected_branches.enable已启用企业成员更新分支保护规则的功能。 企业所有者和成员可以更新受保护的分支。
business.remove_admin企业所有者或站点管理员已从企业中移除。
business.referrer_override_disable企业所有者或站点管理员禁用了引荐者策略替代。 有关详细信息，请参阅“为企业配置引荐来源网址策略”。
business.update_member_repository_creation_permission已为企业更新存储库创建设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
business.update_member_repository_invitation_permission企业成员邀请外部协作者访问存储库的策略设置已更新。 有关详细信息，请参阅“在企业中实施仓库管理策略”。

business_secret_scanning_custom_pattern 类别操作

操作说明
business_secret_scanning_custom_pattern.create为 secret scanning 创建了企业级自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
business_secret_scanning_custom_pattern.delete从 secret scanning 中删除了企业级自定义模式。
business_secret_scanning_custom_pattern.publish为 secret scanning 发布了企业级自定义模式。
business_secret_scanning_custom_pattern.update保存了对企业级自定义模式的更改，并对 secret scanning 执行了试运行。

checks 类别操作

操作说明
checks.auto_trigger_disabled已在组织或企业中的存储库上禁用自动创建检查套件功能。 有关详细信息，请参阅“检查”。
checks.auto_trigger_enabled已在组织或企业中的存储库上启用自动创建检查套件功能。 有关详细信息，请参阅“检查”。

config_entry 类别操作

操作说明
config_entry.create已创建配置设置。 这些事件仅在站点管理员审核日志中可见。 记录的事件类型包括：
- 企业设置和策略
- 组织和存储库权限及设置
- Git、Git LFS、GitHub Connect、GitHub Packages、项目和代码安全设置。
config_entry.destroy配置设置已被删除。 这些事件仅在站点管理员审核日志中可见。 记录的事件类型包括：
- 企业设置和策略
- 组织和存储库权限及设置
- Git、Git LFS、GitHub Connect、GitHub Packages、项目和代码安全设置。
config_entry.update已编辑配置设置。 这些事件仅在站点管理员审核日志中可见。 记录的事件类型包括：
- 企业设置和策略
- 组织和存储库权限及设置
- Git、Git LFS、GitHub Connect、GitHub Packages、项目和代码安全设置。

dependabot_alerts 类别操作

操作说明
dependabot_alerts.disable企业所有者或站点管理员为所有现有的存储库禁用了 Dependabot alerts。 有关详细信息，请参阅“管理组织的安全和分析设置”。
dependabot_alerts.enable企业所有者或站点管理员为所有现有的存储库启用了 Dependabot alerts。

dependabot_alerts_new_repos 类别操作

操作说明
dependabot_alerts_new_repos.disable企业所有者或站点管理员为所有新的存储库禁用了 Dependabot alerts。 有关详细信息，请参阅“管理组织的安全和分析设置”。
dependabot_alerts_new_repos.enable企业所有者或站点管理员为所有新的存储库启用了 Dependabot alerts。

dependabot_repository_access 类别操作

操作说明
dependabot_repository_access.repositories_updatedDependabot 可以访问的存储库已更新。

dependabot_security_updates 类别操作

操作说明
dependabot_security_updates.disable企业所有者或站点管理员为所有现有存储库禁用了 Dependabot security updates。 有关详细信息，请参阅“管理组织的安全和分析设置”。
dependabot_security_updates.enable企业所有者或站点管理员为所有现有存储库启用了 Dependabot security updates。

dependabot_security_updates_new_repos 类别操作

操作说明
dependabot_security_updates_new_repos.disable企业所有者或站点管理员为所有新的存储库禁用了 Dependabot security updates。 有关详细信息，请参阅“管理组织的安全和分析设置”。
dependabot_security_updates_new_repos.enable企业所有者或站点管理员为所有新的存储库启用了 Dependabot security updates。

dependency_graph 类别操作

操作说明
dependency_graph.disable企业所有者或站点管理员为所有现有存储库禁用了依赖项关系图。 有关详细信息，请参阅“管理组织的安全和分析设置”。
dependency_graph.enable企业所有者或站点管理员为所有现有存储库启用了依赖项关系图。

dependency_graph_new_repos 类别操作

操作说明
dependency_graph_new_repos.disable企业所有者或站点管理员为所有新的存储库禁用了依赖项关系图。 有关详细信息，请参阅“管理组织的安全和分析设置”。
dependency_graph_new_repos.enable企业所有者或站点管理员为所有新的存储库启用了依赖项关系图。

dotcom_connection 类别操作

操作说明
dotcom_connection.create与 GitHub.com 的 GitHub Connect 连接已创建。
dotcom_connection.destroy与 GitHub.com 的 GitHub Connect 连接已被删除。
dotcom_connection.token_updatedGitHub.com 的 GitHub Connect 连接令牌已更新。
dotcom_connection.upload_license_usageGitHub Enterprise Server 许可证使用情况已手动上传到 GitHub Enterprise Cloud。
dotcom_connection.upload_usage_metricsGitHub Enterprise Server 使用指标已上传到 GitHub.com。

enterprise 类别操作

操作说明
enterprise.config.disable_anonymous_git_access企业所有者或站点管理员禁用了对企业中的存储库的匿名 Git 读取访问权限。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
enterprise.config.enable_anonymous_git_access企业所有者或站点管理员启用了对企业中的存储库的匿名 Git 读取访问权限。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
enterprise.config.lock_anonymous_git_access企业所有者或站点管理员锁定了匿名 Git 读取访问权限，以防止存储库管理员更改企业中存储库的现有匿名 Git 读取访问权限设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
enterprise.config.unlock_anonymous_git_access企业所有者或站点管理员解锁了匿名 Git 读取访问权限，以允许存储库管理员更改企业中存储库的现有匿名 Git 读取访问权限设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
enterprise.register_self_hosted_runner已注册新的 GitHub Actions 自托管运行器。 有关详细信息，请参阅“添加自托管的运行器”。
enterprise.remove_self_hosted_runnerGitHub Actions 自托管运行器已被删除。 有关详细信息，请参阅“删除自托管的运行器”。
enterprise.runner_group_created已创建 GitHub Actions 自托管运行器组。 有关详细信息，请参阅“使用组管理对自托管运行程序的访问”。
enterprise.runner_group_removedGitHub Actions 自托管运行器组已被删除。 有关详细信息，请参阅“使用组管理对自托管运行程序的访问”。
enterprise.runner_group_renamed已对 GitHub Actions 自托管运行器组进行重命名。 有关详细信息，请参阅“使用组管理对自托管运行程序的访问”。
enterprise.runner_group_updatedGitHub Actions 自托管运行器组的配置已更改。 有关详细信息，请参阅“使用组管理对自托管运行程序的访问”。
enterprise.runner_group_runner_removedREST API 用于从组中删除 GitHub Actions 自托管运行器。 有关详细信息，请参阅“操作”。
enterprise.runner_group_runners_added已将 GitHub Actions 自托管运行器添加到组中。 有关详细信息，请参阅“将自托管运行器移动到组”。
enterprise.runner_group_runners_updatedGitHub Actions 运行器组的成员列表已更新。 有关详细信息，请参阅“操作”。
enterprise.self_hosted_runner_offlineGitHub Actions 运行器应用程序已停止。 只能使用 REST API 查看；在 UI 或 JSON/CSV 导出中不可见。 有关详细信息，请参阅“对自托管运行程序进行监视和故障排除”。

git 类别操作

必须先在审核日志中启用 Git 事件，然后才能查看 git 类别操作。 有关详细信息，请参阅“为企业配置审核日志”。

注意：搜索结果中不包括 Git 事件。

操作说明
git.clone已克隆存储库。
git.fetch已从存储库中获取更改。
git.push已将更改推送到存储库。

hook 类别操作

| 操作 | 说明 |--------|------------- | hook.active_changed | 挂钩的活动状态已更新。 | hook.config_changed | 挂钩的配置已更改。 | hook.create | 已添加新的挂钩。 | hook.destroy | 已删除挂钩。 | hook.events_changed | 已更改挂钩的配置事件。

integration 类别操作

操作说明
integration.create已创建集成。
integration.destroy已删除集成。
integration.manager_added已将企业或组织的成员添加为集成管理员。
integration.manager_removed企业或组织的成员已从集成管理员中移除。
integration.transfer已将集成的所有权转让给其他用户或组织。
integration.remove_client_secret已删除集成的客户端密码。
integration.revoke_all_tokens已请求撤销用于集成的所有用户令牌。
integration.revoke_tokens用于集成的令牌已被撤销。

integration_installation 类别操作

操作说明
integration_installation.contact_email_changed集成的联系人电子邮件已更改。
integration_installation.create已安装集成。
integration_installation.destroy已卸载集成。
integration_installation.repositories_added存储库已添加到集成中。
integration_installation.repositories_removed存储库已从集成中删除。

integration_installation_request 类别操作

操作说明
integration_installation_request.create成员请求所有者安装可在企业或组织中使用的集成。
integration_installation_request.close安装可在企业或组织中使用的集成的请求被所有者批准或拒绝，或被打开请求的成员取消。

issue 类别操作

操作说明
issue.destroy已从仓库中删除问题。 有关详细信息，请参阅“删除议题”。
issue.pinned已将某个问题固定到存储库。 有关详细信息，请参阅“将议题固定到仓库”。
issue.transfer已将某个问题转移到另一个存储库。 有关详细信息，请参阅“将议题转让给其他仓库”。
issue.unpinned已从存储库中取消固定某个问题。 有关详细信息，请参阅“将议题固定到仓库”。

issue_comment 类别操作

操作说明
issue_comment.destroy已从存储库中删除对某个问题的评论。
issue_comment.pinned已将对某个问题的评论固定到存储库中。
issue_comment.unpinned已从存储库中取消固定对某个问题的评论。
issue_comment.update已更改问题的正文文本（初始注释）。

issues 类别操作

操作说明
issues.deletes_disabled已禁用企业成员删除问题的功能。 成员不能删除企业中任何组织中的问题。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
issues.deletes_enabled已启用企业成员删除问题的功能。 成员可以删除企业中任何组织中的问题。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
issues.deletes_policy_cleared企业所有者或站点管理员清除了允许成员删除企业中问题的策略设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。

members_can_create_pages 类别操作

操作说明
members_can_create_pages.disable已禁用成员发布 GitHub Pages 的功能。 成员不能在组织中发布 GitHub Pages。 有关详细信息，请参阅“管理组织的 GitHub Pages 站点发布”。
members_can_create_pages.enable已启用成员发布 GitHub Pages 的功能。 成员可以在组织中发布 GitHub Pages。 有关详细信息，请参阅“管理组织的 GitHub Pages 站点发布”。

members_can_create_private_pages 类别操作

操作说明
members_can_create_private_pages.disable已禁用成员发布专用 GitHub Pages 的功能。 成员不能在组织中发布专用 GitHub Pages。 有关详细信息，请参阅“管理组织的 GitHub Pages 站点发布”。
members_can_create_private_pages.enable已启用成员发布专用 GitHub Pages 的功能。 成员可以在组织中发布专用 GitHub Pages。 有关详细信息，请参阅“管理组织的 GitHub Pages 站点发布”。

members_can_create_public_pages 类别操作

操作说明
members_can_create_public_pages.disable已禁用成员发布公共 GitHub Pages 的功能。 成员不能在组织中发布公共 GitHub Pages。 有关详细信息，请参阅“管理组织的 GitHub Pages 站点发布”。
members_can_create_public_pages.enable已启用成员发布公共 GitHub Pages 的功能。 成员可以在组织中发布公共 GitHub Pages。 有关详细信息，请参阅“管理组织的 GitHub Pages 站点发布”。

members_can_delete_repos 类别操作

操作说明
members_can_delete_repos.clear企业所有者或站点管理员清除了用于删除或转移企业中任何组织中的存储库的策略设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
members_can_delete_repos.disable已禁用企业成员删除存储库的功能。 成员不能删除或转移企业内任何组织中的存储库。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
members_can_delete_repos.enable已启用企业成员删除存储库的功能。 成员可以删除或转移企业中任何组织中的存储库。 有关详细信息，请参阅“在企业中实施仓库管理策略”。

members_can_view_dependency_insights 类别操作

操作说明
members_can_view_dependency_insights.clear企业所有者或站点管理员清除了用于查看企业中任何组织中的依赖项见解的策略设置。
members_can_view_dependency_insights.disable已禁用企业成员查看依赖项见解的功能。 成员无法查看企业中任何组织的依赖项见解。
members_can_view_dependency_insights.enable已启用企业成员查看依赖项见解的功能。 成员可以查看企业中任何组织的依赖项见解。

migration 类别操作

操作说明
migration.create已创建迁移文件，用于将数据从源位置（例如 GitHub.com 组织或 GitHub Enterprise Server 实例）传输到目标 GitHub Enterprise Server 实例 。
migration.destroy_file已删除迁移文件，用于将数据从源位置（例如 GitHub.com 组织或 GitHub Enterprise Server 实例）传输到目标 GitHub Enterprise Server 实例 。
migration.download已下载迁移文件，用于将数据从源位置（例如 GitHub.com 组织或 GitHub Enterprise Server 实例）传输到目标 GitHub Enterprise Server 实例 。

oauth_access 类别操作

操作说明
oauth_access.create已为用户帐户生成 OAuth 访问令牌。 有关详细信息，请参阅“管理个人访问令牌”。
oauth_access.destroy已从用户帐户中删除 OAuth 访问令牌。

oauth_application 类别操作

操作说明
oauth_application.create为用户或组织帐户创建了 OAuth app。
oauth_application.destroy从用户或组织帐户中删除了 OAuth app。
oauth_application.transferOAuth app 已从一个用户或组织帐户转移到了另一个。

org 类别操作

操作说明
org.accept_business_invitation已接受发送给组织的关于加入企业的邀请。
org.add_billing_manager计费管理员已添加到组织中。
org.add_member用户已加入组织。
org.advanced_security_disabled_for_new_repos已为组织中的新存储库禁用 GitHub Advanced Security。
org.advanced_security_disabled_on_all_repos已为组织中的所有存储库禁用 GitHub Advanced Security。
org.advanced_security_enabled_for_new_repos已为组织中的新存储库启用 GitHub Advanced Security。
org.advanced_security_enabled_on_all_repos已为组织中的所有存储库启用 GitHub Advanced Security。
org.advanced_security_policy_selected_member_disabled企业所有者阻止为组织拥有的存储库启用 GitHub Advanced Security 功能。 有关详细信息，请参阅“在企业中强制实施 Advanced Security 策略”。
org.advanced_security_policy_selected_member_enabled企业所有者允许为组织拥有的存储库启用 GitHub Advanced Security 功能。 有关详细信息，请参阅“在企业中强制实施 Advanced Security 策略”。
org.advanced_security_policy_update组织所有者在企业中更新了 GitHub Advanced Security 策略。 有关详细信息，请参阅“在企业中强制实施 Advanced Security 策略”。
org.async_delete用户发起了删除组织的后台作业。
org.clear_actions_settings组织所有者清除了组织的 GitHub Actions 策略设置。 有关详细信息，请参阅“禁用或限制组织的 GitHub Actions”。
org.clear_default_repository_permission组织所有者清除了组织的基本存储库权限策略设置。 有关详细信息，请参阅“为组织设置基本权限”。
org.clear_member_team_creation_permission组织所有者清除了组织的新团队创建设置。 有关详细信息，请参阅“设置组织中的团队创建权限”。
org.clear_reader_discussion_creation_permission组织所有者清除了组织的新的讨论创建设置。
org.clear_members_can_invite_outside_collaborators组织所有者清除了组织的外部协作者邀请策略。 有关详细信息，请参阅“设置添加外部协作者的权限”。
org.clear_new_repository_default_branch_setting组织所有者清除了组织的新建存储库设置的默认分支名称。 有关详细信息，请参阅“管理组织中仓库的默认分支名称”。
org.config.disable_collaborators_only已禁用仅针对组织的协作者的交互限制。
org.delete组织已由用户发起的后台作业删除。
org.disable_member_team_creation_permission组织所有者将团队创建限制为所有者。 有关详细信息，请参阅“设置组织中的团队创建权限”。
org.disable_reader_discussion_creation_permission组织所有者将讨论创建限制为组织中至少具有会审权限的用户。
org.display_commenter_full_name_enabled组织所有者启用了在组织中显示评论者全名的功能。 成员可以看到评论作者的全名。
org.enable_member_team_creation_permission组织所有者允许成员创建团队。 有关详细信息，请参阅“设置组织中的团队创建权限”。
org.enable_reader_discussion_creation_permission组织所有者允许具有读取访问权限的用户在组织中创建讨论。
org.integration_manager_removed组织所有者删除了组织成员对管理组织拥有的所有 GitHub 应用的访问权限。
org.invite_member邀请新用户加入了组织。
org.members_can_update_protected_branches.clear组织所有者取消设置针对组织成员是否可以更新组织中存储库上受保护分支的策略。 组织所有者可以选择是否允许更新受保护的分支设置。
org.members_can_update_protected_branches.disable已禁用企业成员更新受保护分支的功能。 只有企业所有者可以更新受保护的分支。
org.members_can_update_protected_branches.enable已启用企业成员更新受保护分支的功能。 组织成员可以更新受保护的分支。
org.register_self_hosted_runner已注册新的自托管运行器。 有关详细信息，请参阅“添加自托管的运行器”。
org.remove_actions_secretGitHub Actions 机密已被删除。
org.remove_integration_secret已从组织中删除 Dependabot 集成机密。
org.remove_billing_manager所有者从组织中删除了计费管理员。 ，或当组织中需要双因素身份验证，而计费管理员未使用 2FA 或禁用了 2FA 时。
org.remove_outside_collaborator所有者从组织中删除了外部协作者，或当组织中需要双因素身份验证，而外部协作者未使用 2FA 或禁用了 2FA 时。
org.remove_self_hosted_runner已删除自托管运行器。 有关详细信息，请参阅“删除自托管的运行器”。
org.rename组织已重命名。
org.restore_member组织成员已还原。 有关详细信息，请参阅“Reinstating a former member of your organization（恢复组织前成员的身份）”。
org.runner_group_removed已删除自托管运行器组。 有关详细信息，请参阅“使用组管理对自托管运行程序的访问”。
org.runner_group_runner_removedREST API 用于从组中删除自托管运行器。 有关详细信息，请参阅“操作”。
org.runner_group_runners_added将自托管运行器添加到组中。 有关详细信息，请参阅“将自托管运行器移动到组”。
org.runner_group_runners_updated运行器组的成员名单已更新。 有关详细信息，请参阅“操作”。
org.secret_scanning_push_protection_enable组织所有者或管理员启用了 secret scanning 的推送保护。
org.self_hosted_runner_offline运行器应用程序已停止。 只能使用 REST API 查看；在 UI 或 JSON/CSV 导出中不可见。 有关详细信息，请参阅“对自托管运行程序进行监视和故障排除”。
org.update_default_repository_permission组织所有者更改了组织成员的默认存储库权限级别。
org.update_member组织所有者将某人的角色从所有者更改为成员或从成员更改为所有者。
org.update_member_repository_creation_permission组织所有者更改了组织成员的创建存储库权限。
org.update_member_repository_invitation_permission组织所有者更改了组织成员邀请外部协作者访问存储库的策略设置。 有关详细信息，请参阅“设置添加外部协作者的权限”。
org.update_new_repository_default_branch_setting组织所有者更改了组织中新存储库的默认分支名称。 有关详细信息，请参阅“管理组织中仓库的默认分支名称”。

org_credential_authorization 类别操作

操作说明
org_credential_authorization.deauthorized成员取消了对用于 SAML 单一登录的凭据授权。
org_credential_authorization.grant成员授权了用于 SAML 单一登录的凭据。
org_credential_authorization.revoke所有者撤销了授权凭据。

org_secret_scanning_custom_pattern 类别操作

操作说明
org_secret_scanning_custom_pattern.create为组织中的 secret scanning 创建了自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
org_secret_scanning_custom_pattern.delete从组织中的 secret scanning 删除了自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
org_secret_scanning_custom_pattern.publish为组织中的 secret scanning 发布了自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
org_secret_scanning_custom_pattern.update保存了对自定义模式的更改，并对组织中的 secret scanning 执行了试运行。 有关详细信息，请参阅“为机密扫描定义自定义模式”。

organization_default_label 类别操作

操作说明
organization_default_label.create已在组织中创建存储库的默认标签。 有关详细信息，请参阅“管理组织中仓库的默认标签”。
organization_default_label.update已在组织中编辑存储库的默认标签。 有关详细信息，请参阅“管理组织中仓库的默认标签”。
organization_default_label.destroy组织中存储库的默认标签已被删除。 有关详细信息，请参阅“管理组织中仓库的默认标签”。

organization_domain 类别操作

操作说明
organization_domain.approve企业域已获批用于组织。 有关详细信息，请参阅“验证或批准您组织的域”。
organization_domain.create企业域已添加到组织。 有关详细信息，请参阅“验证或批准您组织的域”。
organization_domain.destroy企业域已从组织中删除。 有关详细信息，请参阅“验证或批准您组织的域”。
organization_domain.verify已为组织验证企业域。 有关详细信息，请参阅“验证或批准您组织的域”。

organization_projects_change 类别操作

操作说明
organization_projects_change.clear企业所有者或站点管理员清除了企业中组织范围的项目板的策略设置。 有关详细信息，请参阅“在企业中为项目实施策略”。
organization_projects_change.disable已为企业中的所有组织禁用组织项目。 有关详细信息，请参阅“在企业中为项目实施策略”。
organization_projects_change.enable已为企业中的所有组织启用组织项目。 有关详细信息，请参阅“在企业中为项目实施策略”。

pre_receive_environment 类别操作

操作说明
pre_receive_environment.create已创建预接收挂钩环境。 有关详细信息，请参阅“创建预接收挂钩环境”。
pre_receive_environment.destroy预接收挂钩环境已被删除。 有关详细信息，请参阅“创建预接收挂钩环境”。
pre_receive_environment.download已下载预接收挂钩环境。 有关详细信息，请参阅“创建预接收挂钩环境”。
pre_receive_environment.update预接收挂钩环境已更新。 有关详细信息，请参阅“创建预接收挂钩环境”。

pre_receive_hook 类别操作

操作说明
pre_receive_hook.create已创建预接收挂钩。 有关详细信息，请参阅“管理实例上的预接收挂钩”。
pre_receive_hook.destroy预接收挂钩已被删除。 有关详细信息，请参阅“管理实例上的预接收挂钩”。
pre_receive_hook.enforcement已启用或禁用允许存储库管理员和组织所有者替代挂钩配置的预接收挂钩强制实施设置。 有关详细信息，请参阅“管理实例上的预接收挂钩”。
pre_receive_hook.rejected_push预接收挂钩拒绝了推送。
pre_receive_hook.update已创建预接收挂钩。 有关详细信息，请参阅“管理实例上的预接收挂钩”。
pre_receive_hook.warned_push预接收挂钩针对推送发出警告。

private_repository_forking 类别操作

操作说明
private_repository_forking.clear企业所有者或站点管理员清除了允许对存储库、组织或企业的专用和内部存储库创建分支的策略设置。 有关详细信息，请参阅“管理仓库的复刻政策”、“管理组织的复刻政策”，对于企业，请参阅“在企业中实施仓库管理策略”。
private_repository_forking.disable企业所有者或站点管理员禁用了允许对存储库、组织或企业的专用和内部存储库创建分支的策略设置。 不允许对专用和内部存储库创建分支。 有关详细信息，请参阅“管理仓库的复刻政策”、“管理组织的复刻政策”，对于企业，请参阅“在企业中实施仓库管理策略”。
private_repository_forking.enable企业所有者或站点管理员启用了允许对存储库、组织或企业的专用和内部存储库创建分支的策略设置。 始终允许允许对专用和内部存储库创建分支。 有关详细信息，请参阅“管理仓库的复刻政策”、“管理组织的复刻政策”，对于企业，请参阅“在企业中实施仓库管理策略”。

project 类别操作

操作说明
project.access项目板可见性已更改。 有关详细信息，请参阅“更改 project board 的可见性”。
project.close项目板已关闭。 有关详细信息，请参阅“关闭 project board”。
project.create项目板已创建。 有关详细信息，请参阅“创建 project board”。
project.delete项目板已被删除。 有关详细信息，请参阅“删除 project board”。
project.link存储库已链接到项目板。 有关详细信息，请参阅“将存储库链接到 project board”。
project.open项目板已重新打开。 有关详细信息，请参阅“重新打开已关闭的 project board”。
project.rename项目板已重命名。 有关详细信息，请参阅“编辑 project board”。
project.unlink存储库取消与项目板的链接。 有关详细信息，请参阅“将存储库链接到 project board”。
project.update_org_permission所有组织成员的项目基本权限已更改或被删除。 有关详细信息，请参阅“管理组织成员对 project board 的访问权限”。
project.update_team_permission团队的项目板权限级别已更改，或当在项目板中添加或删除了团队时。 有关详细信息，请参阅“管理团队对组织 project board 的访问权限”。
project.update_user_permission组织成员或外部协作者已添加到项目板或从项目板中删除，或者他们的权限级别已更改。 有关详细信息，请参阅“管理个人对组织 project board 的访问权限”。

protected_branch 类别操作

操作说明
protected_branch.create已在分支上启用分支保护。
protected_branch.destroy已在分支上禁用分支保护。
protected_branch.dismiss_stale_reviews已在分支上更新忽略旧拉取请求的强制执行。
protected_branch.rejected_ref_update分支更新尝试已被拒绝。
protected_branch.required_status_override所需的状态检查分支保护要求已由存储库管理员替代。
protected_branch.review_policy_and_required_status_override所需的评论和所需的状态检查分支保护要求已由存储库管理员替代。
protected_branch.review_policy_override所需的评论分支保护要求已由存储库管理员替代。
protected_branch.update_admin_enforced已为存储库管理员强制执行分支保护。
protected_branch.update_allow_force_pushes_enforcement_level已在分支上更新对所有具有推送访问权限的用户允许强制实施推送的强制执行。
protected_branch.update_linear_history_requirement_enforcement_level已在分支上更新要求线性提交历史记录的强制执行。
protected_branch.update_require_code_owner_review已在分支上更新所需的代码所有者审查的强制执行。
protected_branch.update_required_approving_review_count已在分支上更新在合并之前所需批准数量的强制执行。
protected_branch.update_required_status_checks_enforcement_level已在分支上更新所需状态检查的强制执行。
protected_branch.update_signature_requirement_enforcement_level已在分支上更新所需提交签名的强制执行。
protected_branch.update_strict_required_status_checks_policy已在分支上更新所需状态检查的强制执行。
protected_branch.update_name已为分支更新分支名称模式。

public_key 类别操作

操作说明
public_key.create已将 SSH 密钥添加到用户帐户或将部署密钥添加到存储库。
public_key.delete已从用户帐户中删除 SSH 密钥或从存储库中删除部署密钥。
public_key.update用户帐户的 SSH 密钥或存储库的部署密钥已更新。
public_key.unverification_failure无法取消验证用户帐户的 SSH 密钥或存储库的部署密钥。
public_key.unverify用户帐户的 SSH 密钥或存储库的部署密钥未经验证。
public_key.verification_failure无法验证用户帐户的 SSH 密钥或存储库的部署密钥。
public_key.verify已验证用户帐户的 SSH 密钥或存储库的部署密钥。

pull_request 类别操作

操作说明
pull_request.close拉取请求在未合并的情况下关闭。 有关详细信息，请参阅“关闭拉取请求”。
pull_request.converted_to_draft拉取请求已转换为草稿。 有关详细信息，请参阅“更改拉取请求的阶段”。
pull_request.create已创建拉取请求。 有关详细信息，请参阅“创建拉取请求”。
pull_request.create_review_request请求对拉取请求进行审查。 有关详细信息，请参阅“关于拉取请求审查”。
pull_request.in_progress拉取请求已被标记为正在进行中。
pull_request.indirect_merge拉取请求被视为已合并，因为拉取请求的提交已合并到目标分支中。
pull_request.merge拉取请求已合并。 有关详细信息，请参阅“合并拉取请求”。
pull_request.ready_for_review拉取请求已被标记为可供审查。 有关详细信息，请参阅“更改拉取请求的阶段”。
pull_request.remove_review_request已从拉取请求中删除审查请求。 有关详细信息，请参阅“关于拉取请求审查”。
pull_request.reopen拉取请求在先前关闭后重新打开。
pull_request_review.delete已删除对拉取请求的审查。
pull_request_review.dismiss已取消对拉取请求的审查。 有关详细信息，请参阅“忽略拉取请求审查”。
pull_request_review.submit已提交针对拉取请求的审查。 有关详细信息，请参阅“关于拉取请求审查”。

pull_request_review 类别操作

操作说明
pull_request_review.delete已删除对拉取请求的审查。
pull_request_review.dismiss已取消对拉取请求的审查。 有关详细信息，请参阅“忽略拉取请求审查”。
pull_request_review.submit已提交针对拉取请求的审查。 有关详细信息，请参阅“审查拉取请求中的建议更改”。

pull_request_review_comment 类别操作

操作说明
pull_request_review_comment.create审查评论已添加到拉取请求中。 有关详细信息，请参阅“关于拉取请求审查”。
pull_request_review_comment.delete对拉取请求的审查评论已被删除。
pull_request_review_comment.update对拉取请求的审查评论已更改。

repo 类别操作

操作说明
repo.access存储库的可见性已更改。
repo.actions_enabled已为存储库启用 GitHub Actions。
repo.add_member已向仓库添加协作者。
repo.add_topic已将主题添加到存储库。
repo.advanced_security_disabled已为存储库禁用 GitHub Advanced Security。
repo.advanced_security_enabled已为存储库启用 GitHub Advanced Security。
repo.advanced_security_policy_selected_member_disabled存储库管理员阻止为存储库启用 GitHub Advanced Security 功能。
repo.advanced_security_policy_selected_member_enabled存储库管理员允许为存储库启用 GitHub Advanced Security 功能。
repo.archived已存档仓库。 有关详细信息，请参阅“存档 GitHub 仓库”。
repo.change_merge_setting已为存储库更改拉取请求合并选项。
repo.clear_actions_settings存储库管理员清除了存储库的 GitHub Actions 策略设置。
repo.code_scanning_analysis_deleted对存储库的代码扫描分析已被删除。 有关详细信息，请参阅“代码扫描”。
repo.config.enable_anonymous_git_access已启用存储库的匿名 Git 读取访问权限。 有关详细信息，请参阅“启用仓库的匿名 Git 读取权限”。
repo.config.lock_anonymous_git_access存储库的匿名 Git 读取访问权限设置已被锁定，阻止存储库管理员更改（启用或禁用）此设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
repo.config.unlock_anonymous_git_access存储库的匿名 Git 读取访问设置已解锁，允许存储库管理员更改（启用或禁用）此设置。 有关详细信息，请参阅“在企业中实施仓库管理策略”。
repo.create_actions_secret已为存储库创建 GitHub Actions 机密。 有关详细信息，请参阅“在 GitHub Actions 中使用机密”。
repo.create_integration_secret已为存储库创建 Dependabot 集成密钥。
repo.destroy存储库已被删除。
repo.pages_cname在存储库中修改了 GitHub Pages 自定义域。
repo.pages_createGitHub Pages 站点已创建。
repo.pages_destroyGitHub Pages 网站已被删除。
repo.pages_https_redirect_disabled已为 GitHub Pages 站点禁用 HTTPS 重定向。
repo.pages_https_redirect_enabled已为 GitHub Pages 站点启用 HTTPS 重定向。
repo.pages_source已修改 GitHub Pages 源。
repo.pages_privateGitHub Pages 站点可见性已更改为专用。
repo.pages_publicGitHub Pages 站点可见性已更改为公开。
repo.register_self_hosted_runner已注册新的自托管运行器。 有关详细信息，请参阅“添加自托管的运行器”。
repo.remove_self_hosted_runner已删除自托管运行器。 有关详细信息，请参阅“删除自托管的运行器”。
repo.remove_actions_secret已删除存储库的 GitHub Actions 机密。
repo.remove_integration_secret已删除存储库的 Dependabot 集成密钥。
repo.remove_member已从存储库中删除协作者。
repo.remove_topic已从存储库中删除主题。
repo.rename已重命名存储库。
repo.self_hosted_runner_online运行器应用程序已启动。 只能使用 REST API 查看；在 UI 或 JSON/CSV 导出中不可见。 有关详细信息，请参阅“对自托管运行程序进行监视和故障排除”。
repo.self_hosted_runner_offline运行器应用程序已停止。 只能使用 REST API 查看；在 UI 或 JSON/CSV 导出中不可见。 有关详细信息，请参阅“对自托管运行程序进行监视和故障排除”。
repo.self_hosted_runner_updated运行器应用程序已更新。 可以使用 REST API 和 UI 查看；在 JSON /CSV 导出中不可见。 有关详细信息，请参阅“关于自托管运行程序”。
repo.staff_unlock企业管理员或 GitHub 工作人员（具有存储库管理员的权限）暂时解锁了存储库。
repo.transfer用户接受了接收已转移存储库的请求。
repo.transfer_outgoing一个存储库已被转移到另一个存储库网络。
repo.transfer_start用户发送了用于将存储库转移到另一个用户或组织的请求。
repo.unarchived未对存储库进行存档。 有关详细信息，请参阅“存档 GitHub 仓库”。
repo.update_actions_settings存储库管理员更改了存储库的 GitHub Actions 策略设置。
repo.update_actions_secretGitHub Actions 机密已更新。
repo.update_actions_access_settings用于控制其他存储库中 GitHub Actions 工作流如何使用存储库的设置已更改。
repo.update_default_branch存储库的默认分支已更改。
repo.update_integration_secret已为存储库更新 Dependabot 集成密钥。
repo.update_member用户对存储库的权限已更改。

repository_image 类别操作

操作说明
repository_image.create表示存储库的图像已上传。
repository_image.destroy表示存储库的图像已被删除。

repository_invitation 类别操作

操作说明
repository_invitation.accept已接受加入存储库的邀请。
repository_invitation.cancel已取消加入存储库的邀请。
repository_invitation.create已发送加入存储库的邀请。
repository_invitation.reject已拒绝加入存储库的邀请。

repository_projects_change 类别操作

操作说明
repository_projects_change.clear已为企业中的某个组织或所有组织删除存储库项目策略。 组织所有者现可控制其存储库项目设置。 有关详细信息，请参阅“在企业中为项目实施策略”。
repository_projects_change.disable已为存储库、组织中的所有存储库或企业中的所有组织禁用存储库项目。
repository_projects_change.enable已为存储库、组织中的所有存储库或企业中的所有组织启用存储库项目。

repository_secret_scanning 类别操作

操作说明
repository_secret_scanning.disable存储库所有者或管理员已禁用对存储库的 secret scanning。 有关详细信息，请参阅“关于机密扫描”。
repository_secret_scanning.enable存储库所有者或管理员已启用对存储库的 secret scanning。

repository_secret_scanning_custom_pattern 类别操作

操作说明
repository_secret_scanning_custom_pattern.create为存储库中的 secret scanning 创建了自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
repository_secret_scanning_custom_pattern.delete从存储库中的 secret scanning 删除了自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
repository_secret_scanning_custom_pattern.publish为存储库中的 secret scanning 发布了自定义模式。 有关详细信息，请参阅“为机密扫描定义自定义模式”。
repository_secret_scanning_custom_pattern.update保存了对自定义模式的更改，并对存储库中的 secret scanning 执行了试运行。 有关详细信息，请参阅“为机密扫描定义自定义模式”。

repository_secret_scanning_push_protection 类别操作

操作说明
repository_secret_scanning_push_protection.disable存储库所有者或管理员禁用了存储库的 secret scanning 推送保护。 有关详细信息，请参阅“存储库和组织的推送保护”。
repository_secret_scanning_push_protection.enable存储库所有者或管理员启用了存储库的 secret scanning 推送保护。 有关详细信息，请参阅“存储库和组织的推送保护”。

repository_visibility_change 类别操作

操作说明
repository_visibility_change.clear已为组织或企业清除存储库可见性更改设置。 有关详细信息，请参阅“限制在组织中更改仓库可见性”和“为企业在企业中实施仓库管理策略”。
repository_visibility_change.disable已禁用企业成员更新存储库可见性的功能。 成员无法更改企业中某个组织或所有组织中的存储库可见性。
repository_visibility_change.enable已启用企业成员更新存储库可见性的功能。 成员能够更改企业中某个组织或所有组织中的存储库可见性。

repository_vulnerability_alert 类别操作

操作说明
repository_vulnerability_alert.createGitHub Enterprise Server 为使用不安全的依赖项的存储库创建了 Dependabot 警报。 有关详细信息，请参阅“关于 Dependabot 警报”。
repository_vulnerability_alert.dismiss组织所有者或存储库管理员解除了对易受攻击依赖项的 Dependabot 警报。
repository_vulnerability_alert.resolve对存储库具有写入权限的某人推送更改，以更新和解决项目依赖项中的 Dependabot 警报。

required_status_check 类别操作

操作说明
required_status_check.create状态检查已被标记为所需的受保护分支。 有关详细信息，请参阅“关于受保护分支”。
required_status_check.destroy不再将状态检查标记为所需的受保护分支。 有关详细信息，请参阅“关于受保护分支”。

restrict_notification_delivery 类别操作

操作说明
restrict_notification_delivery.enable已启用针对组织或企业的电子邮件通知限制。 有关详细信息，请参阅“限制组织的电子邮件通知”和“限制企业的电子邮件通知”。
restrict_notification_delivery.disable已禁用针对组织或企业的电子邮件通知限制。 有关详细信息，请参阅“限制组织的电子邮件通知”和“限制企业的电子邮件通知”。

role 类别操作

操作说明
create组织所有者创建了新的自定义存储库角色。 有关详细信息，请参阅“关于自定义存储库角色”。
destroy组织所有者删除了自定义存储库角色。 有关详细信息，请参阅“关于自定义存储库角色”。
update组织所有者编辑了现有的自定义存储库角色。 有关详细信息，请参阅“关于自定义存储库角色”。

secret_scanning 类别操作

操作说明
secret_scanning.disable组织所有者对所有现有存储库禁用了 secret scanning。 有关详细信息，请参阅“关于机密扫描”。
secret_scanning.enable组织所有者对所有现有存储库启用了 secret scanning。

secret_scanning_alert 类别操作

操作说明
secret_scanning_alert.createGitHub 检测到机密并创建了 secret scanning 警报。 有关详细信息，请参阅“管理来自机密扫描的警报”。
secret_scanning_alert.reopen用户重新打开 secret scanning 警报。
secret_scanning_alert.resolve用户解决了 secret scanning 警报。

secret_scanning_new_repos 类别操作

操作说明
secret_scanning_new_repos.disable组织所有者对所有新的存储库禁用了 secret scanning。 有关详细信息，请参阅“关于机密扫描”。
secret_scanning_new_repos.enable组织所有者对所有新的存储库启用了 secret scanning。

secret_scanning_push_protection 类别操作

操作说明
bypass当用户绕过机密扫描检测到的机密的推送保护时触发。 有关详细信息，请参阅“存储库和组织的推送保护”。

security_key 类别操作

操作说明
security_key.register已为帐户注册安全密钥。
security_key.remove已从帐户中删除安全密钥。

ssh_certificate_authority 类别操作

操作说明
ssh_certificate_authority.create已创建组织或企业的 SSH 证书颁发机构。 有关详细信息，请参阅“管理组织的 SSH 认证中心”和“为企业中的安全设置实施策略”。
ssh_certificate_authority.destroy已删除组织或企业的 SSH 证书颁发机构。 有关详细信息，请参阅“管理组织的 SSH 认证中心”和“为企业中的安全设置实施策略”。

ssh_certificate_requirement 类别操作

操作说明
ssh_certificate_requirement.enable已启用成员使用 SSH 证书访问组织资源的要求。 有关详细信息，请参阅“管理组织的 SSH 认证中心”和“为企业中的安全设置实施策略”。
ssh_certificate_requirement.disable已禁止成员使用 SSH 证书访问组织资源的要求。 有关详细信息，请参阅“管理组织的 SSH 认证中心”和“为企业中的安全设置实施策略”。

staff 类别操作

操作说明
staff.disable_repo组织、存储库或站点管理员禁用了对存储库及其所有分支的访问权限。
staff.enable_repo组织、存储库或站点管理员重新启用了对存储库及其所有分支的访问权限。
staff.fake_login企业所有者或站点管理员以其他用户身份登录到 GitHub Enterprise Server。
staff.repo_unlock组织、存储库或站点管理员解锁（终止）了对用户专用存储库的临时访问权限。

team 类别操作

操作说明
team.add_member已将组织的成员添加到团队中。 有关详细信息，请参阅“添加组织成员到团队”。
team.add_repository已授予团队对存储库的访问权限和权限。
team.change_parent_team已创建子团队或已更改子团队的父团队。 有关详细信息，请参阅“在组织的层次结构中移动团队”。
team.change_privacy团队的隐私级别已更改。 有关详细信息，请参阅“更改团队可见性”。
team.create已向团队添加用户帐户或仓库。
team.delete已从团队中移除用户帐户或仓库。
team.destroy已删除团队。
team.promote_maintainer用户已从团队成员提升为团队维护者。 有关详细信息，请参阅“将团队维护者角色分配给团队成员”。
team.remove_repository存储库不再受团队控制。
team.rename团队的名称已更改。
team.update_permission团队的访问权限已更改。
team.update_repository_permission团队对存储库的权限已更改。

team_discussions 类别操作

操作说明
team_discussions.clear组织所有者清除了设置，以允许组织或企业进行团队讨论。
team_discussions.disable组织所有者为组织禁用了团队讨论。 有关详细信息，请参阅“禁用组织的团队讨论”。
team_discussions.enable组织所有者为组织启用了团队讨论。

two_factor_authentication 类别操作

操作说明
two_factor_authentication.disabled已为用户帐户禁用双因素身份验证。
two_factor_authentication.enabled已为用户帐户启用双因素身份验证。
two_factor_authentication.password_reset_fallback_sms一次性密码代码已发送到用户帐户备用电话号码。
two_factor_authentication.recovery_codes_regenerated已为用户帐户重新生成双因素恢复代码。
two_factor_authentication.sign_in_fallback_sms一次性密码代码已发送到用户帐户备用电话号码。
two_factor_authentication.update_fallback用户帐户的双因素身份验证回退已更改。

user 类别操作

操作说明
user.add_email已向用户帐户添加电子邮件地址。
user.async_delete已启动异步作业以销毁用户帐户，最终触发 user.delete 事件。
user.audit_log_export审核日志条目已导出。
user.block_user一个用户被另一个用户或站点管理员阻止。
user.change_password用户已更改其密码。
user.create已创建新的用户帐户。
user.creation_rate_limit_exceeded用户帐户、应用程序、问题、拉取请求或其他资源的创建速率超过了配置的速率限制，或者关注的用户过多。
user.delete已通过异步作业销毁用户帐户。
user.failed_login用户尝试使用不正确的用户名、密码或双因素身份验证码登录。
user.flag_as_large_scale_contributor已将用户帐户标记为大规模参与者。 只有来自用户拥有的公共存储库的贡献才会显示在他们的贡献图中，以防止超时。
user.forgot_password用户通过登录页面请求了密码重置。
user.hide_private_contributions_count用户更改了其私人贡献的可见性。 现在将隐藏对用户配置文件上专用存储库的贡献数量。 有关详细信息，请参阅“在个人资料上显示你的私有贡献和成就”。
user.lockout用户被锁定在其帐户之外。
user.login用户已登录。
user.remove_email已从用户帐户中移除电子邮件地址。
user.remove_large_scale_contributor_flag用户帐户不再被标记为大规模参与者。
user.rename用户名已更改。
user.reset_password用户重置其帐户密码。
user.show_private_contributions_count用户更改了其私人贡献的可见性。 现在将显示对用户配置文件上专用存储库的贡献数量。 有关详细信息，请参阅“在个人资料上显示你的私有贡献和成就”。
user.sign_in_from_unrecognized_device用户从无法识别的设备登录了。
user.sign_in_from_unrecognized_device_and_location用户从无法识别的设备和位置登录了。
user.sign_in_from_unrecognized_location用户从无法识别的位置登录了。
user.suspend用户帐户已被企业所有者或站点管理员暂停。
user.two_factor_challenge_failure为用户帐户发出的 2FA 质询失败。
user.two_factor_challenge_success为用户帐户发出的 2FA 质询成功。
user.two_factor_recover用户使用了其 2FA 恢复代码。
user.two_factor_recovery_codes_downloaded用户为其帐户下载了 2FA 恢复代码。
user.two_factor_recovery_codes_printed用户为其帐户打印了 2FA 恢复代码。
user.two_factor_recovery_codes_viewed用户查看了其帐户的 2FA 恢复代码。
user.two_factor_requested已提示用户输入双因素身份验证码。
user.unblock_user一个用户被另一个用户或站点管理员解锁。
user.unminimize_comment未将用户发表的评论数降至最低。
user.unsuspend企业所有者或站点管理员已恢复对用户帐户的访问权限。

user_license 类别操作

操作说明
user_license.create已为企业中的用户创建席位许可证。
user_license.destroy已删除企业中用户的席位许可证。
user_license.update企业中用户的席位许可证类型已更改。

workflows 类别操作

操作说明
workflows.approve_workflow_job工作流作业已获批。 有关详细信息，请参阅“审查部署”。
workflows.cancel_workflow_run工作流运行已取消。 有关详细信息，请参阅“取消工作流程”。
workflows.delete_workflow_run工作流运行已删除。 有关详细信息，请参阅“删除工作流程运行”。
workflows.disable_workflow工作流已禁用。
workflows.enable_workflow在之前经 disable_workflow 禁用后，工作流已启用。
workflows.reject_workflow_job工作流作业被拒绝。 有关详细信息，请参阅“审查部署”。
workflows.rerun_workflow_run工作流运行已重新运行。 有关详细信息，请参阅“重新运行工作流程和作业”。
workflows.completed_workflow_run工作流状态已更改为 completed。 只能使用 REST API 查看；在 UI 或 JSON/CSV 导出中不可见。 有关详细信息，请参阅“查看工作流程运行历史记录”。
workflows.created_workflow_run工作流运行已创建。 只能使用 REST API 查看；在 UI 或 JSON/CSV 导出中不可见。 有关详细信息，请参阅“了解 GitHub Actions”。
workflows.prepared_workflow_job工作流作业已启动。 包括提供给作业的机密列表。 只能使用 REST API 查看。 它在 GitHub Web 接口中不可见，也不包含在 JSON/CSV 导出中。 有关详细信息，请参阅“触发工作流的事件”。

business

操作说明
business.add_adminAn enterprise owner was added to an enterprise.
business.add_organizationAn organization was added to an enterprise.
business.advanced_security_policy_updateAn enterprise owner created, updated, or removed a policy for GitHub Advanced Security.
business.clear_actions_settingsAn enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.
business.clear_default_repository_permissionAn enterprise owner cleared the base repository permission policy setting for an enterprise.
business.clear_members_can_create_reposAn enterprise owner cleared a restriction on repository creation in organizations in the enterprise.
business.createAn enterprise was created.
business.disable_two_factor_requirementThe requirement for members to have two-factor authentication enabled to access an enterprise was disabled.
business.enable_two_factor_requirementThe requirement for members to have two-factor authentication enabled to access an enterprise was enabled.
business.members_can_update_protected_branches.clearAn enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.
business.members_can_update_protected_branches.disableThe ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.
business.members_can_update_protected_branches.enableThe ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.
business.remove_adminAn enterprise owner was removed from an enterprise.
business.remove_organizationAn organization was removed from an enterprise.
business.rename_slugThe slug for the enterprise URL was renamed.
business.set_actions_retention_limitThe retention period for GitHub Actions artifacts and logs was changed for an enterprise.
business.update_actions_settingsAn enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.
business.update_default_repository_permissionThe base repository permission setting was updated for all organizations in an enterprise.
business.update_member_repository_creation_permissionThe repository creation setting was updated for an enterprise.
business.update_member_repository_invitation_permissionThe policy setting for enterprise members inviting outside collaborators to repositories was updated.

business_advanced_security

操作说明
business_advanced_security.disabledGitHub Advanced Security was disabled for your enterprise.
business_advanced_security.disabled_for_new_reposGitHub Advanced Security was disabled for new repositories in your enterprise.
business_advanced_security.enabledGitHub Advanced Security was enabled for your enterprise.
business_advanced_security.enabled_for_new_reposGitHub Advanced Security was enabled for new repositories in your enterprise.

business_secret_scanning

操作说明
business_secret_scanning.disableSecret scanning was disabled for your enterprise.
business_secret_scanning.disabled_for_new_reposSecret scanning was disabled for new repositories in your enterprise.
business_secret_scanning.enableSecret scanning was enabled for your enterprise.
business_secret_scanning.enabled_for_new_reposSecret scanning was enabled for new repositories in your enterprise.

business_secret_scanning_automatic_validity_checks

操作说明
business_secret_scanning_automatic_validity_checks.disabledAutomatic partner validation checks have been disabled at the business level
business_secret_scanning_automatic_validity_checks.enabledAutomatic partner validation checks have been enabled at the business level

business_secret_scanning_custom_pattern

操作说明
business_secret_scanning_custom_pattern.createAn enterprise-level custom pattern was created for secret scanning.
business_secret_scanning_custom_pattern.deleteAn enterprise-level custom pattern was removed from secret scanning.
business_secret_scanning_custom_pattern.publishAn enterprise-level custom pattern was published for secret scanning.
business_secret_scanning_custom_pattern.updateChanges to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.

business_secret_scanning_custom_pattern_push_protection

操作说明
business_secret_scanning_custom_pattern_push_protection.disabledPush protection for a custom pattern for secret scanning was disabled for your enterprise.
business_secret_scanning_custom_pattern_push_protection.enabledPush protection for a custom pattern for secret scanning was enabled for your enterprise.

business_secret_scanning_push_protection

操作说明
business_secret_scanning_push_protection.disablePush protection for secret scanning was disabled for your enterprise.
business_secret_scanning_push_protection.disabled_for_new_reposPush protection for secret scanning was disabled for new repositories in your enterprise.
business_secret_scanning_push_protection.enablePush protection for secret scanning was enabled for your enterprise.
business_secret_scanning_push_protection.enabled_for_new_reposPush protection for secret scanning was enabled for new repositories in your enterprise.

business_secret_scanning_push_protection_custom_message

操作说明
business_secret_scanning_push_protection_custom_message.disableThe custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.
business_secret_scanning_push_protection_custom_message.enableThe custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.
business_secret_scanning_push_protection_custom_message.updateThe custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.

checks

操作说明
checks.auto_trigger_disabledAutomatic creation of check suites was disabled on a repository in the organization or enterprise.
checks.auto_trigger_enabledAutomatic creation of check suites was enabled on a repository in the organization or enterprise.

discussion_post

操作说明
discussion_post.destroyTriggered when a team discussion post is deleted.
discussion_post.updateTriggered when a team discussion post is edited.

discussion_post_reply

操作说明
discussion_post_reply.destroyTriggered when a reply to a team discussion post is deleted.
discussion_post_reply.updateTriggered when a reply to a team discussion post is edited.

enterprise

操作说明
enterprise.register_self_hosted_runnerA new GitHub Actions self-hosted runner was registered.
enterprise.remove_self_hosted_runnerA GitHub Actions self-hosted runner was removed.
enterprise.runner_group_createdA GitHub Actions self-hosted runner group was created.
enterprise.runner_group_removedA GitHub Actions self-hosted runner group was removed.
enterprise.runner_group_runners_addedA GitHub Actions self-hosted runner was added to a group.
enterprise.runner_group_runners_updatedA GitHub Actions runner group's list of members was updated.
enterprise.runner_group_runner_removedThe REST API was used to remove a GitHub Actions self-hosted runner from a group.
enterprise.runner_group_updatedThe configuration of a GitHub Actions self-hosted runner group was changed.
enterprise.self_hosted_runner_updatedThe GitHub Actions runner application was updated. Can be viewed using the REST API and the UI; not visible in the JSON/CSV export.

enterprise_domain

操作说明
enterprise_domain.approveAn enterprise domain was approved for an enterprise.
enterprise_domain.createAn enterprise domain was added to an enterprise.
enterprise_domain.destroyAn enterprise domain was removed from an enterprise.
enterprise_domain.verifyAn enterprise domain was verified for an enterprise.

git

操作说明
git.cloneA repository was cloned.
git.fetchChanges were fetched from a repository.
git.pushChanges were pushed to a repository.

hook

操作说明
hook.config_changedA hook's configuration was changed.
hook.createA new hook was added.
hook.destroyA hook was deleted.
hook.events_changedA hook's configured events were changed.

integration

操作说明
integration.createAn integration was created.
integration.destroyAn integration was deleted.
integration.manager_addedA member of an enterprise or organization was added as an integration manager.
integration.manager_removedA member of an enterprise or organization was removed from being an integration manager.
integration.transferOwnership of an integration was transferred to another user or organization.

integration_installation

操作说明
integration_installation.createAn integration was installed.
integration_installation.destroyAn integration was uninstalled.
integration_installation.repositories_addedRepositories were added to an integration.
integration_installation.repositories_removedRepositories were removed from an integration.
integration_installation.version_updatedPermissions for an integration were updated.

ip_allow_list

操作说明
ip_allow_list.disableAn IP allow list was disabled.
ip_allow_list.disable_for_installed_appsAn IP allow list was disabled for installed GitHub Apps.
ip_allow_list.enableAn IP allow list was enabled.
ip_allow_list.enable_for_installed_appsAn IP allow list was enabled for installed GitHub Apps.

ip_allow_list_entry

操作说明
ip_allow_list_entry.createAn IP address was added to an IP allow list.
ip_allow_list_entry.destroyAn IP address was deleted from an IP allow list.
ip_allow_list_entry.updateAn IP address or its description was changed.

oauth_application

操作说明
oauth_application.createAn OAuth application was created.
oauth_application.destroyAn OAuth application was deleted.
oauth_application.reset_secretThe secret key for an OAuth application was reset.
oauth_application.revoke_tokensToken(s) for an OAuth application were revoked.
oauth_application.transferAn OAuth application was transferred from one account to another.
oauth_application.unsuspendAn OAuth application was unsuspended for a user or organization account.

oauth_authorization

操作说明
oauth_authorization.createAn authorization for an OAuth application was created.
oauth_authorization.destroyAn authorization for an OAuth application was deleted.
oauth_authorization.updateAn authorization for an OAuth application was updated.

org

操作说明
org.accept_business_invitationAn invitation sent to an organization to join an enterprise was accepted.
org.add_billing_managerA billing manager was added to an organization.
org.add_memberA user joined an organization.
org.advanced_security_disabled_for_new_reposGitHub Advanced Security was disabled for new repositories in an organization.
org.advanced_security_disabled_on_all_reposGitHub Advanced Security was disabled for all repositories in an organization.
org.advanced_security_enabled_for_new_reposGitHub Advanced Security was enabled for new repositories in an organization.
org.advanced_security_enabled_on_all_reposGitHub Advanced Security was enabled for all repositories in an organization.
org.advanced_security_policy_selected_member_disabledAn enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.
org.advanced_security_policy_selected_member_enabledAn enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.
org.async_deleteA user initiated a background job to delete an organization.
org.audit_log_exportAn export of the organization audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.
org.block_userAn organization owner blocked a user from accessing the organization's repositories.
org.cancel_business_invitationAn invitation for an organization to join an enterprise was revoked
org.cancel_invitationAn invitation sent to a user to join an organization was revoked.
org.codeql_disabledTriggered when an organization owner or person with admin access to the organization disables code scanning for repositories that use the default setup for CodeQL.
org.codeql_enabledTriggered when an organization owner or person with admin access to the organization enables code scanning for repositories that are eligible to use the default setup for CodeQL.
org.config.disable_collaborators_onlyThe interaction limit for collaborators only for an organization was disabled.
org.config.disable_contributors_onlyThe interaction limit for prior contributors only for an organization was disabled.
org.config.disable_sockpuppet_disallowedThe interaction limit for existing users only for an organization was disabled.
org.config.enable_collaborators_onlyThe interaction limit for collaborators only for an organization was enabled.
org.config.enable_contributors_onlyThe interaction limit for prior contributors only for an organization was enabled.
org.config.enable_sockpuppet_disallowedThe interaction limit for existing users only for an organization was enabled.
org.confirm_business_invitationAn invitation for an organization to join an enterprise was confirmed.
org.createAn organization was created.
org.deleteAn organization was deleted by a user-initiated background job.
org.disable_member_team_creation_permissionTeam creation was limited to owners.
org.disable_reader_discussion_creation_permissionAn organization owner limited discussion creation to users with at least triage permission in an organization.
org.disable_samlSAML single sign-on was disabled for an organization.
org.disable_two_factor_requirementA two-factor authentication requirement was disabled for the organization.
org.display_commenter_full_name_disabledAn organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.
org.display_commenter_full_name_enabledAn organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.
org.enable_member_team_creation_permissionTeam creation by members was allowed.
org.enable_reader_discussion_creation_permissionAn organization owner allowed users with read access to create discussions in an organization
org.enable_samlSAML single sign-on was enabled for the organization.
org.enable_two_factor_requirementTwo-factor authentication is now required for the organization.
org.integration_manager_addedAn organization owner granted a member access to manage all GitHub Apps owned by an organization.
org.integration_manager_removedAn organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.
org.invite_memberA new user was invited to join an organization.
org.invite_to_businessAn organization was invited to join an enterprise.
org.members_can_update_protected_branches.disableThe ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.
org.members_can_update_protected_branches.enableThe ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.
org.recreateAn organization was restored.
org.register_self_hosted_runnerA new self-hosted runner was registered.
org.remove_billing_managerA billing manager was removed from an organization, either manually or due to a two-factor authentication requirement.
org.remove_memberA member was removed from an organization, either manually or due to a two-factor authentication requirement.
org.remove_outside_collaboratorAn outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.
org.remove_self_hosted_runnerA self-hosted runner was removed.
org.renameAn organization was renamed.
org.restore_memberAn organization member was restored.
org.runner_group_createdA self-hosted runner group was created.
org.runner_group_removedA self-hosted runner group was removed.
org.runner_group_runners_addedA self-hosted runner was added to a group.
org.runner_group_runners_updatedA runner group's list of members was updated.
org.runner_group_runner_removedThe REST API was used to remove a self-hosted runner from a group.
org.runner_group_updatedThe configuration of a self-hosted runner group was changed.
org.secret_scanning_custom_pattern_push_protection_disabledPush protection for a custom pattern for secret scanning was disabled for an organization.
org.secret_scanning_custom_pattern_push_protection_enabledPush protection for a custom pattern for secret scanning was enabled for an organization.
org.secret_scanning_push_protection_custom_message_disabledThe custom message triggered by an attempted push to a push-protected repository was disabled for an organization.
org.secret_scanning_push_protection_custom_message_enabledThe custom message triggered by an attempted push to a push-protected repository was enabled for an organization.
org.secret_scanning_push_protection_custom_message_updatedThe custom message triggered by an attempted push to a push-protected repository was updated for an organization.
org.secret_scanning_push_protection_disablePush protection for secret scanning was disabled.
org.secret_scanning_push_protection_enablePush protection for secret scanning was enabled.
org.self_hosted_runner_updatedThe runner application was updated. Can be viewed using the REST API and the UI; not visible in the JSON/CSV export.
org.set_actions_retention_limitThe retention period for GitHub Actions artifacts and logs in an organization was changed.
org.sso_responseA SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is only available via audit log streaming and the REST API.
org.transformA user account was converted into an organization.
org.unblock_userA user was unblocked from an organization.
org.update_default_repository_permissionThe default repository permission level for organization members was changed.
org.update_member_repository_creation_permissionThe create repository permission for organization members was changed.
org.update_member_repository_invitation_permissionAn organization owner changed the policy setting for organization members inviting outside collaborators to repositories.
org.update_saml_provider_settingsAn organization's SAML provider settings were updated.
org.update_terms_of_serviceAn organization changed between the Standard Terms of Service and the GitHub Customer Agreement.

organization_domain

操作说明
organization_domain.approveAn enterprise domain was approved for an organization.
organization_domain.createAn enterprise domain was added to an organization.
organization_domain.destroyAn enterprise domain was removed from an organization.
organization_domain.verifyAn enterprise domain was verified for an organization.

org_secret_scanning_automatic_validity_checks

操作说明
org_secret_scanning_automatic_validity_checks.disabledAutomatic partner validation checks have been disabled at the organization level
org_secret_scanning_automatic_validity_checks.enabledAutomatic partner validation checks have been enabled at the organization level

org_secret_scanning_custom_pattern

操作说明
org_secret_scanning_custom_pattern.createA custom pattern was created for secret scanning in an organization.
org_secret_scanning_custom_pattern.deleteA custom pattern was removed from secret scanning in an organization.
org_secret_scanning_custom_pattern.publishA custom pattern was published for secret scanning in an organization.
org_secret_scanning_custom_pattern.updateChanges to a custom pattern were saved and a dry run was executed for secret scanning in an organization.

packages

操作说明
packages.package_deletedAn entire package was deleted.
packages.package_publishedA package was published or republished to an organization.
packages.package_version_deletedA specific package version was deleted.
packages.package_version_publishedA specific package version was published or republished to a package.

protected_branch

操作说明
protected_branch.branch_allowancesA protected branch allowance was given to a specific user, team or integration.
protected_branch.createBranch protection was enabled on a branch.
protected_branch.destroyBranch protection was disabled on a branch.
protected_branch.dismissal_restricted_users_teamsEnforcement of restricting users and/or teams who can dismiss reviews was updated on a branch.
protected_branch.dismiss_stale_reviewsEnforcement of dismissing stale pull requests was updated on a branch.
protected_branch.policy_overrideA branch protection requirement was overridden by a repository administrator.
protected_branch.rejected_ref_updateA branch update attempt was rejected.
protected_branch.update_admin_enforcedBranch protection was enforced for repository administrators.
protected_branch.update_allow_deletions_enforcement_levelBranch deletion was enabled or disabled for a protected branch.
protected_branch.update_allow_force_pushes_enforcement_levelForce pushes were enabled or disabled for a branch.
protected_branch.update_linear_history_requirement_enforcement_levelRequired linear commit history was enabled or disabled for a branch.
protected_branch.update_nameA branch name pattern was updated for a branch.
protected_branch.update_pull_request_reviews_enforcement_levelEnforcement of required pull request reviews was updated for a branch. Can be 0 (deactivated), 1 (non-admins), or 2 (everyone).
protected_branch.update_required_approving_review_countEnforcement of the required number of approvals before merging was updated on a branch.
protected_branch.update_required_status_checks_enforcement_levelEnforcement of required status checks was updated for a branch.
protected_branch.update_require_code_owner_reviewEnforcement of required code owner review was updated for a branch.
protected_branch.update_signature_requirement_enforcement_levelEnforcement of required commit signing was updated for a branch.
protected_branch.update_strict_required_status_checks_policyEnforcement of required status checks was updated for a branch.

public_key

操作说明
public_key.createAn SSH key was added to a user account or a deploy key was added to a repository.
public_key.deleteAn SSH key was removed from a user account or a deploy key was removed from a repository.
public_key.unverification_failureA user account's SSH key or a repository's deploy key was unable to be unverified.
public_key.unverifyA user account's SSH key or a repository's deploy key was unverified.
public_key.updateA user account's SSH key or a repository's deploy key was updated.
public_key.verification_failureA user account's SSH key or a repository's deploy key was unable to be verified.
public_key.verifyA user account's SSH key or a repository's deploy key was verified.

pull_request

操作说明
pull_request.closeA pull request was closed without being merged.
pull_request.converted_to_draftA pull request was converted to a draft.
pull_request.createA pull request was created.
pull_request.create_review_requestA review was requested on a pull request.
pull_request.indirect_mergeA pull request was considered merged because the pull request's commits were merged into the target branch.
pull_request.in_progressA pull request was marked as in progress.
pull_request.mergeA pull request was merged.
pull_request.ready_for_reviewA pull request was marked as ready for review.
pull_request.remove_review_requestA review request was removed from a pull request.
pull_request.reopenA pull request was reopened after previously being closed.

pull_request_review

操作说明
pull_request_review.deleteA review on a pull request was deleted.
pull_request_review.dismissA review on a pull request was dismissed.
pull_request_review.submitA review on a pull request was submitted.

pull_request_review_comment

操作说明
pull_request_review_comment.createA review comment was added to a pull request.
pull_request_review_comment.deleteA review comment on a pull request was deleted.
pull_request_review_comment.updateA review comment on a pull request was changed.

repo

操作说明
repo.accessThe visibility of a repository changed.
repo.add_memberA collaborator was added to a repository.
repo.add_topicA topic was added to a repository.
repo.advanced_security_disabledGitHub Advanced Security was disabled for a repository.
repo.advanced_security_enabledGitHub Advanced Security was enabled for a repository.
repo.archivedA repository was archived.
repo.change_merge_settingPull request merge options were changed for a repository.
repo.code_scanning_analysis_deletedCode scanning analysis for a repository was deleted.
repo.code_scanning_configuration_for_branch_deletedA code scanning configuration for a branch of a repository was deleted.
repo.config.disable_collaborators_onlyThe interaction limit for collaborators only was disabled.
repo.config.disable_contributors_onlyThe interaction limit for prior contributors only was disabled in a repository.
repo.config.disable_sockpuppet_disallowedThe interaction limit for existing users only was disabled in a repository.
repo.config.enable_collaborators_onlyThe interaction limit for collaborators only was enabled in a repository Users that are not collaborators or organization members were unable to interact with a repository for a set duration.
repo.config.enable_contributors_onlyThe interaction limit for prior contributors only was enabled in a repository Users that are not prior contributors, collaborators or organization members were unable to interact with a repository for a set duration.
repo.config.enable_sockpuppet_disallowedThe interaction limit for existing users was enabled in a repository New users aren't able to interact with a repository for a set duration Existing users of the repository, contributors, collaborators or organization members are able to interact with a repository.
repo.createA repository was created.
repo.destroyA repository was deleted.
repo.disk_archiveA repository was archived on disk.
repo.download_zipA source code archive of a repository was downloaded as a ZIP file.
repo.pages_cnameA GitHub Pages custom domain was modified in a repository.
repo.pages_createA GitHub Pages site was created.
repo.pages_destroyA GitHub Pages site was deleted.
repo.pages_https_redirect_disabledHTTPS redirects were disabled for a GitHub Pages site.
repo.pages_https_redirect_enabledHTTPS redirects were enabled for a GitHub Pages site.
repo.pages_privateA GitHub Pages site visibility was changed to private.
repo.pages_publicA GitHub Pages site visibility was changed to public.
repo.pages_sourceA GitHub Pages source was modified.
repo.register_self_hosted_runnerA new self-hosted runner was registered.
repo.remove_memberA collaborator was removed from a repository.
repo.remove_self_hosted_runnerA self-hosted runner was removed.
repo.remove_topicA topic was removed from a repository.
repo.renameA repository was renamed.
repo.self_hosted_runner_updatedThe runner application was updated. Can be viewed using the REST API and the UI; not visible in the JSON/CSV export.
repo.set_actions_retention_limitThe retention period for GitHub Actions artifacts and logs in a repository was changed.
repo.staff_unlockAn enterprise owner or GitHub staff (with permission from a repository administrator) temporarily unlocked the repository.
repo.transferA user accepted a request to receive a transferred repository.
repo.transfer_outgoingA repository was transferred to another repository network.
repo.transfer_startA user sent a request to transfer a repository to another user or organization.
repo.unarchivedA repository was unarchived.
repo.update_actions_access_settingsThe setting to control how a repository was used by GitHub Actions workflows in other repositories was changed.
repo.update_actions_settingsA repository administrator changed GitHub Actions policy settings for a repository.
repo.update_memberA user's permission to a repository was changed.

repository_invitation

操作说明
repository_invitation.acceptAn invitation to join a repository was accepted.
repository_invitation.cancelAn invitation to join a repository was canceled.
repository_invitation.createAn invitation to join a repository was sent.
repository_invitation.rejectAn invitation to join a repository was declined.

repository_secret_scanning

操作说明
repository_secret_scanning.disableSecret scanning was disabled for a repository.
repository_secret_scanning.enableSecret scanning was enabled for a repository.

repository_secret_scanning_automatic_validity_checks

操作说明
repository_secret_scanning_automatic_validity_checks.disabledAutomatic partner validation checks have been disabled at the repository level
repository_secret_scanning_automatic_validity_checks.enabledAutomatic partner validation checks have been enabled at the repository level

repository_secret_scanning_custom_pattern

操作说明
repository_secret_scanning_custom_pattern.createA custom pattern was created for secret scanning in a repository.
repository_secret_scanning_custom_pattern.deleteA custom pattern was removed from secret scanning in a repository.
repository_secret_scanning_custom_pattern.publishA custom pattern was published for secret scanning in a repository.
repository_secret_scanning_custom_pattern.updateChanges to a custom pattern were saved and a dry run was executed for secret scanning in a repository.

repository_secret_scanning_custom_pattern_push_protection

操作说明
repository_secret_scanning_custom_pattern_push_protection.disabledPush protection for a custom pattern for secret scanning was disabled for your repository.
repository_secret_scanning_custom_pattern_push_protection.enabledPush protection for a custom pattern for secret scanning was enabled for your repository.

repository_secret_scanning_push_protection

操作说明
repository_secret_scanning_push_protection.disableSecret scanning push protection was disabled for a repository.
repository_secret_scanning_push_protection.enableSecret scanning push protection was enabled for a repository.

restrict_notification_delivery

操作说明
restrict_notification_delivery.disableEmail notification restrictions for an organization or enterprise were disabled.
restrict_notification_delivery.enableEmail notification restrictions for an organization or enterprise were enabled.

secret_scanning

操作说明
secret_scanning.disableSecret scanning was disabled for all existing repositories.
secret_scanning.enableSecret scanning was enabled for all existing repositories.

secret_scanning_alert

操作说明
secret_scanning_alert.createGitHub detected a secret and created a secret scanning alert.
secret_scanning_alert.reopenA seret scanning alert was reopened.
secret_scanning_alert.resolveA seret scanning alert was resolved.

secret_scanning_new_repos

操作说明
secret_scanning_new_repos.disableSecret scanning was disabled for all new repositories.
secret_scanning_new_repos.enableSecret scanning was enabled for all new repositories.

secret_scanning_push_protection

操作说明
secret_scanning_push_protection.bypassTriggered when a user bypasses the push protection on a secret detected by secret scanning.

security_key

操作说明
security_key.registerA security key was registered for an account.
security_key.removeA security key was removed from an account.

ssh_certificate_authority

操作说明
ssh_certificate_authority.createAn SSH certificate authority for an organization or enterprise was created.
ssh_certificate_authority.destroyAn SSH certificate authority for an organization or enterprise was deleted.

ssh_certificate_requirement

操作说明
ssh_certificate_requirement.disableThe requirement for members to use SSH certificates to access an organization resources was disabled.
ssh_certificate_requirement.enableThe requirement for members to use SSH certificates to access an organization resources was enabled.

staff

操作说明
staff.set_domain_token_expirationThe verification code expiry time for an organization or enterprise domain was set.
staff.unverify_domainAn organization or enterprise domain was unverified.
staff.verify_domainAn organization or enterprise domain was verified.

team

操作说明
team.add_memberA member of an organization was added to a team.
team.add_repositoryA team was given access and permissions to a repository.
team.change_parent_teamA child team was created or a child team's parent was changed.
team.change_privacyA team's privacy level was changed.
team.createA new team is created.
team.demote_maintainerA user was demoted from a team maintainer to a team member.
team.destroyA team was deleted.
team.promote_maintainerA user was promoted from a team member to a team maintainer.
team.remove_memberAn organization member was removed from a team.
team.remove_repositoryA repository was removed from a team's control.
team.renameA team's name was changed.
team.update_repository_permissionA team's permission to a repository was changed.

team_discussions

操作说明
team_discussions.clearAn organization owner cleared the setting to allow team discussions for an organization or enterprise.
team_discussions.disableTeam discussions were disabled for an organization.
team_discussions.enableTeam discussions were enabled for an organization.

team_sync_tenant

操作说明
team_sync_tenant.disabledTeam synchronization with a tenant was disabled.
team_sync_tenant.enabledTeam synchronization with a tenant was enabled.

two_factor_authentication

操作说明
two_factor_authentication.disabledTwo-factor authentication was disabled for a user account.
two_factor_authentication.enabledTwo-factor authentication was enabled for a user account.
two_factor_authentication.password_reset_fallback_smsA one-time password code was sent to a user account fallback phone number.
two_factor_authentication.recovery_codes_regeneratedTwo factor recovery codes were regenerated for a user account.
two_factor_authentication.sign_in_fallback_smsA one-time password code was sent to a user account fallback phone number.
two_factor_authentication.update_fallbackThe two-factor authentication fallback for a user account was changed.

user

操作说明
user.add_emailAn email address was added to a user account.
user.async_deleteAn asynchronous job was started to destroy a user account, eventually triggering a user.delete event.
user.audit_log_exportAudit log entries were exported.
user.block_userA user was blocked by another user.
user.change_passwordA user changed their password.
user.createA new user account was created.
user.creation_rate_limit_exceededThe rate of creation of user accounts, applications, issues, pull requests or other resources exceeded the configured rate limits, or too many users were followed too quickly.
user.deleteA user account was destroyed by an asynchronous job.
user.demoteA site administrator was demoted to an ordinary user account.
user.destroyA user deleted his or her account, triggering user.async_delete.
user.failed_loginA user tried to sign in with an incorrect username, password, or two-factor authentication code.
user.flag_as_large_scale_contributorA user account was flagged as a large scale contributor. Only contributions from public repositories the user owns will be shown in their contribution graph, in order to prevent timeouts.
user.forgot_passwordA user requested a password reset.
user.hide_private_contributions_countA user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now hidden.
user.loginA user signed in.
user.minimize_commentA comment made by a user was minimized.
user.promoteAn ordinary user account was promoted to a site administrator.
user.recreateA user's account was restored.
user.remove_emailAn email address was removed from a user account.
user.remove_large_scale_contributor_flagA user account was no longer flagged as a large scale contributor.
user.renameA username was changed.
user.report_contentTriggered when you report an issue or pull request, or a comment on an issue, pull request, or commit.
user.reset_passwordA user reset their account password.
user.show_private_contributions_countA user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now shown.
user.sign_in_from_unrecognized_deviceA user signed in from an unrecognized device.
user.sign_in_from_unrecognized_device_and_locationA user signed in from an unrecognized device and location.
user.sign_in_from_unrecognized_locationA user signed in from an unrecognized location.
user.suspendA user account was suspended.
user.two_factor_challenge_failureA 2FA challenge issued for a user account failed.
user.two_factor_challenge_successA 2FA challenge issued for a user account succeeded.
user.two_factor_recoverA user used their 2FA recovery codes.
user.two_factor_recovery_codes_downloadedA user downloaded 2FA recovery codes for their account.
user.two_factor_recovery_codes_printedA user printed 2FA recovery codes for their account.
user.two_factor_recovery_codes_viewedA user viewed 2FA recovery codes for their account.
user.two_factor_requestedA user was prompted for a two-factor authentication code.
user.unblock_userA user was unblocked by another user.
user.unminimize_commentA comment made by a user was unminimized.
user.unsuspendA user account was unsuspended.

workflows

操作说明
workflows.approve_workflow_jobA workflow job was approved.
workflows.cancel_workflow_runA workflow run was cancelled.
workflows.delete_workflow_runA workflow run was deleted.
workflows.disable_workflowA workflow was disabled.
workflows.enable_workflowA workflow was enabled, after previously being disabled by disable_workflow.
workflows.reject_workflow_jobA workflow job was rejected.
workflows.rerun_workflow_runA workflow run was re-run.