diff --git a/.github/workflows/changelog-agent.yml b/.github/workflows/changelog-agent.yml index e3894303e0f3..71e73de5c3ae 100644 --- a/.github/workflows/changelog-agent.yml +++ b/.github/workflows/changelog-agent.yml @@ -420,14 +420,15 @@ jobs: uses: actions/ai-inference@2c43c91ae16266ca159d311430343c67a5ffa222 # v3 with: provider: copilot - # No model is pinned: actions/ai-inference forwards --model to the - # Copilot CLI only when it differs from its GitHub Models default, so - # omitting it lets the CLI pick its own current default (latest Sonnet) - # and avoids breaking when a pinned slug (e.g. gpt-4.1) is retired. + # Must be an explicit empty string, not omitted. This action defaults + # `model` to "gpt-4.1" and always forwards it as --model, and that slug + # is retired, so omitting the input fails with: + # Error: Model "gpt-4.1" from --model flag is not available. + # An empty string makes the action skip --model entirely and lets the + # Copilot CLI pick its own current default. See actions/ai-inference#271. + model: '' prompt-file: prompt.txt system-prompt-file: system-prompt.txt - max-completion-tokens: 1000 - temperature: 0.3 env: COPILOT_GITHUB_TOKEN: ${{ secrets.DOCS_BOT_PAT_COPILOT }} diff --git a/.github/workflows/changelog-prompt.yml b/.github/workflows/changelog-prompt.yml deleted file mode 100644 index 092d796b6f74..000000000000 --- a/.github/workflows/changelog-prompt.yml +++ /dev/null @@ -1,68 +0,0 @@ -name: Changelog prompt when a PR is closed - -on: - pull_request: - types: [closed] - -permissions: - contents: read - pull-requests: write - -jobs: - comment-on-pr: - # This workflow should only run on the 'github/docs-internal' repository because it posts changelog instructions - # and links that are specific to the internal documentation process and resources. - # It also only runs if PR is merged into the main branch. - if: github.repository == 'github/docs-internal' && github.event.pull_request.merged == true && github.event.pull_request.base.ref == 'main' - - runs-on: ubuntu-latest - - steps: - - name: Check if PR author is in docs-content team - id: check_team - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 - with: - github-token: ${{ secrets.DOCS_BOT_PAT_BASE }} - script: | - try { - const pr = context.payload.pull_request; - // Team is addressed by numeric ID (org github = 9919, team docs-content = 2796154) - // because IDs survive team renames and slugs do not. - await github.request('GET /organizations/{org_id}/team/{team_id}/memberships/{username}', { - org_id: 9919, - team_id: 2796154, - username: pr.user.login, - }); - core.exportVariable('CONTINUE_WORKFLOW', 'true'); - } catch(err) { - core.info("Workflow triggered by a merged PR, but the PR author is not a member of the docs-content team."); - core.exportVariable('CONTINUE_WORKFLOW', 'false'); - } - - - name: Post changelog instructions comment - - if: env.CONTINUE_WORKFLOW == 'true' - - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 - with: - github-token: ${{ secrets.DOCS_BOT_PAT_BASE }} - script: | - // Get PR author username - const pr = context.payload.pull_request; - const prAuthor = pr.user.login; - - // Compose the comment body with readable YAML and correct formatting - const commentBody = - "👋 @" + prAuthor + - " - Did this PR add noteworthy changes to the GitHub docs? If so, you might want to publicize this by adding an entry to " + - "the [Docs changelog](https://github.com/github/docs-internal/blob/main/CHANGELOG.md).\n\n" + - "To do this, type `/changelog` in a new comment on this PR and complete the fields.\n\n" + - "A message will be posted to the **#docs-changelog** channel and a PR will be raised to update the [CHANGELOG.md](https://github.com/github/docs-internal/blob/main/CHANGELOG.md) file."; - - // Post the comment - await github.rest.issues.createComment({ - owner: context.repo.owner, - repo: context.repo.repo, - issue_number: pr.number, - body: commentBody - }); diff --git a/.github/workflows/check-for-spammy-prs.yml b/.github/workflows/check-for-spammy-prs.yml index 94f411e917dd..20c60d2bd0e9 100644 --- a/.github/workflows/check-for-spammy-prs.yml +++ b/.github/workflows/check-for-spammy-prs.yml @@ -28,14 +28,18 @@ jobs: const repo = 'docs' const pull_number = context.payload.pull_request.number - const { data: files } = await github.rest.pulls.listFiles({ - owner: owner, - repo: repo, - pull_number: pull_number, - }); + const files = await github.paginate(github.rest.pulls.listFiles, { + owner, + repo, + pull_number, + per_page: 100, + }) const onlyDeletes = files.length > 0 && files.every(f => f.status === 'removed') - const isEmptyCommit = !files.length + const onlyDeletesLines = + files.some(file => file.deletions > 0) && + files.every(file => file.additions === 0) + const isEmptyCommit = !files.length const touchesTooMany = files.length > 10 const isBlankLineEdit = files.length > 0 && files.every(file => { const changedLines = (file.patch || '') @@ -47,19 +51,34 @@ jobs: const onlyRenames = files.length > 0 && files.every(f => f.status === 'renamed') // Close the PR and add the invalid label - if (onlyDeletes || isEmptyCommit || touchesTooMany || isBlankLineEdit || onlyRenames) { - await github.rest.issues.update({ - owner: owner, - repo: repo, + if ( + onlyDeletesLines || + onlyDeletes || + isEmptyCommit || + touchesTooMany || + isBlankLineEdit || + onlyRenames + ) { + await github.rest.issues.addLabels({ + owner, + repo, issue_number: pull_number, labels: ['invalid'], - }); + }) // Comment on the PR await github.rest.issues.createComment({ - owner: owner, - repo: repo, + owner, + repo, issue_number: pull_number, - body: `This pull request may have been opened accidentally. I'm going to close it now, but feel free to check out our [contribution guidelines](https://docs.github.com/en/contributing), or raise an issue.`, - }); + body: onlyDeletesLines + ? `This pull request only removes existing content. Before submitting a content-removal pull request, please [open an issue](https://github.com/github/docs/issues/new/choose) explaining the proposed removal and wait for approval from the GitHub Docs team. Once the change has been approved, you can open a new pull request and link it to the issue.` + : `This pull request may have been opened accidentally. I'm going to close it now, but feel free to check out our [contribution guidelines](https://docs.github.com/en/contributing), or raise an issue.`, + }) + + if (onlyDeletesLines) { + core.setFailed( + 'This pull request only deletes lines. An approved issue is required first.', + ) + } } diff --git a/.github/workflows/move-existing-issues-to-the-correct-repo.yml b/.github/workflows/move-existing-issues-to-the-correct-repo.yml deleted file mode 100644 index 12de61fa20c1..000000000000 --- a/.github/workflows/move-existing-issues-to-the-correct-repo.yml +++ /dev/null @@ -1,80 +0,0 @@ -name: Move existing issues to correct docs repo - -# **What it does**: Move all existing issues to the correct repo -# **Why we have it**: We don't want engineering or content issues in the docs-internal repo -# **Who does it impact**: GitHub staff. - -on: - workflow_dispatch: - -permissions: - contents: read - -jobs: - transfer_issues: - runs-on: ubuntu-latest - if: github.repository == 'github/docs-internal' - steps: - - id: move_to_correct_repo - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 - env: - TEAM_ENGINEERING_REPO: ${{ secrets.TEAM_ENGINEERING_REPO }} - TEAM_CONTENT_REPO: ${{ secrets.TEAM_CONTENT_REPO }} - with: - github-token: ${{ secrets.DOCS_BOT_PAT_BASE }} - script: | - const owner = 'github' - const originalRepo = 'docs-internal' - let correctRepo = process.env.TEAM_ENGINEERING_REPO - - const correctRepoObject = await github.rest.repos.get({ - owner: owner, - repo: correctRepo - }) - - const allIssues = await github.paginate(github.rest.issues.listForRepo, { - owner: owner, - repo: originalRepo, - per_page: 100, - labels: ['engineering'] - }) - - for (const issue of allIssues) { - // Extra redundancy with this additional check to be safe - if (issue.labels.find(label => label.name === 'engineering')) { - // Transfer the issue to the correct repo - const issueNodeId = issue.node_id - const correctRepositoryNodeId = correctRepoObject.data.node_id - console.log(`Issue GraphQL Node ID: ${issueNodeId}`) - console.log(`Repository GraphQL Node ID: ${correctRepositoryNodeId}`) - - const mutation = `mutation ($id: ID!, $repositoryId: ID!) { - transferIssue(input: { - issueId: $id, - repositoryId: $repositoryId - }) { - issue { - url, - number - } - } - }` - - const variables = { - id: issueNodeId, - repositoryId: correctRepositoryNodeId - } - - const graph = await github.graphql(mutation, variables) - console.log('GraphQL mutation result:\n' + JSON.stringify(graph)) - - // Add the same labels to the new issue - const newIssueNumber = graph.transferIssue.issue.number - await github.rest.issues.addLabels({ - owner: owner, - repo: correctRepo, - issue_number: newIssueNumber, - labels: issue.labels.map(label => label.name), - }) - } - } diff --git a/.github/workflows/reviewers-docs-engineering.yml b/.github/workflows/reviewers-docs-engineering.yml index 422139ef62d4..cb5e3527ea6f 100644 --- a/.github/workflows/reviewers-docs-engineering.yml +++ b/.github/workflows/reviewers-docs-engineering.yml @@ -54,11 +54,22 @@ jobs: # These are usually cross-platform `npm install` churn from contributors # editing content. We comment with reset instructions instead of pulling in # docs-engineering for review. + # + # Dependabot is exempt. Its security updates for transitive dependencies + # change only the lockfile, because the dependency is not in package.json. + # Those PRs are intentional, so the reset instructions are wrong and + # suppressing the review request leaves them with no reviewer at all. - name: Detect lockfile-only churn id: detect env: GH_TOKEN: ${{ secrets.DOCS_BOT_PAT_BASE }} + PR_AUTHOR: ${{ github.event.pull_request.user.login }} run: | + if [ "$PR_AUTHOR" = "dependabot[bot]" ]; then + echo "Author is Dependabot; skipping lockfile churn detection." + echo "lockfile_only=false" >> "$GITHUB_OUTPUT" + exit 0 + fi changed=$(gh pr diff "$PR" --name-only) echo "Changed files:" echo "$changed" diff --git a/.github/workflows/sync-graphql.yml b/.github/workflows/sync-graphql.yml index 57c77018ade1..e94136afd1fb 100644 --- a/.github/workflows/sync-graphql.yml +++ b/.github/workflows/sync-graphql.yml @@ -95,7 +95,7 @@ jobs: with: slack_token: ${{ secrets.SLACK_DOCS_BOT_TOKEN }} message: | - ⚠️ GraphQL Sync found ${{ needs.update_graphql_files.outputs.ignored-count }} ignored change types: ${{ needs.update_graphql_files.outputs.ignored-types }} + :graphql: GraphQL Sync found ${{ needs.update_graphql_files.outputs.ignored-count }} ignored change types: ${{ needs.update_graphql_files.outputs.ignored-types }} These change types are not in CHANGES_TO_REPORT and were silently ignored. Consider reviewing if they should be added to the changelog. diff --git a/.github/workflows/sync-sdk-docs.yml b/.github/workflows/sync-sdk-docs.yml index b8d56344aaca..82a1b2d3a1b4 100644 --- a/.github/workflows/sync-sdk-docs.yml +++ b/.github/workflows/sync-sdk-docs.yml @@ -24,6 +24,7 @@ on: types: [opened, synchronize, reopened] paths: - '.github/workflows/sync-sdk-docs.yml' + - 'content/copilot/get-started/sdk-quickstart.md' - 'src/workflows/sync-sdk-docs/**' concurrency: @@ -77,6 +78,10 @@ jobs: - name: Copy SDK docs run: | mkdir -p "$SDK_DOCS_TARGET" + # Pages relocated out of this tree into hand-authored content are not + # excluded here — they are removed by the RELOCATED_PAGES map in + # src/workflows/sync-sdk-docs/normalize-sdk-docs.ts, which also + # repoints inbound links at their new URLs. rsync -av --exclude='.validation/' --exclude='developer-docs/' "$SDK_TMP/docs/" "$SDK_DOCS_TARGET/" echo "Copied $(find "$SDK_DOCS_TARGET" -name '*.md' | wc -l | tr -d ' ') markdown files" diff --git a/assets/images/help/code-quality/assign-findings-bulk.png b/assets/images/help/code-quality/assign-findings-bulk.png new file mode 100644 index 000000000000..6b12a3972ce5 Binary files /dev/null and b/assets/images/help/code-quality/assign-findings-bulk.png differ diff --git a/assets/images/help/copilot/code-review/automatic-code-review.png b/assets/images/help/copilot/code-review/automatic-code-review.png deleted file mode 100644 index 49a5283cf131..000000000000 Binary files a/assets/images/help/copilot/code-review/automatic-code-review.png and /dev/null differ diff --git a/assets/images/help/copilot/spark-data-access.png b/assets/images/help/copilot/spark-data-access.png deleted file mode 100644 index cbb288acd318..000000000000 Binary files a/assets/images/help/copilot/spark-data-access.png and /dev/null differ diff --git a/assets/images/help/copilot/spark-fix-all-errors.png b/assets/images/help/copilot/spark-fix-all-errors.png deleted file mode 100644 index 7bbd4ebfd403..000000000000 Binary files a/assets/images/help/copilot/spark-fix-all-errors.png and /dev/null differ diff --git a/assets/images/help/copilot/spark-github-user-visibility.png b/assets/images/help/copilot/spark-github-user-visibility.png deleted file mode 100644 index d88f06f9b00b..000000000000 Binary files a/assets/images/help/copilot/spark-github-user-visibility.png and /dev/null differ diff --git a/assets/images/help/pull_requests/suggestion-block.png b/assets/images/help/pull_requests/suggestion-block.png index 02c9ba416432..9585f56aa486 100644 Binary files a/assets/images/help/pull_requests/suggestion-block.png and b/assets/images/help/pull_requests/suggestion-block.png differ diff --git a/assets/images/help/pull_requests/view-full-review-view-changes.png b/assets/images/help/pull_requests/view-full-review-view-changes.png index b5d456efb9df..66eb96881009 100644 Binary files a/assets/images/help/pull_requests/view-full-review-view-changes.png and b/assets/images/help/pull_requests/view-full-review-view-changes.png differ diff --git a/assets/images/site/footer-divider.png b/assets/images/site/footer-divider.png new file mode 100644 index 000000000000..53fa765c696b Binary files /dev/null and b/assets/images/site/footer-divider.png differ diff --git a/assets/images/site/footer-divider.webp b/assets/images/site/footer-divider.webp new file mode 100644 index 000000000000..fc833eec8078 Binary files /dev/null and b/assets/images/site/footer-divider.webp differ diff --git a/content/actions/concepts/workflows-and-actions/dependency-caching.md b/content/actions/concepts/workflows-and-actions/dependency-caching.md index 6a51f5ce17d0..67ce1564c564 100644 --- a/content/actions/concepts/workflows-and-actions/dependency-caching.md +++ b/content/actions/concepts/workflows-and-actions/dependency-caching.md @@ -31,9 +31,9 @@ For more information on workflow run artifacts, see [AUTOTITLE](/actions/tutoria Caches are shared based on the branch or tag a workflow run uses, not on the identity of the workflow or job. See [AUTOTITLE](/actions/reference/workflows-and-actions/events-that-trigger-workflows) and the `GITHUB_REF` for the branch used for various workflow triggers. Any run that can read a cache restores its contents as-is, so you should treat restored files as untrusted input and never store secrets or other sensitive data in a cache. -Untrusted workflows can read sensitive cache contents, such as when a `pull_request` from a fork restores a cache. Poisoned caches can lead to code execution in trusted workflows. To limit the risk of cache poisoning, {% data variables.product.github %} gives workflows that run in response to low-trust triggers read-only access to caches in the default branch's scope. +Untrusted workflows can read sensitive cache contents, such as when a `pull_request` from a fork restores a cache. Poisoned caches can lead to code execution in trusted workflows. To limit the risk of cache poisoning, {% data variables.product.github %} gives workflows that run in response to low-trust triggers read-only access to caches in the default branch's scope.{% ifversion actions-cache-mode %} A workflow or job can override this read-only restriction by explicitly declaring a write-capable `cache-mode`, which reintroduces the cache-poisoning risk for that workflow.{% endif %} -For details on cache scope, access restrictions, and best practices for using caches securely, see [AUTOTITLE](/actions/reference/workflows-and-actions/dependency-caching#cache-access-for-low-trust-workflow-triggers). +For the trusted-versus-low-trust trigger breakdown and default cache behavior, see [AUTOTITLE](/actions/reference/workflows-and-actions/dependency-caching#cache-access-for-low-trust-workflow-triggers). For cache-specific security guidance, see [AUTOTITLE](/actions/reference/workflows-and-actions/dependency-caching#best-practices-for-using-caches-securely). ## Next steps diff --git a/content/actions/how-tos/reuse-automations/reuse-workflows.md b/content/actions/how-tos/reuse-automations/reuse-workflows.md index 6aa756020def..2049cbdef4a0 100644 --- a/content/actions/how-tos/reuse-automations/reuse-workflows.md +++ b/content/actions/how-tos/reuse-automations/reuse-workflows.md @@ -303,6 +303,22 @@ jobs: For more information on using job outputs, see [AUTOTITLE](/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idoutputs). If you want to share something other than a variable (e.g. a build artifact) between workflows, see [AUTOTITLE](/actions/tutorials/store-and-share-data). +{% ifversion actions-cache-mode %} + +## Controlling cache access in reusable workflows + +You can use the `cache-mode` key to grant a reusable workflow the least amount of {% data variables.product.prodname_actions %} cache access it needs. The value can be `read`, `write`, `write-only`, or `none`. If you omit `cache-mode`, a `read` or `write` default is used based on the trigger type. For the full syntax and the meaning of each value, see [AUTOTITLE](/actions/reference/workflows-and-actions/workflow-syntax#cache-mode). For trigger-dependent defaults, see [AUTOTITLE](/actions/reference/dependency-caching-reference#defaults). + +When a caller workflow calls a reusable workflow, `cache-mode` propagates to the called workflow. An explicit `cache-mode` on the calling job, or inherited from the caller workflow, limits the cache access the called workflow can request. + +If the calling job neither sets nor inherits an explicit `cache-mode`, the called workflow can explicitly request `write` even when the caller's low-trust trigger defaults to `read`. To cap a called workflow at read-only access, set `cache-mode: read` on the job that calls it. + +If a called workflow declares a `cache-mode` that requests access beyond this explicit limit, the run does not start and {% data variables.product.github %} reports a validation error. For example, a caller that allows at most `read` cannot call a workflow that declares `write`. Because `read` grants restore access and `write-only` grants save access, the two are non-overlapping capabilities, so a mismatch between them is also an over-request. For example, a `write-only` caller cannot call a workflow that declares `read`. + +For more information about cache access and the four modes, see [AUTOTITLE](/actions/reference/dependency-caching-reference#controlling-cache-access-with-cache-mode). + +{% endif %} + ## Monitoring which workflows are being used {% ifversion fpt or ghes %} diff --git a/content/actions/reference/security/securely-using-pull_request_target.md b/content/actions/reference/security/securely-using-pull_request_target.md index 1d03625565e1..c9ebc5ae8ce6 100644 --- a/content/actions/reference/security/securely-using-pull_request_target.md +++ b/content/actions/reference/security/securely-using-pull_request_target.md @@ -67,7 +67,7 @@ If you have confirmed you need `pull_request_target`, apply these controls to li * **Restrict secrets.** Confirm that the permissions set on the `GITHUB_TOKEN` have the least privileges and that only the necessary repository and organization secrets are used for the workflow. For more information, see [AUTOTITLE](/actions/tutorials/authenticate-with-github_token#modifying-the-permissions-for-the-github_token). -* **Understand the impact to caching.** To reduce the risk of cache poisoning, workflows triggered by `pull_request_target` have read-only access to the cache in the default branch's scope. These workflows can restore existing cache entries but cannot create or overwrite them, so they cannot affect the execution of other, unrelated, workflows through the shared cache. If such a workflow attempts to save a cache, the save fails but the step and the job continue, and the failure is reported as a warning in the workflow log. If your workflow needs to populate the cache, save it from a workflow that runs on a trusted trigger such as `push`. For more information, see [AUTOTITLE](/actions/reference/workflows-and-actions/dependency-caching#cache-access-for-low-trust-workflow-triggers). +* **Understand the impact to caching.** To reduce the risk of cache poisoning, workflows triggered by `pull_request_target` have read-only access to the cache in the default branch's scope. These workflows can restore existing cache entries but cannot create or overwrite them, so they cannot affect the execution of other, unrelated, workflows through the shared cache. If such a workflow attempts to save a cache, the save fails but the step and the job continue, and the failure is reported as a warning in the workflow log. If your workflow needs to populate the cache, save it from a workflow that runs on a trusted trigger such as `push`.{% ifversion actions-cache-mode %} A workflow or job can opt out of this read-only restriction by explicitly declaring a write-capable `cache-mode`, but doing so on a `pull_request_target` workflow reintroduces the cache-poisoning risk this restriction is designed to prevent.{% endif %} For more information, see [AUTOTITLE](/actions/reference/workflows-and-actions/dependency-caching#cache-access-for-low-trust-workflow-triggers). * **Ensure the underlying compute is isolated and ephemeral.** If self-hosted runners are used, you must confirm that the runner environment is properly restricted from internal resources and is not reused across {% data variables.product.prodname_actions %} runs. For more information, see [AUTOTITLE](/actions/reference/security/secure-use#hardening-for-self-hosted-runners). diff --git a/content/actions/reference/workflows-and-actions/dependency-caching.md b/content/actions/reference/workflows-and-actions/dependency-caching.md index fd89ca7b05e6..1ac52fcc12a0 100644 --- a/content/actions/reference/workflows-and-actions/dependency-caching.md +++ b/content/actions/reference/workflows-and-actions/dependency-caching.md @@ -274,7 +274,7 @@ To reduce this risk, only these workflow triggers can create or overwrite caches * `page_build` * `schedule` -Runs triggered by any other event that resolves to the default branch are given read-only access to caches in the default branch's scope. These runs can restore existing caches but cannot create or overwrite them. This includes triggers whose payload or initiating actor can be influenced by someone outside the repository, such as `pull_request_target`, `issue_comment`, and `workflow_run`. +Runs triggered by any other event that resolves to the default branch are given read-only access to caches in the default branch's scope. These runs can restore existing caches but cannot create or overwrite them. This includes triggers whose payload or initiating actor can be influenced by someone outside the repository, such as `pull_request_target`, `issue_comment`, and `workflow_run`.{% ifversion actions-cache-mode %} A repository can opt out of this restriction for a specific workflow or job by explicitly declaring a write-capable `cache-mode`. See [Bypassing the default untrusted-trigger cache restriction](#bypassing-the-default-untrusted-trigger-cache-restriction).{% endif %} The `pull_request` event is not affected. Caches created by a `pull_request` run are already scoped to the merge ref (`refs/pull/.../merge`) and cannot be written to the default branch's scope. For more information, see [Restrictions for accessing a cache](#restrictions-for-accessing-a-cache). @@ -282,6 +282,61 @@ When a run with read-only cache access tries to save a cache, the save fails but * To retain the performance benefits of caching on the default branch scope, ensure there is a trusted workflow that keeps the cache updated, for example a CI build triggered by a `push` to the default branch. Those cache entries can then be restored by workflows triggered by low-trust events such as `pull_request_target`. * In low-trust workflows, switch to a restore-only cache operation such as `actions/cache/restore` to make the intended cache usage clear and avoid the warning in the workflow run logs. +{% ifversion actions-cache-mode %} + +## Controlling cache access with `cache-mode` + +Use the `cache-mode` workflow key to grant jobs the least amount of cache access they need. You can set `cache-mode` at the workflow level, at the job level, or both. A job-level value overrides the workflow-level value for that job. For the syntax, see [AUTOTITLE](/actions/reference/workflows-and-actions/workflow-syntax#cache-mode). + +`cache-mode` controls the cache access granted to the job's token, and it is enforced with scoped cache tokens. The key accepts the following values. + +| Value | Restore caches | Save caches | +| ----- | -------------- | ----------- | +| `read` | Yes | No | +| `write` | Yes | Yes | +| `write-only` | No | Yes | +| `none` | No | No | + +If you omit `cache-mode`, a `read` or `write` default is used based on the trigger type. See [Defaults](#defaults) and [Bypassing the default untrusted-trigger cache restriction](#bypassing-the-default-untrusted-trigger-cache-restriction). + +### Defaults + +| Configuration | Trigger type | Effective access | +| --- | --- | --- | +| `cache-mode` omitted | Trusted | `write` | +| `cache-mode` omitted | Low-trust | `read` | +| `cache-mode: write` | Trusted or low-trust | `write` | +| `cache-mode: write-only` | Trusted or low-trust | `write-only` | +| `cache-mode: read` | Trusted or low-trust | `read` | +| `cache-mode: none` | Trusted or low-trust | `none` | + +For the trusted-versus-low-trust trigger breakdown, see [Cache access for low-trust workflow triggers](#cache-access-for-low-trust-workflow-triggers). + +The runner exposes the effective mode in the `ACTIONS_CACHE_MODE` environment variable, and the `actions/cache` action and the `@actions/cache` toolkit honor it. Restore is skipped when the mode does not allow reads (`none` or `write-only`), and save is skipped when the mode does not allow writes (`none` or `read`). When a cache operation is skipped because of the mode, the action logs an informational message and the step and run continue without failing. A skipped restore is treated as a cache miss; a skipped save is simply not performed. + +### Cache access in reusable workflows + +`cache-mode` propagates from a caller workflow to the reusable workflows it calls. An explicit `cache-mode` on the calling job, or inherited from the caller workflow, limits the cache access the called workflow can request. + +If the calling job neither sets nor inherits an explicit `cache-mode`, the called workflow can explicitly request `write` even when the caller's low-trust trigger defaults to `read`. To cap a called workflow at read-only access, set `cache-mode: read` on the job that calls it. + +If a called workflow declares a `cache-mode` that requests access beyond this explicit limit, the run does not start and {% data variables.product.github %} reports a validation error. For example, a caller that allows at most `read` cannot call a workflow that declares `write`. Because `read` and `write-only` grant different, non-overlapping capabilities, a mismatch between them is also an over-request. For example, a `write-only` caller cannot call a workflow that declares `read`. For more information about calling reusable workflows, see [AUTOTITLE](/actions/how-tos/reuse-automations/reuse-workflows#controlling-cache-access-in-reusable-workflows). + +### Bypassing the default untrusted-trigger cache restriction + +A job or workflow that explicitly declares `cache-mode: write` or `cache-mode: write-only` overrides the secure read-only default that would otherwise apply to a run triggered by a low-trust event. See [Cache access for low-trust workflow triggers](#cache-access-for-low-trust-workflow-triggers). + +> [!WARNING] +> Explicitly declaring `cache-mode: write` or `cache-mode: write-only` reintroduces the risk of cache-poisoning that the default untrusted-trigger read-only permissions are designed to prevent. If a workflow that runs on an untrusted trigger, such as `pull_request_target`, `issue_comment`, or `workflow_run`, declares a write-capable `cache-mode`, vulnerabilities or untrusted code execution in the workflow could then be used to save a cache. A more privileged workflow that later restores that cache could then execute attacker-controlled content. + +Before declaring a write-capable `cache-mode` on a workflow with a low-trust trigger, consider whether a narrower mitigation meets your needs instead: + * Keep the secure cache access restriction in effect by explicitly declaring `cache-mode: read` on the job, and have a trusted, `push`-triggered workflow maintain the cache instead. See [Cache access for low-trust workflow triggers](#cache-access-for-low-trust-workflow-triggers). + * Only declare a write-capable `cache-mode` on low-trust triggers for jobs that don't process untrusted input before writing to the cache. This includes code checked out from untrusted sources such as forks and pull requests. + * If you do override the secure default, treat the resulting cache as untrusted in every workflow that restores it, and avoid restoring it into a run that has write access to secrets or elevated permissions. + * Follow the guidance on [best practices for using caches securely](#best-practices-for-using-caches-securely). + +{% endif %} + ## Best practices for using caches securely Cache contents are not signed or verified, and any workflow run that can read a cache may extract its contents. Extracted caches may modify files that are subsequently executed in a workflow run, leading to malicious code execution. Follow these practices to reduce the security risk of using caches. diff --git a/content/actions/reference/workflows-and-actions/reusing-workflow-configurations.md b/content/actions/reference/workflows-and-actions/reusing-workflow-configurations.md index e86273424c6e..0210f05b1956 100644 --- a/content/actions/reference/workflows-and-actions/reusing-workflow-configurations.md +++ b/content/actions/reference/workflows-and-actions/reusing-workflow-configurations.md @@ -81,6 +81,9 @@ When you call a reusable workflow, you can only use the following keywords in th * [`jobs..if`](/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idif) * [`jobs..concurrency`](/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idconcurrency) * [`jobs..permissions`](/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idpermissions) +{%- ifversion actions-cache-mode %} +* [`jobs..cache-mode`](/actions/reference/workflows-and-actions/workflow-syntax#jobsjob_idcache-mode) +{%- endif %} > [!NOTE] > diff --git a/content/actions/reference/workflows-and-actions/workflow-syntax.md b/content/actions/reference/workflows-and-actions/workflow-syntax.md index 51a336d56b02..b7ffd6dab7c9 100644 --- a/content/actions/reference/workflows-and-actions/workflow-syntax.md +++ b/content/actions/reference/workflows-and-actions/workflow-syntax.md @@ -338,6 +338,46 @@ env: {% data reusables.actions.jobs.section-using-concurrency %} +{% ifversion actions-cache-mode %} + +## `cache-mode` + +Use `cache-mode` to control the level of {% data variables.product.prodname_actions %} cache access that jobs in the workflow are granted. Setting `cache-mode` at the top level applies to every job in the workflow, unless a job overrides it with [`jobs..cache-mode`](#jobsjob_idcache-mode). + +Access is enforced with scoped cache tokens, so a job cannot restore or save caches beyond the mode it is granted. `cache-mode` accepts the following values. + +| Value | Restore caches | Save caches | +| ----- | -------------- | ----------- | +| `read` | Yes | No | +| `write` | Yes | Yes | +| `write-only` | No | Yes | +| `none` | No | No | + +If you omit `cache-mode`, a `read` or `write` default is used based on the trigger type. For trigger-dependent effective defaults, see [AUTOTITLE](/actions/reference/dependency-caching-reference#defaults). + +> [!WARNING] +> Explicitly declaring `cache-mode: write` or `cache-mode: write-only` on low-trust triggers can bypass the secure default read-only cache restriction and reintroduce cache-poisoning risk. For guidance and mitigations, see [AUTOTITLE](/actions/reference/dependency-caching-reference#bypassing-the-default-untrusted-trigger-cache-restriction). + +When a cache operation is not permitted by the effective mode, the cache step logs an informational message and continues. The job and workflow do not fail. A skipped restore is treated as a cache miss; a skipped save is simply not performed. For more information, see [AUTOTITLE](/actions/reference/dependency-caching-reference#controlling-cache-access-with-cache-mode). + +### Example of `cache-mode` + +```yaml +cache-mode: read + +jobs: + build: + runs-on: ubuntu-latest + steps: + - uses: {% data reusables.actions.action-checkout %} + - uses: {% data reusables.actions.action-cache %} + with: + path: ~/.npm + key: {% raw %}npm-${{ hashFiles('**/package-lock.json') }}{% endraw %} +``` + +{% endif %} + ## `jobs` {% data reusables.actions.jobs.section-using-jobs-in-a-workflow %} @@ -408,6 +448,33 @@ env: {% data reusables.actions.jobs.section-using-concurrency-jobs %} +{% ifversion actions-cache-mode %} + +## `jobs..cache-mode` + +Use `jobs..cache-mode` to set the level of {% data variables.product.prodname_actions %} cache access for a single job. A value set here overrides any workflow-level [`cache-mode`](#cache-mode) for this job only. + +The accepted values are `read`, `write`, `write-only`, and `none`, with the same meanings as the top-level key. If neither the job nor the workflow sets `cache-mode`, a trigger-based default applies. For more information about each value, see [`cache-mode`](#cache-mode) and [AUTOTITLE](/actions/reference/dependency-caching-reference#defaults). + +> [!WARNING] +> Explicitly declaring `cache-mode: write` or `cache-mode: write-only` on low-trust triggers can bypass the secure default read-only cache restriction and reintroduce cache-poisoning risk. For guidance and mitigations, see [AUTOTITLE](/actions/reference/dependency-caching-reference#bypassing-the-default-untrusted-trigger-cache-restriction). + +You can also set `cache-mode` on a job that calls a reusable workflow to limit the cache access granted to the called workflow. For more information, see [AUTOTITLE](/actions/reference/workflows-and-actions/reusing-workflow-configurations#supported-keywords-for-jobs-that-call-a-reusable-workflow) and [AUTOTITLE](/actions/how-tos/reuse-automations/reuse-workflows#controlling-cache-access-in-reusable-workflows). + +### Example of `jobs..cache-mode` + +```yaml +jobs: + build: + runs-on: ubuntu-latest + cache-mode: write + test: + runs-on: ubuntu-latest + cache-mode: read +``` + +{% endif %} + ## `jobs..outputs` {% data reusables.actions.jobs.section-defining-outputs-for-jobs %} @@ -1572,5 +1639,3 @@ Path patterns must match the whole path, and start from the repository's root. | `'**/migrate-*.sql'` | A file with the prefix `migrate-` and suffix `.sql` anywhere in the repository. | `migrate-10909.sql`

`db/migrate-v1.0.sql`

`db/sept/migrate-v1.sql` | | `'*.md'`

`'!README.md'` | Using an exclamation mark (`!`) in front of a pattern negates it. When a file matches a pattern and also matches a negative pattern defined later in the file, the file will not be included. | `hello.md`

_Does not match_

`README.md`

`docs/hello.md` | | `'*.md'`

`'!README.md'`

`README*` | Patterns are checked sequentially. A pattern that negates a previous pattern will re-include file paths. | `hello.md`

`README.md`

`README.doc` | - - diff --git a/content/admin/data-residency/github-copilot-with-data-residency.md b/content/admin/data-residency/github-copilot-with-data-residency.md index 30803647a14a..69ba523b5429 100644 --- a/content/admin/data-residency/github-copilot-with-data-residency.md +++ b/content/admin/data-residency/github-copilot-with-data-residency.md @@ -70,7 +70,6 @@ The models available for {% data variables.product.prodname_copilot_short %} var * {% data variables.copilot.copilot_claude_opus_5 %} * {% data variables.copilot.copilot_claude_sonnet_5 %} * {% data variables.copilot.copilot_gemini_35_flash %} -* {% data variables.copilot.copilot_mai_code_1_flash %} ## Pricing changes diff --git a/content/authentication/authenticating-with-single-sign-on/authorizing-a-personal-access-token-for-use-with-single-sign-on.md b/content/authentication/authenticating-with-single-sign-on/authorizing-a-personal-access-token-for-use-with-single-sign-on.md index 749f1ee6ea86..4d839af497c4 100644 --- a/content/authentication/authenticating-with-single-sign-on/authorizing-a-personal-access-token-for-use-with-single-sign-on.md +++ b/content/authentication/authenticating-with-single-sign-on/authorizing-a-personal-access-token-for-use-with-single-sign-on.md @@ -19,6 +19,10 @@ You must authorize your {% data variables.product.pat_v1 %} after creation befor {% data reusables.saml.authorized-creds-info %} +Enterprise administrators can use a {% data variables.product.prodname_github_app %} to authorize credentials for multiple organizations. See [AUTOTITLE](/authentication/authenticating-with-single-sign-on/authorizing-credentials-for-single-sign-on-with-a-github-app). + +## Authorizing a {% data variables.product.pat_v1 %} + {% data reusables.user-settings.access_settings %} {% data reusables.user-settings.developer_settings %} {% data reusables.user-settings.personal_access_tokens %} diff --git a/content/authentication/authenticating-with-single-sign-on/authorizing-credentials-for-single-sign-on-with-a-github-app.md b/content/authentication/authenticating-with-single-sign-on/authorizing-credentials-for-single-sign-on-with-a-github-app.md new file mode 100644 index 000000000000..d0c9bcbf30f9 --- /dev/null +++ b/content/authentication/authenticating-with-single-sign-on/authorizing-credentials-for-single-sign-on-with-a-github-app.md @@ -0,0 +1,90 @@ +--- +title: Authorizing credentials for single sign-on with a GitHub App +intro: 'Authorize credentials for multiple organizations by allowing an enterprise-installed {% data variables.product.prodname_github_app %} to manage single sign-on (SSO) authorizations.' +versions: + ghec: '*' +permissions: Enterprise owners and users with the "Manage enterprise credentials" permission +shortTitle: Authorize credentials with an app +category: + - Sign in with SSO or a passkey +--- + +## About authorizing credentials with a {% data variables.product.prodname_github_app %} + +By default, enterprise-installed {% data variables.product.prodname_github_apps %} cannot authorize credentials. To reduce the number of times that enterprise members must authorize the same credential for individual organizations, you can allow an app to authorize existing {% data variables.product.pat_v1_plural %} or verified, user-owned SSH authentication keys. Up to 50 selected organizations are allowed per request. + +To authorize a credential for a single organization without a {% data variables.product.prodname_github_app %}, see [AUTOTITLE](/authentication/authenticating-with-single-sign-on/authorizing-a-personal-access-token-for-use-with-single-sign-on) or [AUTOTITLE](/authentication/authenticating-with-single-sign-on/authorizing-an-ssh-key-for-use-with-single-sign-on). + +## Prerequisites + +Before the app can authorize credentials, the following requirements must be met: + +* The enterprise must use enterprise-level SSO. +* The credential owner must be a member of every organization where the app will authorize the credential. + +## Creating the {% data variables.product.prodname_github_app %} + +1. Register a new app. For instructions, see [AUTOTITLE](/apps/creating-github-apps/registering-a-github-app/registering-a-github-app#registering-a-github-app). The app must: + + * Be owned by the enterprise or an organization in the enterprise. + * Have write access to the "Enterprise credentials" permission. + +1. Note the app's client ID, then generate and securely store a private key. See [AUTOTITLE](/apps/creating-github-apps/authenticating-with-a-github-app/managing-private-keys-for-github-apps). +1. Install the app on your enterprise account. See [AUTOTITLE](/apps/using-github-apps/installing-a-github-app-on-your-enterprise). +1. In the URL of the app's installation page, note the installation ID. The ID is the string of numbers at the end of the `/enterprises/ENTERPRISE/settings/installations/ID` URL. + +## Allowing a {% data variables.product.prodname_github_app %} to authorize credentials + +{% data reusables.enterprise-accounts.access-enterprise %} +{% data reusables.enterprise-accounts.security-tab %} + +1. Under "Credentials," enable **Allow {% data variables.product.prodname_github_apps %} to authorize credentials**. + +## Generating an installation access token + +The app must use an enterprise installation access token to authenticate its API requests. Organization installation access tokens, user access tokens, and {% data variables.product.pat_generic_plural %} are not supported. + +To generate an installation access token: + +1. Use the app's client ID and private key to generate a JSON Web Token (JWT). See [AUTOTITLE](/apps/creating-github-apps/authenticating-with-a-github-app/generating-a-json-web-token-jwt-for-a-github-app). +1. Use the JWT and enterprise installation ID to create an installation access token. See [AUTOTITLE](/apps/creating-github-apps/authenticating-with-a-github-app/generating-an-installation-access-token-for-a-github-app). + +The installation access token inherits the enterprise permissions granted to the app, cannot be scoped down, and expires after one hour. + +## Finding credential identifiers + +For credentials that are already authorized for an organization in your enterprise, an organization owner can use the REST API to obtain identifiers in bulk. See [AUTOTITLE](/rest/orgs/orgs#list-saml-sso-authorizations-for-an-organization). + +In the response, use `authorized_credential_id` for a {% data variables.product.pat_v1 %}, or `fingerprint` for an SSH key. Do not use `credential_id`, which identifies the credential's authorization for that organization. + +This endpoint does not return credentials that have not been authorized for the organization. To obtain an identifier for another credential, use one of these methods: + +* For a {% data variables.product.pat_v1 %}, open the token from the [token settings](https://github.com/settings/tokens) page. The token ID is the number at the end of the `/settings/tokens/ID` URL. Alternatively, if the token was used for an action recorded in the enterprise audit log, an enterprise owner can find the ID in the event's `token_id` field. The ID is available in the audit log only while an enterprise-visible event authenticated with that token is retained. Share the ID, not the token value. For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens) and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/searching-the-audit-log-for-your-enterprise). +* For an SSH key, find the SHA-256 fingerprint for the verified, user-owned authentication key. For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys). + +## Authorizing a credential + +Use the REST API to authorize the credential for selected organizations. For example: + +```shell +curl --request POST \ + --url "https://api.github.com/enterprises/ENTERPRISE/credential-authorizations" \ + --header "Accept: application/vnd.github+json" \ + --header "Authorization: Bearer INSTALLATION-ACCESS-TOKEN" \ + --header "X-GitHub-Api-Version: 2026-03-10" \ + --data '{ + "credential_id": 12345678, + "credential_type": "classic_pat", + "organizations": ["ORGANIZATION-1", "ORGANIZATION-2"] + }' +``` + +Replace `ENTERPRISE` with the enterprise slug, `INSTALLATION-ACCESS-TOKEN` with the installation access token, and `ORGANIZATION-1` and `ORGANIZATION-2` with the organization slugs. Replace `12345678` with the ID of the {% data variables.product.pat_v1 %}. To authorize an SSH key instead, replace `12345678` with the key's SHA-256 fingerprint and replace `classic_pat` with `ssh_key`. + +For more information, see [AUTOTITLE](/rest/enterprise-admin/credential-authorizations). + +## Disabling credential authorization by {% data variables.product.prodname_github_apps %} + +Disabling the setting prevents apps from creating new credential authorizations. Existing authorizations remain active until they are revoked, the credential is revoked or deleted, or the credential owner loses membership in the organization. + +You can use the same REST API to revoke authorizations that an app created through enterprise delegation. diff --git a/content/authentication/authenticating-with-single-sign-on/index.md b/content/authentication/authenticating-with-single-sign-on/index.md index ec5e85d9e6a8..009aeeb7561c 100644 --- a/content/authentication/authenticating-with-single-sign-on/index.md +++ b/content/authentication/authenticating-with-single-sign-on/index.md @@ -13,6 +13,7 @@ children: - /about-authentication-with-single-sign-on - /authorizing-an-ssh-key-for-use-with-single-sign-on - /authorizing-a-personal-access-token-for-use-with-single-sign-on + - /authorizing-credentials-for-single-sign-on-with-a-github-app - /authorizing-an-app-for-single-sign-on - /viewing-and-managing-your-active-sso-sessions shortTitle: Authenticate with SSO diff --git a/content/billing/concepts/enterprise-billing/ghes-license-files.md b/content/billing/concepts/enterprise-billing/ghes-license-files.md index 324ea215d132..99dddd27c388 100644 --- a/content/billing/concepts/enterprise-billing/ghes-license-files.md +++ b/content/billing/concepts/enterprise-billing/ghes-license-files.md @@ -25,5 +25,5 @@ If your license expires, you won't be able to access {% data variables.product.p * To download your license file, see [AUTOTITLE]({% ifversion fpt %}/enterprise-cloud@latest{% endif %}/billing/how-tos/manage-server-licenses/download-your-license). * To upload your license file to {% data variables.product.prodname_ghe_server %}, see {% ifversion fpt or ghec %}[AUTOTITLE](/enterprise-server@latest/billing/how-tos/manage-server-licenses/upload-new-license) in the {% data variables.product.prodname_ghe_server %} documentation.{% elsif ghes %}[AUTOTITLE](/billing/how-tos/manage-server-licenses/upload-new-license).{% endif %} -* To back up your {% data variables.product.prodname_ghe_server %} instance, see {% ifversion fpt or ghec %}[Configuring backups on your appliance](/enterprise-server@latest/admin/backing-up-and-restoring-your-instance/configuring-backups-on-your-instance) in the {% data variables.product.prodname_ghe_server %} documentation.{% elsif ghes %}[AUTOTITLE](/admin/backing-up-and-restoring-your-instance/configuring-backups-on-your-instance).{% endif %} +* To back up your {% data variables.product.prodname_ghe_server %} instance, see {% ifversion fpt or ghec %}[Configuring backups on your appliance](/enterprise-server@latest/admin/backing-up-and-restoring-your-instance/about-the-backup-service-for-github-enterprise-server) in the {% data variables.product.prodname_ghe_server %} documentation.{% elsif ghes %}[AUTOTITLE](/admin/backing-up-and-restoring-your-instance/configuring-backups-on-your-instance).{% endif %} * If you have questions about renewing your license, contact {% data variables.contact.contact_enterprise_sales %}. diff --git a/content/billing/concepts/product-billing/github-code-quality.md b/content/billing/concepts/product-billing/github-code-quality.md index b1eb5125d9d0..9441ea76e11a 100644 --- a/content/billing/concepts/product-billing/github-code-quality.md +++ b/content/billing/concepts/product-billing/github-code-quality.md @@ -30,7 +30,7 @@ In a detailed usage report, you can identify usage from {% data variables.produc {% data reusables.code-quality.model-usage %} -For more information about how {% data variables.product.prodname_ai_credits_short %} work, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +For more information about how {% data variables.product.prodname_ai_credits_short %} work, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ### Active and unique committers @@ -50,4 +50,4 @@ Users can contribute to multiple repositories or organizations. Usage is measure * [AUTOTITLE](/code-security/tutorials/improve-code-quality/catch-issues-before-merge) * [AUTOTITLE](/billing/concepts/product-billing/github-actions) -* [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises) +* [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing) diff --git a/content/billing/concepts/product-billing/github-copilot-billing.md b/content/billing/concepts/product-billing/github-copilot-billing.md index 71291503596a..272a1361467a 100644 --- a/content/billing/concepts/product-billing/github-copilot-billing.md +++ b/content/billing/concepts/product-billing/github-copilot-billing.md @@ -20,6 +20,6 @@ To understand how {% data variables.product.prodname_ai_credits_short %} work fo For organizations and enterprises, each assigned {% data variables.product.prodname_copilot_short %} license comes with a monthly amount of included {% data variables.product.prodname_ai_credits_short %}, which can be pooled at the billing entity level. -* To understand how {% data variables.product.prodname_ai_credits_short %} work and what happens when your pool is exhausted, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +* To understand how {% data variables.product.prodname_ai_credits_short %} work and what happens when your pool is exhausted, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). * To understand budget controls and how to prevent unexpected charges, see [AUTOTITLE](/copilot/concepts/billing/budgets-for-usage-based-billing). * To compare per-token costs across models and how they translate to {% data variables.product.prodname_ai_credits_short %}, see [AUTOTITLE](/copilot/reference/copilot-billing/models-and-pricing). diff --git a/content/billing/concepts/product-billing/github-copilot-licenses.md b/content/billing/concepts/product-billing/github-copilot-licenses.md index 8caea7c23397..1d848611af4c 100644 --- a/content/billing/concepts/product-billing/github-copilot-licenses.md +++ b/content/billing/concepts/product-billing/github-copilot-licenses.md @@ -15,7 +15,7 @@ category: - Understand product costs --- -Usage of {% data variables.product.prodname_copilot %} is measured through a combination of licenses and {% data variables.product.prodname_ai_credits_short %}. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-individuals) and [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +Usage of {% data variables.product.prodname_copilot %} is measured through a combination of licenses and {% data variables.product.prodname_ai_credits_short %}. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-individuals) and [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## Licenses for {% data variables.product.prodname_copilot_short %} diff --git a/content/billing/how-tos/products/view-productlicense-use.md b/content/billing/how-tos/products/view-productlicense-use.md index 465aa75f2237..2e362dd63311 100644 --- a/content/billing/how-tos/products/view-productlicense-use.md +++ b/content/billing/how-tos/products/view-productlicense-use.md @@ -101,7 +101,7 @@ If you use {% data variables.product.prodname_copilot_short %}, an additional ** * Which models are driving the most spend? * How widespread is adoption in the organizations where we rolled out {% data variables.product.prodname_copilot_short %}? -To understand how {% data variables.product.prodname_ai_credits_short %} are pooled across your enterprise and what the usage data represents, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +To understand how {% data variables.product.prodname_ai_credits_short %} are pooled across your enterprise and what the usage data represents, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). {% endif %} diff --git a/content/billing/how-tos/set-up-budgets.md b/content/billing/how-tos/set-up-budgets.md index 114d9a6f22f7..721fab220bc3 100644 --- a/content/billing/how-tos/set-up-budgets.md +++ b/content/billing/how-tos/set-up-budgets.md @@ -79,7 +79,7 @@ To edit or delete a budget, on the "Budget and alerts" page, click **Edit** or * ## Managing budgets for your organization or enterprise > [!IMPORTANT] -> {% data variables.product.prodname_copilot_short %} usage is now measured in {% data variables.product.prodname_ai_credits_short %} under usage-based billing. Existing premium request budgets have been automatically converted to {% data variables.product.prodname_ai_credit_singular %} budgets. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +> {% data variables.product.prodname_copilot_short %} usage is now measured in {% data variables.product.prodname_ai_credits_short %} under usage-based billing. Existing premium request budgets have been automatically converted to {% data variables.product.prodname_ai_credit_singular %} budgets. See [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). You can set budgets and receive alerts when your usage of a product or license type reaches 75%, 90%, or 100% of a defined budget. For budgets that control metered use of a product, you can also block further use when the budget is exhausted. Each budget has a scope. diff --git a/content/code-security/concepts/code-scanning/ai-powered-security-detections.md b/content/code-security/concepts/code-scanning/ai-powered-security-detections.md index 65aaca6ea2e2..aff4e62a426a 100644 --- a/content/code-security/concepts/code-scanning/ai-powered-security-detections.md +++ b/content/code-security/concepts/code-scanning/ai-powered-security-detections.md @@ -19,7 +19,7 @@ While {% data variables.product.prodname_codeql %} provides high-precision stati During the {% data variables.release-phases.public_preview %}, AI-powered security detections require a {% data variables.product.prodname_GHAS %} license and a {% data variables.product.prodname_copilot %} license. -Usage consumes {% data variables.product.prodname_ai_credits_short %}. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +Usage consumes {% data variables.product.prodname_ai_credits_short %}. See [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## How AI-powered security detections work diff --git a/content/code-security/concepts/supply-chain-security/automatic-dependabot-access-to-github-registries.md b/content/code-security/concepts/supply-chain-security/automatic-dependabot-access-to-github-registries.md new file mode 100644 index 000000000000..e0d739888149 --- /dev/null +++ b/content/code-security/concepts/supply-chain-security/automatic-dependabot-access-to-github-registries.md @@ -0,0 +1,47 @@ +--- +title: Automatic Dependabot access to {% data variables.product.github %}-hosted registries +intro: 'Keep your private dependencies up to date reliably by granting {% data variables.product.prodname_dependabot %} automatic access to {% data variables.product.prodname_registry %} and {% data variables.product.prodname_container_registry %}, so you never need to create or rotate credentials for these registries.' +versions: + feature: org-automatic-registry-access +shortTitle: Automatic registry access +allowTitleToDifferFromFilename: true +contentType: concepts +category: + - Secure your dependencies +--- + +## About automatic access to {% data variables.product.github %}-hosted registries + +{% data variables.product.prodname_dependabot %} can authenticate to private {% data variables.product.prodname_registry %} and {% data variables.product.prodname_container_registry %} packages using the same access grants that {% data variables.product.prodname_actions %} workflows use. If a package has granted your repository **Read** access in the package settings on {% data variables.product.github %}, {% data variables.product.prodname_dependabot %} can access that package automatically. + +This eliminates the need to: + +* Create and manage {% data variables.product.pat_generic_plural %} for registry access +* Manually configure access to {% data variables.product.github %}-hosted registries in your `dependabot.yml` file +* Rotate credentials when tokens expire + +## How automatic access works + +{% data variables.product.prodname_dependabot %} uses its `GITHUB_TOKEN` to request `packages: read` permission when pulling from `*.pkg.github.com` and {% data variables.product.prodname_container_registry_namespace %}. Any package that has granted your repository access through "Manage Actions access" accepts this token, the same way it would for a regular {% data variables.product.prodname_actions %} workflow. + +Automatic {% data variables.product.prodname_registry %} credentials are used only as fallback authentication. Explicit registry credentials and normal registry routing take precedence. + +This works for every {% data variables.product.prodname_registry %} ecosystem that {% data variables.product.prodname_dependabot %} supports. + +## When to use automatic access + +Use automatic access to {% data variables.product.github %}-hosted registries when: + +* Your repositories depend on private packages stored in {% data variables.product.prodname_registry %} or {% data variables.product.prodname_container_registry %}. +* You want to reduce credential management overhead. +* You want to avoid silent update failures caused by expired {% data variables.product.pat_generic_plural %}. + +For third-party registries (such as Artifactory, Azure Artifacts, or Nexus), you can only use the `dependabot.yml` registry configuration or organization-level private registry settings. See [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries). + +## How to enable automatic access + +For each package that {% data variables.product.prodname_dependabot %} needs to read, you need to go to the package's settings page and add the repository that runs {% data variables.product.prodname_dependabot %} with **Read** access. See [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries#configuring-private-github-hosted-registries). + +Once the repository has been granted access, {% data variables.product.prodname_dependabot %} can pull from that package automatically. You do not need to configure the `dependabot.yml` file, and you can remove any existing {% data variables.product.pat_generic %}-based registry entries you previously added for these packages. + +For more information about configuring package access, see [AUTOTITLE](/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility#ensuring-workflow-access-to-your-package). diff --git a/content/code-security/concepts/supply-chain-security/index.md b/content/code-security/concepts/supply-chain-security/index.md index 4ba0f860b15e..56a840696725 100644 --- a/content/code-security/concepts/supply-chain-security/index.md +++ b/content/code-security/concepts/supply-chain-security/index.md @@ -8,7 +8,6 @@ versions: contentType: concepts redirect_from: - /code-security/supply-chain-security/understanding-your-software-supply-chain - - /code-security/concepts/supply-chain-security/automatic-dependabot-access-to-github-registries children: - supply-chain-security - open-source-license-compliance @@ -24,6 +23,7 @@ children: - dependabot-pull-requests - multi-ecosystem-updates - about-the-dependabot-yml-file + - automatic-dependabot-access-to-github-registries - dependabot-auto-triage-rules - dependabot-on-actions - dependabot-job-logs diff --git a/content/code-security/how-tos/maintain-quality-code/fix-backlog-findings.md b/content/code-security/how-tos/maintain-quality-code/fix-backlog-findings.md index ccf36d0052d1..2a51b764a9e8 100644 --- a/content/code-security/how-tos/maintain-quality-code/fix-backlog-findings.md +++ b/content/code-security/how-tos/maintain-quality-code/fix-backlog-findings.md @@ -22,13 +22,19 @@ category: 1. **{% data variables.code-quality.all_findings %}**: {% data variables.product.prodname_code_quality_short %} uses {% data variables.product.prodname_codeql %} to perform a deterministic, rules-based scan of your default branch. Finding are grouped by rule and language, labeled by severity (**Error**, **Warning**, **Note**), and each includes a suggested autofix. - 1. **{% data variables.code-quality.recent_suggestions %}**: {% data variables.product.prodname_code_quality_short %} uses AI-powered analysis to identify quality issues in the files most recently pushed to your default branch, including issues that rule-based analysis may not detect - such as best practices, naming conventions, or design considerations. +1. **{% data variables.code-quality.recent_suggestions %}**: {% data variables.product.prodname_code_quality_short %} uses AI-powered analysis to identify quality issues in the files most recently pushed to your default branch, including issues that rule-based analysis may not detect - such as best practices, naming conventions, or design considerations. - {% data reusables.code-quality.recent-suggestions-preview-note %} +{% data reusables.code-quality.recent-suggestions-preview-note %} - For information on resolving {% data variables.code-quality.recent_suggestions %}, see [AUTOTITLE](/code-security/how-tos/maintain-quality-code/fix-findings-in-recent-merges). +For information on resolving {% data variables.code-quality.recent_suggestions %}, see [AUTOTITLE](/code-security/how-tos/maintain-quality-code/fix-findings-in-recent-merges). -## Resolving a standard finding +## Resolving standard findings + +You can resolve findings individually or assign multiple findings to {% data variables.product.prodname_copilot_short %}. + +{% data reusables.code-quality.agentic-autofix-preview-note %} + +### Resolving a single finding {% data reusables.code-quality.dashboard-navigation-repo %} {% data reusables.code-quality.dashboard-all-findings %} @@ -48,6 +54,22 @@ category: To raise a maintainability or reliability score, you must resolve every finding at the highest severity level currently affecting that metric. See [AUTOTITLE](/code-security/reference/code-quality/metrics-and-ratings). +### Assigning multiple findings to {% data variables.product.prodname_copilot_short %} + +If you have many findings for a rule and want to remediate them efficiently, you can select these findings in bulk and assign them to {% data variables.product.prodname_copilot_short %} for agentic remediation. {% data variables.product.prodname_copilot_short %} will open a pull request with fixes for the selected findings. + +You don't need a {% data variables.product.prodname_copilot_short %} license to use this feature, but your enterprise owner must allow {% data variables.product.prodname_code_quality_short %} for your organization. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-enterprise-security/configure-specific-tools/allow-github-code-quality-in-enterprise). + +For the best results, start with a single rule that has many high-severity findings. This lets you validate the quality of the autofixes on a cohesive set of changes before expanding to other rules. + +{% data reusables.code-quality.dashboard-navigation-repo %} +{% data reusables.code-quality.dashboard-all-findings %} +1. Select the findings you want to remediate. You can select up to 25 findings per page, one page at a time. +1. Click **Assign to {% data variables.product.prodname_copilot_short %}**. + + ![Screenshot of the "Standard findings" view. The "3 of 3 selected" checkbox and the "Dismiss" and "Assign to Copilot" buttons are outlined in orange.](/assets/images/help/code-quality/assign-findings-bulk.png) +1. {% data variables.product.prodname_copilot_short %} will open a pull request with fixes for the selected findings. Review the pull request carefully before merging. + ## Verifying that your code quality scores have updated After your autofix pull requests are merged, return to the "{% data variables.code-quality.all_findings %}" view to confirm that: diff --git a/content/code-security/how-tos/maintain-quality-code/view-and-manage-cost.md b/content/code-security/how-tos/maintain-quality-code/view-and-manage-cost.md index ebefc9d1b463..1450bddd51b7 100644 --- a/content/code-security/how-tos/maintain-quality-code/view-and-manage-cost.md +++ b/content/code-security/how-tos/maintain-quality-code/view-and-manage-cost.md @@ -37,7 +37,7 @@ It's important to understand how {% data variables.product.prodname_code_quality {% data variables.product.prodname_code_quality_short %} usage appears in the **same billing and usage views as your other products**, not in a separate {% data variables.product.prodname_code_quality_short %} meter. Where you look depends on how granular a breakdown you need: * **For a repository- or organization-level breakdown, download the billing usage report** from the "Billing and licensing" tab. This is the only place you can attribute {% data variables.product.prodname_code_quality_short %} spend, including {% data variables.product.prodname_actions %} minutes, down to a specific repository or organization. There's no equivalent view in the UI. See [AUTOTITLE](/billing/how-tos/products/view-productlicense-use). -* **For {% data variables.product.prodname_code_quality_short %}'s {% data variables.product.prodname_ai_credits_short %} usage over time, use the AI usage page** and group it by **Product** using the dropdown at the top right. This separates {% data variables.product.prodname_code_quality_short %} from your other AI products, like {% data variables.product.prodname_copilot_short %}, so you can track its share of the pool. To monitor the pool as a whole instead, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +* **For {% data variables.product.prodname_code_quality_short %}'s {% data variables.product.prodname_ai_credits_short %} usage over time, use the AI usage page** and group it by **Product** using the dropdown at the top right. This separates {% data variables.product.prodname_code_quality_short %} from your other AI products, like {% data variables.product.prodname_copilot_short %}, so you can track its share of the pool. To monitor the pool as a whole instead, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## Monitoring your spend diff --git a/content/code-security/how-tos/manage-security-alerts/manage-code-scanning-alerts/disabling-autofix-for-code-scanning.md b/content/code-security/how-tos/manage-security-alerts/manage-code-scanning-alerts/disabling-autofix-for-code-scanning.md index f6913eab7091..ca913a0ff16e 100644 --- a/content/code-security/how-tos/manage-security-alerts/manage-code-scanning-alerts/disabling-autofix-for-code-scanning.md +++ b/content/code-security/how-tos/manage-security-alerts/manage-code-scanning-alerts/disabling-autofix-for-code-scanning.md @@ -18,7 +18,7 @@ category: Disabling agentic autofix can be done in two ways: 1. By disabling {% data variables.copilot.copilot_autofix_short %} since agentic autofix relies on the same underlying setting. For instructions, see the sections below. -1. By opting repositories out of {% data variables.copilot.copilot_cloud_agent %}. See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management#opting-repositories-out-of-copilot-cloud-agent). +1. By opting repositories out of {% data variables.copilot.copilot_cloud_agent %}. See [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access#opting-repositories-out-of-copilot-cloud-agent). For more information about agentic autofix, see [AUTOTITLE](/code-security/concepts/code-scanning/autofix-for-code-scanning#agentic-autofix). diff --git a/content/code-security/how-tos/secure-at-scale/configure-enterprise-security/configure-specific-tools/allow-github-code-quality-in-enterprise.md b/content/code-security/how-tos/secure-at-scale/configure-enterprise-security/configure-specific-tools/allow-github-code-quality-in-enterprise.md index 15df3a33f611..242bc22b9553 100644 --- a/content/code-security/how-tos/secure-at-scale/configure-enterprise-security/configure-specific-tools/allow-github-code-quality-in-enterprise.md +++ b/content/code-security/how-tos/secure-at-scale/configure-enterprise-security/configure-specific-tools/allow-github-code-quality-in-enterprise.md @@ -17,7 +17,13 @@ category: --- > [!NOTE] -> Previously, {% data variables.product.prodname_AS %} policies also controlled access to {% data variables.product.prodname_code_quality_short %}. Those existing policy settings are automatically applied to the standalone {% data variables.product.prodname_code_quality_short %} policies. +> {% data variables.product.prodname_code_quality_short %} has its own standalone enterprise policies. Access was previously controlled by your {% data variables.product.prodname_AS %} policies, and those existing settings are automatically applied to the new {% data variables.product.prodname_code_quality_short %} policies. + +{% data reusables.code-quality.agentic-autofix-preview-note %} + +When you allow {% data variables.product.prodname_code_quality_short %} for an organization and set the repository admin policy to **Allowed**, repository administrators can enable {% data variables.product.prodname_code_quality_short %} scans and all associated capabilities, including bulk agentic remediation with {% data variables.product.prodname_copilot_short %}. There is no separate policy for agentic remediation. + +If you restrict {% data variables.product.prodname_code_quality_short %}, repository administrators cannot enable scans or use {% data variables.product.prodname_copilot_short %}-powered autofixes for code quality findings. 1. Navigate to your enterprise. For example, from [https://github.com/settings/enterprises](https://github.com/settings/enterprises?ref_product=ghec&ref_type=engagement&ref_style=text). {% data reusables.enterprise-accounts.policies-tab %} diff --git a/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md b/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md index ab79860f3355..b1b956322f1e 100644 --- a/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md +++ b/content/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries.md @@ -87,6 +87,19 @@ Any private registries used by the build must also be accessible to the workflow When you configure access to one or more private registries, {% data variables.product.prodname_dependabot %} can propose pull requests to upgrade a vulnerable dependency or to maintain a dependency, see [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries) and [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-private-registries). +{% ifversion org-automatic-registry-access %} + +### Automatic access to {% data variables.product.github %}-hosted registries + +For packages stored in {% data variables.product.prodname_registry %} and {% data variables.product.prodname_container_registry %}, {% data variables.product.prodname_dependabot %} can authenticate automatically without {% data variables.product.pat_generic_plural %} or `dependabot.yml` registry configuration. + +{% data variables.product.prodname_dependabot %} uses its `GITHUB_TOKEN` to request read access, reusing the same package access grants that {% data variables.product.prodname_actions %} workflows use. + +To enable this, grant the repository **Read** access to each package in the package settings. Once access is granted, {% data variables.product.prodname_dependabot %} can pull from those packages automatically, and you can remove any {% data variables.product.pat_generic %}-based registry entries you previously configured for them. + +See [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries#configuring-private-github-hosted-registries). +{% endif %} + {% ifversion org-private-registry-oidc %} ### Configuring OIDC authentication for a private registry diff --git a/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries.md b/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries.md index 34d0ec696d78..18034935e414 100644 --- a/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries.md +++ b/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries.md @@ -29,8 +29,41 @@ For specific ecosystems, you can configure {% data variables.product.prodname_de {% ifversion dependabot-on-actions-self-hosted %}To allow {% data variables.product.prodname_dependabot %} access to registries hosted privately or restricted to internal networks, configure {% data variables.product.prodname_dependabot %} to run on {% data variables.product.prodname_actions %} self-hosted runners. For more information, see [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-on-self-hosted-runners).{% endif %} +{% ifversion org-automatic-registry-access %} + +## Configuring private {% data variables.product.github %}-hosted registries + +For packages stored in {% data variables.product.prodname_registry %} or {% data variables.product.prodname_container_registry %}, {% data variables.product.prodname_dependabot %} can authenticate automatically using its `GITHUB_TOKEN`. This uses the same "Manage Actions access" grants that {% data variables.product.prodname_actions %} workflows use. No {% data variables.product.pat_generic_plural %} or `dependabot.yml` registry entries are required. + +The `dependabot.yml` registry configuration using {% data variables.product.pat_generic_title_case %}-based registry entries and described in [Configuring private third-party registries](#configuring-private-third-party-registries) is still required for third-party private registries (such as Artifactory, Azure Artifacts, or Nexus). + +To grant {% data variables.product.prodname_dependabot %} access to a private package: + + {% data reusables.package_registry.package-settings-from-org-level %} + {% data reusables.package_registry.package-settings-option %} + {% data reusables.package_registry.package-settings-actions-access %} + 1. {% data reusables.package_registry.package-settings-add-repo %} + Search for the repository where {% data variables.product.prodname_dependabot %} runs, and select it. + {% data reusables.package_registry.package-settings-actions-access-role-repo %} + Select **Read** as the access level. {% data variables.product.prodname_dependabot %} only needs read access to pull packages. + +You need to repeat these steps for each private package that you want {% data variables.product.prodname_dependabot %} to access. + +Once access is granted, {% data variables.product.prodname_dependabot %} can pull from those packages automatically. You can remove any {% data variables.product.pat_generic %}-based registry entries in `dependabot.yml` that you previously configured for these packages. + +> [!NOTE] +> This method works for every {% data variables.product.prodname_registry %} ecosystem that {% data variables.product.prodname_dependabot %} supports, including container images in {% data variables.product.prodname_container_registry %}. + +For more information about how automatic access works, see [AUTOTITLE](/code-security/concepts/supply-chain-security/automatic-dependabot-access-to-github-registries). For more information about package access settings, see [AUTOTITLE](/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility#ensuring-workflow-access-to-your-package). + +## Configuring private third-party registries + +{% else %} + ## Configuring private registries +{% endif %} + {% ifversion org-private-registry %} You can configure {% data variables.product.prodname_dependabot %}'s access to private registries at the org-level. diff --git a/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-private-registries.md b/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-private-registries.md index ae2fd86a0df5..64448b57a25d 100644 --- a/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-private-registries.md +++ b/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-private-registries.md @@ -109,6 +109,12 @@ The snippet below shows a `dependabot.yml` file configuration that uses a token. Docker supports using a username and password for registries. For more information, see `docker-registry` in [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries#docker-registry). +{% ifversion org-automatic-registry-access %} + +For images stored in {% data variables.product.prodname_container_registry %}, you can grant your repository **Read** access in the package settings instead of configuring credentials in your `dependabot.yml` file. See [AUTOTITLE](/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/configure-access-to-private-registries#configuring-private-github-hosted-registries). + +{% endif %} + Snippet of `dependabot.yml` file using a username and password. {% raw %} diff --git a/content/code-security/reference/code-scanning/codeql/codeql-cli-manual/test-run.md b/content/code-security/reference/code-scanning/codeql/codeql-cli-manual/test-run.md index 2e1671ca131f..2a2cfd5e78b4 100644 --- a/content/code-security/reference/code-scanning/codeql/codeql-cli-manual/test-run.md +++ b/content/code-security/reference/code-scanning/codeql/codeql-cli-manual/test-run.md @@ -100,6 +100,14 @@ useful for testing extractors. \[Advanced] Run [codeql dataset check](/code-security/reference/code-scanning/codeql/codeql-cli-manual/dataset-check) over each test database created and report a failure if it detects inconsistencies. This is useful when testing extractors. If the check is (temporarily!) expected to fail for a particular database, place a `DB-CHECK.expected` file in the test directory. +#### `--[no-]reuse-dataset` + +\[Advanced] Attempt to reuse an existing test database from a previous +run. When this option is given, if a `.testproj` directory exists for a +test directory, its dataset will be used instead of extracting a new +database. If no existing database is found, extraction proceeds as +normal. This option implies `--keep-databases`. + #### `--[no-]show-extractor-output` \[Advanced] Show the output from extractor scripts that create test diff --git a/content/code-security/tutorials/improve-code-quality/raise-your-quality-rating.md b/content/code-security/tutorials/improve-code-quality/raise-your-quality-rating.md index e3cb297bf8f9..2a287e8d8477 100644 --- a/content/code-security/tutorials/improve-code-quality/raise-your-quality-rating.md +++ b/content/code-security/tutorials/improve-code-quality/raise-your-quality-rating.md @@ -64,10 +64,13 @@ Once you've picked a rule, decide how to handle each finding: | Assessment | Recommended action | Notes | | --- | --- | --- | -| The finding is legitimate. | Click **Generate fix** and open a pull request | Clicking **Generate fix** consumes {% data variables.product.prodname_ai_credits_short %}. You can add multiple autofixes to the same branch to group remediation work in one pull request. | -| The finding doesn't apply. For example, it's in legacy code, an intentional pattern, or a false positive | Click **Dismiss**. | The finding is considered resolved and removed from the list of open findings. | +| One finding is legitimate. | Click **Assign to {% data variables.product.prodname_copilot_short %}**. | {% data variables.product.prodname_copilot_short %} opens a pull request containing fixes for the selected findings. Assigning to {% data variables.product.prodname_copilot_short %} consumes {% data variables.product.prodname_ai_credits_short %}. | +| Multiple findings for the same rule are legitimate. | Select up to 25 findings on a page, then click **Assign to {% data variables.product.prodname_copilot_short %}**. | {% data variables.product.prodname_copilot_short %} opens a pull request containing fixes for the selected findings. Assigning to {% data variables.product.prodname_copilot_short %} consumes {% data variables.product.prodname_ai_credits_short %}| +| A finding doesn't apply. For example, it's in legacy code, an intentional pattern, or a false positive. | Click **Dismiss**. | The finding is considered resolved and removed from the list of open findings. | -In our example, we generate autofixes for the 40 "Overwritten property" findings and open a pull request. Because they share a single pattern, the fixes are nearly identical. We merge the pull request once CI checks pass. +{% data reusables.code-quality.agentic-autofix-preview-note %} + +In our example, we assign the 40 "Overwritten property" findings to {% data variables.product.prodname_copilot_short %} in batches of up to 25. We review the resulting pull requests and merge them once the CI checks pass. ## Step 4: Communicate impact diff --git a/content/code-security/tutorials/trialing-github-advanced-security/explore-trial-code-scanning.md b/content/code-security/tutorials/trialing-github-advanced-security/explore-trial-code-scanning.md index ef4716eb6691..df2bbf25c838 100644 --- a/content/code-security/tutorials/trialing-github-advanced-security/explore-trial-code-scanning.md +++ b/content/code-security/tutorials/trialing-github-advanced-security/explore-trial-code-scanning.md @@ -90,7 +90,7 @@ This allows you to update the configuration in a single location, but use the wo > > * If you get a {% data variables.product.prodname_copilot_short %} subscription from an organization, you will only be able to participate in the {% data variables.release-phases.public_preview %} on the {% data variables.product.github %} website if an owner of your organization or enterprise has enabled {% data variables.copilot.copilot_code-review_short %}. See [AUTOTITLE](/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-organization/manage-policies#opting-in-to-previews-or-feedback) and [AUTOTITLE](/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-enterprise-policies){% ifversion fpt or ghes %} in the {% data variables.product.prodname_ghe_cloud %} documentation{% endif %}. -By default, users request a review from {% data variables.product.prodname_copilot_short %} in the same way as they do from human reviewers. However, you can update or create an organization-level branch ruleset to automatically add {% data variables.product.prodname_copilot_short %} as a reviewer to all pull requests made to selected branches in all or selected repositories. See [AUTOTITLE](/enterprise-cloud@latest/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review){% ifversion fpt or ghes %} in the {% data variables.product.prodname_ghe_cloud %} documentation{% endif %}. +By default, users request a review from {% data variables.product.prodname_copilot_short %} in the same way as they do from human reviewers. However, you can update or create an organization-level branch ruleset to automatically add {% data variables.product.prodname_copilot_short %} as a reviewer to all pull requests made to selected branches in all or selected repositories. See [AUTOTITLE](/enterprise-cloud@latest/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review){% ifversion fpt or ghes %} in the {% data variables.product.prodname_ghe_cloud %} documentation{% endif %}. {% data variables.product.prodname_copilot_short %} leaves a review comment on each pull request it reviews, without approving the pull request or requesting changes. This ensures that its review is advisory and will not block development work. Similarly, you should not enforce the resolution of suggestions made by {% data variables.product.prodname_copilot_short %} because AI suggestions have known limitations, see [AUTOTITLE](/enterprise-cloud@latest/copilot/responsible-use/agents#7-limitations){% ifversion fpt or ghes %} in the {% data variables.product.prodname_ghe_cloud %} documentation{% endif %}. diff --git a/content/copilot/concepts/about-cloud-and-local-sandboxes.md b/content/copilot/concepts/about-cloud-and-local-sandboxes.md index 7dc5cc5609a0..74df2c81958e 100644 --- a/content/copilot/concepts/about-cloud-and-local-sandboxes.md +++ b/content/copilot/concepts/about-cloud-and-local-sandboxes.md @@ -101,7 +101,7 @@ The sandbox proxy operates differently on each operating system: ### Enterprise policy enforcement -Enterprises can require local sandboxing and enforce its configuration through server-managed, MDM-managed, or file-based managed settings. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). +Enterprises can require local sandboxing and enforce its configuration through server-managed, MDM-managed, or file-based managed settings. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). ## Cloud sandboxing diff --git a/content/copilot/concepts/agents/about-plugins.md b/content/copilot/concepts/agents/about-plugins.md index a3c0480c1078..188c7fde9063 100644 --- a/content/copilot/concepts/agents/about-plugins.md +++ b/content/copilot/concepts/agents/about-plugins.md @@ -25,19 +25,57 @@ Plugins provide a way to distribute custom {% data variables.product.prodname_co ## What plugins contain -A plugin can contain some or all of the following components: +A plugin can contain some or all of the following components. The locations of these components depend on the plugin format: * **Custom agents** — Specialized AI assistants (`*.agent.md` files in `agents/`) * **Skills** — Discrete callable capabilities (skills subdirectories in `skills/`, containing a `SKILL.md` file) * **Hooks** — Event handlers that intercept agent behavior (a `hooks.json` file in the plugin root, or in `hooks/`) -* **MCP server configurations** — Model Context Protocol integrations (a `.mcp.json` file in the plugin root, or an `mcp.json` file in `.github/`) +* **MCP server configurations** — Model Context Protocol integrations * **LSP server configurations** — Language Server Protocol integrations (an `lsp.json` file in the plugin root, or in `.github/`) +## Plugin formats + +{% data variables.product.prodname_copilot_short %} supports two plugin formats: + +* **Agent Plugins 1.0** is a portable format for sharing skills and MCP server configurations across compatible clients. To use this format, set `$schema` in `plugin.json` to `https://agent-plugins.org/schemas/1.0.0/plugin.schema.json`. Skills are discovered from `skills/`, and MCP server configuration is discovered from `mcp.json` at the plugin root. These locations cannot be configured in the manifest. Choose Agent Plugins 1.0 when you want to make skills and MCP servers portable. +* **Legacy {% data variables.product.prodname_copilot_short %} plugins** do not declare the Agent Plugins `$schema`. They use the existing manifest fields and component discovery behavior, including configurable component paths and MCP configuration in `.mcp.json`, `.github/mcp.json`, or the `mcpServers` manifest field. Choose the legacy format when you need configurable component paths or are maintaining an existing {% data variables.product.prodname_copilot_short %}-specific plugin. + +For a new plugin, use Agent Plugins 1.0 unless you require configurable component paths. Use the legacy format primarily for existing legacy plugins. + +Both formats are supported. Adding `$schema` changes how {% data variables.product.prodname_copilot_short %} interprets the manifest and discovers components. Plugins without `$schema` continue to load as legacy plugins. + ## How plugins are structured -A plugin is a directory with a specific structure. At minimum, it contains a `plugin.json` manifest file at the root of the directory. The manifest gives the plugin a name and points to the components the plugin provides. Alongside the manifest, the directory can contain any combination of agents, skills, hooks, MCP server configurations, and LSP server configurations. +A plugin is a directory with a specific structure and a `plugin.json` manifest file. Agent Plugins 1.0 requires the manifest at the plugin root. Legacy plugins support additional manifest locations. The manifest gives the plugin a name and metadata. Depending on the format, it can also point to components. Alongside the manifest, the directory can contain agents, skills, hooks, MCP server configurations, and LSP server configurations. + +### Agent Plugins 1.0 structure + +Agent Plugins 1.0 stores skills and MCP servers in standard locations so compatible clients can discover them. Other components, including agents, hooks, commands, and LSP servers, are client-specific. {% data variables.product.prodname_copilot_short %} reads these components from the `com.github.copilot` directory. Other clients ignore this directory, so the same plugin can combine shared skills and MCP servers with {% data variables.product.prodname_copilot_short %}-specific components. + +An Agent Plugins 1.0 directory can look like this: + +```text +my-plugin/ +├── plugin.json # Required manifest +├── skills/ # Skills (optional) +│ └── deploy/ +│ └── SKILL.md +├── mcp.json # MCP server config (optional) +└── com.github.copilot/ # Copilot components (optional) + ├── agents/ + │ └── helper.agent.md + ├── commands/ + ├── rules/ + ├── hooks/ + │ └── hooks.json + └── lsp.json +``` + +The manifest must include the Agent Plugins 1.0 `$schema`. For supported top-level manifest fields, name requirements, and component locations, see [Agent Plugins 1.0 manifest fields](/copilot/reference/copilot-cli-reference/cli-plugin-reference#agent-plugins-10-manifest-fields). + +### Legacy plugin structure -A typical plugin directory looks like this: +A legacy {% data variables.product.prodname_copilot_short %} plugin directory can look like this: ```text my-plugin/ @@ -86,7 +124,7 @@ How you install a plugin depends on which client you're using: * In {% data variables.copilot.copilot_cloud_agent %}, you install plugins declaratively by adding them to the `enabledPlugins` field of the repository's `.github/copilot/settings.json` file. To install plugins from a marketplace that isn't registered by default, you can also add the marketplace to the `extraKnownMarketplaces` field in the same file. * In the {% data variables.copilot.github_copilot_app %}, click **Customize**, then click **Plugins** to browse marketplaces and install plugins. -Enterprise administrators can define plugin standards that apply to users on the enterprise's {% data variables.product.prodname_copilot_short %} plan, including specifying additional marketplaces and plugins that are automatically installed. See [AUTOTITLE](/copilot/concepts/agents/about-enterprise-plugin-standards). +Enterprise administrators can define plugin standards that apply to users on the enterprise's {% data variables.product.prodname_copilot_short %} plan, including specifying additional marketplaces and plugins that are automatically installed. See [AUTOTITLE](/copilot/concepts/enterprise/plugin-standards). ## How plugin marketplaces work diff --git a/content/copilot/concepts/agents/about-third-party-coding-agents.md b/content/copilot/concepts/agents/about-third-party-coding-agents.md index a54d7c56907e..aee2ce7d7d97 100644 --- a/content/copilot/concepts/agents/about-third-party-coding-agents.md +++ b/content/copilot/concepts/agents/about-third-party-coding-agents.md @@ -79,7 +79,7 @@ Security validation does not require a {% data variables.product.prodname_GHAS % Coding agents consume **{% data variables.product.prodname_actions %} minutes** and **{% data variables.product.prodname_ai_credits_short %}**. Each agent session consumes {% data variables.product.prodname_ai_credits_short %} based on the model used and the number of tokens processed. -Within your included {% data variables.product.prodname_actions %} minutes and {% data variables.product.prodname_ai_credits_short %}, you can use agents without incurring additional costs. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +Within your included {% data variables.product.prodname_actions %} minutes and {% data variables.product.prodname_ai_credits_short %}, you can use agents without incurring additional costs. See [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## Partner agents diff --git a/content/copilot/concepts/agents/cloud-agent/about-cloud-agent.md b/content/copilot/concepts/agents/cloud-agent/about-cloud-agent.md index cad75460f535..066ec9e4ab7d 100644 --- a/content/copilot/concepts/agents/cloud-agent/about-cloud-agent.md +++ b/content/copilot/concepts/agents/cloud-agent/about-cloud-agent.md @@ -108,7 +108,7 @@ If you are a {% data variables.copilot.copilot_for_business %} or {% data variab Repository owners can choose to opt out some or all repositories from {% data variables.copilot.copilot_cloud_agent %}. -See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management). +See [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access). ## AI models for {% data variables.copilot.copilot_cloud_agent %} @@ -132,7 +132,7 @@ The more {% data variables.copilot.copilot_cloud_agent %} knows about the code i {% data variables.copilot.copilot_cloud_agent %} uses {% data variables.product.prodname_actions %} minutes and {% data variables.product.prodname_ai_credits_short %}. The {% data variables.product.prodname_ai_credits_short %} consumed depend on the model used and the number of tokens processed during the session. -Within your included {% data variables.product.prodname_actions %} minutes and {% data variables.product.prodname_ai_credits_short %}, you can use {% data variables.copilot.copilot_cloud_agent %} without incurring additional costs. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +Within your included {% data variables.product.prodname_actions %} minutes and {% data variables.product.prodname_ai_credits_short %}, you can use {% data variables.copilot.copilot_cloud_agent %} without incurring additional costs. See [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). {% data variables.product.prodname_copilot_short %} code review also consumes {% data variables.product.prodname_actions %} minutes on private repositories. See [AUTOTITLE](/billing/concepts/product-billing/github-actions#copilot-code-review-and-github-actions-minutes). diff --git a/content/copilot/concepts/agents/code-review.md b/content/copilot/concepts/agents/code-review.md index c05aab1dc38c..b903de7175cd 100644 --- a/content/copilot/concepts/agents/code-review.md +++ b/content/copilot/concepts/agents/code-review.md @@ -59,7 +59,7 @@ The second policy has these characteristics: When both policies are enabled, users without a {% data variables.product.prodname_copilot_short %} license can request a review from {% data variables.copilot.copilot_code-review_short %} on their pull requests in the organization's repositories. -In repositories where automatic code review is enabled, {% data variables.product.prodname_copilot_short %} automatically reviews all pull requests. This happens regardless of whether the author has a {% data variables.product.prodname_copilot_short %} license. For more information about how to configure automatic code review, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review). +In repositories where automatic code review is enabled, {% data variables.product.prodname_copilot_short %} automatically reviews all pull requests. This happens regardless of whether the author has a {% data variables.product.prodname_copilot_short %} license. For more information about how to configure automatic code review, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review). {% data variables.copilot.copilot_code-review_short %} for users without a license is not available in IDEs. @@ -96,7 +96,7 @@ A review typically consumes an estimated $0.05 USD to $1 USD worth of {% data va Consumption generally increases with pull request size and repository custom instructions, and the ranges may change as models evolve. These estimates do not include {% data variables.product.prodname_actions %} minutes. -Repository and organization administrators can set the default review effort level for automatic code reviews. For configuration steps, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review#customizing-copilot-code-review-1). +Repository and organization administrators can set the default review effort level for automatic code reviews. For configuration steps, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review#customizing-copilot-code-review-1). ## Code review usage @@ -151,7 +151,7 @@ The triggers for automatic code review depend on the configuration settings. * Review draft pull requests: * Pull requests are automatically reviewed while they are still drafts, before you switch them to "Open". -For full instructions, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review). +For full instructions, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review). > [!NOTE] > Unless {% data variables.product.prodname_copilot_short %} has been configured to review each push to a pull request, it will only review a pull request once. If you make changes to the pull request after it has been automatically reviewed and you want {% data variables.product.prodname_copilot_short %} to re-review it, you can request this manually. Click the {% octicon "sync" aria-label="Re-request review" %} button next to {% data variables.product.prodname_copilot_short %}'s name in the **Reviewers** menu. @@ -263,4 +263,4 @@ For more information, see [AUTOTITLE](/copilot/responsible-use/agents). ## Next steps * [AUTOTITLE](/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review) -* [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review) +* [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review) diff --git a/content/copilot/concepts/agents/copilot-cli/about-copilot-cli.md b/content/copilot/concepts/agents/copilot-cli/about-copilot-cli.md index f81a62d9f14b..42bf4227d625 100644 --- a/content/copilot/concepts/agents/copilot-cli/about-copilot-cli.md +++ b/content/copilot/concepts/agents/copilot-cli/about-copilot-cli.md @@ -325,7 +325,7 @@ Alternatively, you can run {% data variables.copilot.copilot_cli_short %} in a v * **MCP servers in {% data variables.product.prodname_copilot_short %}**, which controls whether MCP servers can be used at all by {% data variables.product.prodname_copilot_short %}. * **MCP Registry URL**, which controls which MCP registry {% data variables.product.prodname_copilot_short %} will allow MCP servers to be used from. -For more information about these policies, see [AUTOTITLE](/copilot/concepts/mcp-management#mcp-allowlists). +For more information about these policies, see [AUTOTITLE](/copilot/concepts/enterprise/mcp-management#mcp-allowlists). ## Model usage diff --git a/content/copilot/concepts/agents/copilot-cli/chronicle.md b/content/copilot/concepts/agents/copilot-cli/chronicle.md index 53c83885e5f5..ba1f7eee6889 100644 --- a/content/copilot/concepts/agents/copilot-cli/chronicle.md +++ b/content/copilot/concepts/agents/copilot-cli/chronicle.md @@ -86,7 +86,7 @@ If you use {% data variables.copilot.copilot_cli_short %} in {% data variables.j * **At the start of your day**: Run `/chronicle standup last 3 days` to generate a summary of recent work instead of reconstructing it manually. * **Periodically, to level up**: Run `/chronicle tips` every week or two to discover features and workflow improvements you might be missing. * **When {% data variables.product.prodname_copilot_short %} keeps making the same mistake**: Run `/chronicle improve` to identify the pattern and generate custom instructions that make the agent more effective for your project. -* **To understand your token usage**: Run `/chronicle cost tips` to see where tokens are going and get suggestions for reducing costs. +* **To understand your token usage**: Run `/chronicle cost-tips` to see where tokens are going and get suggestions for reducing costs. * **To search for a specific topic**: Run `/chronicle search KEYWORD` to find sessions containing a specific term or topic. Unlike free-form questions, this searches session content directly for keywords rather than interpreting your query semantically. * **To recall past work**: Ask a free-form question like "Have I worked on anything related to the payments API?" and {% data variables.product.prodname_copilot_short %} will search your history. * **To continue previous work**: Use `copilot --continue` or `copilot --resume` to pick up where you left off. diff --git a/content/copilot/concepts/agents/copilot-in-jetbrains.md b/content/copilot/concepts/agents/copilot-in-jetbrains.md index d1c482c9f270..44f7ee3fefcc 100644 --- a/content/copilot/concepts/agents/copilot-in-jetbrains.md +++ b/content/copilot/concepts/agents/copilot-in-jetbrains.md @@ -34,14 +34,19 @@ There are three ways to use {% data variables.product.prodname_copilot %} in {% The {% data variables.product.prodname_copilot %} plugin for {% data variables.product.prodname_jetbrains_ides %} is the most comprehensive way to use {% data variables.product.prodname_copilot_short %} and is the recommended choice. -The plugin is transitioning from its local agent harness to {% data variables.copilot.copilot_cli_short %} as the default agent harness, which brings faster feature parity and higher-quality results. For more information, see [{% data variables.copilot.copilot_cli_short %} is becoming the default agent harness in {% data variables.product.prodname_copilot %} for JetBrains](https://devblogs.microsoft.com/java/github-copilot-for-jetbrains-is-moving-to-copilot-cli-as-the-default-agent-harness/). For installation instructions, see [AUTOTITLE](/copilot/how-tos/set-up/install-copilot-extension). +The plugin is transitioning from its local agent harness to {% data variables.copilot.copilot_agent_short %} as the default agent harness, which brings faster feature parity and higher-quality results. For installation instructions, see [AUTOTITLE](/copilot/how-tos/set-up/install-copilot-extension). + +The {% data variables.product.prodname_copilot %} plugin provides the following capabilities. -* **Code completion and next edit suggestions**: {% data variables.product.prodname_copilot_short %} suggests completions as you type and proactively predicts your next intended edit. -* **Multiple agent harnesses**: The plugin ships its own agent experience and partners with other agent providers, giving you multiple interaction modes. * **Full model and feature support**: All {% data variables.copilot.copilot_chat_short %} models, code completion modes, and bring-your-own-key features are available as they are released. +* **Code completion and next edit suggestions**: {% data variables.product.prodname_copilot_short %} suggests completions as you type and proactively predicts your next intended edit. +* **Commit message generation**: {% data variables.product.prodname_copilot_short %} inspects your staged changes and generates a clear, conventional commit message. * **Inline chat**: Explain, refactor, document, or generate code directly in the editor gutter, without switching to a separate panel. * **Code review**: {% data variables.product.prodname_copilot_short %} analyzes your changes and surfaces actionable feedback, flagging potential bugs, style violations, and logic issues. -* **Commit message generation**: {% data variables.product.prodname_copilot_short %} inspects your staged changes and generates a clear, conventional commit message. +* **Multiple agent harnesses**: The plugin ships its own agent experience and partners with other agent providers, giving you multiple interaction modes. +* **Sandbox support** ({% data variables.release-phases.public_preview %}): Isolated execution environments for {% data variables.product.prodname_copilot_short %} to safely interact with code, tools, filesystem, and network resources. +* **OpenTelemetry**: Analyze agent sessions and understand agent usage across an enterprise. +* **Enterprise managed settings**: Apply consistent controls for everyone on your enterprise’s {% data variables.product.prodname_copilot_short %} plan, including plugins and MCP management, OpenTelemetry settings, and permission control. ## {% data variables.product.prodname_copilot %} in JetBrains AI Assistant diff --git a/content/copilot/concepts/copilot-usage-metrics/copilot-metrics.md b/content/copilot/concepts/billing-and-usage/copilot-usage-metrics/copilot-metrics.md similarity index 99% rename from content/copilot/concepts/copilot-usage-metrics/copilot-metrics.md rename to content/copilot/concepts/billing-and-usage/copilot-usage-metrics/copilot-metrics.md index 91c0b428dfe1..884c6d64b24f 100644 --- a/content/copilot/concepts/copilot-usage-metrics/copilot-metrics.md +++ b/content/copilot/concepts/billing-and-usage/copilot-usage-metrics/copilot-metrics.md @@ -14,6 +14,7 @@ redirect_from: - /early-access/copilot-metrics/dashboards/about-the-copilot-metrics-dashboard - /early-access/copilot-metrics/apis/rest-api-endpoints-for-copilot-enterprise-and-user-usage-metrics - /copilot/concepts/copilot-metrics + - /copilot/concepts/copilot-usage-metrics/copilot-metrics category: - Copilot usage metrics - Track Copilot usage diff --git a/content/copilot/concepts/copilot-usage-metrics/index.md b/content/copilot/concepts/billing-and-usage/copilot-usage-metrics/index.md similarity index 91% rename from content/copilot/concepts/copilot-usage-metrics/index.md rename to content/copilot/concepts/billing-and-usage/copilot-usage-metrics/index.md index 10594e9f30a2..c240e2c203b0 100644 --- a/content/copilot/concepts/copilot-usage-metrics/index.md +++ b/content/copilot/concepts/billing-and-usage/copilot-usage-metrics/index.md @@ -8,7 +8,7 @@ heroImage: /assets/images/banner-images/hero-4 layout: bespoke-landing sidebarLink: text: All articles - href: /copilot/concepts/copilot-usage-metrics + href: /copilot/concepts/billing-and-usage/copilot-usage-metrics children: - /copilot-metrics - /content/copilot/how-tos/administer-copilot/view-usage-and-adoption @@ -29,5 +29,6 @@ includedCategories: - View metrics - Understand available data contentType: concepts +redirect_from: + - /copilot/concepts/copilot-usage-metrics --- - diff --git a/content/copilot/concepts/billing/index.md b/content/copilot/concepts/billing-and-usage/index.md similarity index 50% rename from content/copilot/concepts/billing/index.md rename to content/copilot/concepts/billing-and-usage/index.md index 5d4eb9cdad42..68b4c3e094b8 100644 --- a/content/copilot/concepts/billing/index.md +++ b/content/copilot/concepts/billing-and-usage/index.md @@ -1,17 +1,17 @@ --- -title: GitHub Copilot billing -shortTitle: Billing -intro: Understand billing and usage for {% data variables.product.prodname_copilot %}. +title: GitHub Copilot billing and usage +shortTitle: Billing and usage +intro: 'Understand billing and usage for {% data variables.product.prodname_copilot %}, whether you use it individually or manage it for an organization or enterprise.' versions: feature: copilot children: - - /usage-based-billing-for-individuals - /organizations-and-enterprises - - /budgets-for-usage-based-billing + - /individuals + - /copilot-usage-metrics redirect_from: - /managing-copilot/managing-copilot-as-an-individual-subscriber/billing-and-payments - /copilot/managing-copilot/understanding-and-managing-copilot-usage - /copilot/concepts/copilot-billing + - /copilot/concepts/billing contentType: concepts --- - diff --git a/content/copilot/concepts/billing/usage-based-billing-for-individuals.md b/content/copilot/concepts/billing-and-usage/individuals/billing.md similarity index 99% rename from content/copilot/concepts/billing/usage-based-billing-for-individuals.md rename to content/copilot/concepts/billing-and-usage/individuals/billing.md index 2a1f6446f654..0693642b4aa9 100644 --- a/content/copilot/concepts/billing/usage-based-billing-for-individuals.md +++ b/content/copilot/concepts/billing-and-usage/individuals/billing.md @@ -1,6 +1,6 @@ --- title: Usage-based billing for individuals -shortTitle: Billing for individuals +shortTitle: Billing intro: 'Your {% data variables.product.prodname_copilot_short %} plan includes a monthly allowance of {% data variables.product.prodname_ai_credits %}. If you exhaust your {% data variables.product.prodname_ai_credits_short %}, you can pay extra to keep working.' versions: feature: copilot @@ -16,6 +16,7 @@ redirect_from: - /copilot/concepts/copilot-billing/billing-for-individuals - /copilot/concepts/billing/billing-for-individuals - /copilot/how-tos/manage-and-track-spending/prepare-for-your-move-to-usage-based-billing + - /copilot/concepts/billing/usage-based-billing-for-individuals --- {% data variables.product.prodname_copilot_short %} usage is measured in {% data variables.product.prodname_ai_credits_short %}. All {% data variables.product.prodname_copilot_short %} plans include a monthly allowance of {% data variables.product.prodname_ai_credits_short %}. If you use up all of the credits included in your plan, you can purchase more and keep working. @@ -110,8 +111,6 @@ Your billing date will depend on whether or not you are already being billed by * **If you are not already being billed by {% data variables.product.prodname_dotcom %}**, in most cases your billing cycle will start on the day you sign up for {% data variables.product.prodname_copilot_short %}. For example, if you sign up on 3 September, with monthly billing, your initial billing cycle will run from 3 September until and including 2 October, and then on the same days of subsequent months. * **If you already have a billing cycle**, billing for {% data variables.product.prodname_copilot_short %} will be included in your next bill. You will be charged on a pro rata basis for that initial period. - - ## Update your IDE, client, and extension For the best experience with usage-based billing, update your IDE, client, and {% data variables.product.prodname_copilot_short %} extension to at least the versions listed below. @@ -132,8 +131,6 @@ For the best experience with usage-based billing, update your IDE, client, and { We recommend keeping your IDE, client, and {% data variables.product.prodname_copilot_short %} extensions on the latest available stable version. For information on configuring automatic updates, see [AUTOTITLE](/copilot/how-tos/configure-personal-settings/configure-in-ide). To update {% data variables.copilot.copilot_cli_short %}, see [AUTOTITLE](/copilot/how-tos/copilot-cli/set-up-copilot-cli/install-copilot-cli). - - ## Further reading * [AUTOTITLE](/copilot/get-started/plans) diff --git a/content/copilot/concepts/billing-and-usage/individuals/index.md b/content/copilot/concepts/billing-and-usage/individuals/index.md new file mode 100644 index 000000000000..01a0e21b3a82 --- /dev/null +++ b/content/copilot/concepts/billing-and-usage/individuals/index.md @@ -0,0 +1,11 @@ +--- +title: Billing and usage for individuals +shortTitle: Individuals +intro: 'Understand billing and usage limits for individual {% data variables.product.prodname_copilot %} plans.' +versions: + feature: copilot +children: + - /billing + - /usage-limits +contentType: concepts +--- diff --git a/content/copilot/concepts/usage-limits.md b/content/copilot/concepts/billing-and-usage/individuals/usage-limits.md similarity index 93% rename from content/copilot/concepts/usage-limits.md rename to content/copilot/concepts/billing-and-usage/individuals/usage-limits.md index 9e488f6c1126..0e06c242b4ad 100644 --- a/content/copilot/concepts/usage-limits.md +++ b/content/copilot/concepts/billing-and-usage/individuals/usage-limits.md @@ -9,8 +9,9 @@ redirect_from: - /copilot/troubleshooting-github-copilot/rate-limits-for-github-copilot - /copilot/how-tos/troubleshoot/rate-limits-for-github-copilot - /copilot/concepts/rate-limits + - /copilot/concepts/usage-limits contentType: concepts -category: +category: - Learn about Copilot --- @@ -29,7 +30,7 @@ Rate limiting is a mechanism used to control the number of requests a user or ap Your {% data variables.product.prodname_copilot_short %} plan includes an allowance of {% data variables.product.prodname_ai_credits_short %}. If you exhaust these included credits, you can continue working by either upgrading your plan or setting a budget for **Additional usage** to access more {% data variables.product.prodname_ai_credits_short %}. If you exceed the allowed additional usage, you can pay for the additional usage you've already consumed to unlock more and continue. -For more information, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-individuals#what-happens-if-i-exceed-my-included-ai-credits). +For more information, see [AUTOTITLE](/copilot/concepts/billing-and-usage/individuals/billing#what-happens-if-i-exceed-my-included-ai-credits). ## What to do if you hit a limit diff --git a/content/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing.md b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/billing.md similarity index 89% rename from content/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing.md rename to content/copilot/concepts/billing-and-usage/organizations-and-enterprises/billing.md index 85e717abbc8e..e951803975fc 100644 --- a/content/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing.md +++ b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/billing.md @@ -1,6 +1,6 @@ --- title: Usage-based billing for organizations and enterprises -shortTitle: Usage-based billing +shortTitle: Billing intro: 'Under usage-based billing, {% data variables.product.prodname_copilot_short %} usage in organizations and enterprises is measured in {% data variables.product.prodname_ai_credits_short %}.' permissions: Enterprise and organization owners and billing managers versions: @@ -9,6 +9,7 @@ product: '{% data variables.copilot.copilot_enterprise_short %} or {% data varia redirect_from: - /copilot/how-tos/manage-and-track-spending/prepare-for-usage-based-billing - /copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises + - /copilot/concepts/billing/organizations-and-enterprises/usage-based-billing contentType: concepts category: - Manage Copilot for a team @@ -43,21 +44,6 @@ Adding licenses mid-cycle increases the pool immediately. Removing licenses mid- Included {% data variables.product.prodname_ai_credits_short %} do not carry over between months. Unused credits are forfeited, and the pool resets to the full monthly amount at 00:00:00 UTC on the first day of each calendar month. This reset date is fixed and does not change based on when licenses are added, removed, or billed. See [AUTOTITLE](/billing/concepts/billing-cycles#billing-cycles-for-metered-products). - - -### Promotional amounts for existing customers - -Existing {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} customers receive a higher amount of included {% data variables.product.prodname_ai_credits_short %} for the first three months of usage-based billing (June 1 – September 1, 2026): - -| Plan | Total {% data variables.product.prodname_ai_credits_short %} per user per month | -| --- | --- | -| {% data variables.copilot.copilot_business_short %} | {% data variables.copilot.ai_credits_per_user_business_promo %} | -| {% data variables.copilot.copilot_enterprise_short %} | {% data variables.copilot.ai_credits_per_user_enterprise_promo %} | - -After the promotional period, included usage returns to the standard amounts above. - - - ## What happens if I exceed my included {% data variables.product.prodname_ai_credits_short %}? When your pooled {% data variables.product.prodname_ai_credits_short %} are exhausted, what happens next depends on how you have configured policies for additional usage. @@ -68,7 +54,7 @@ When your pooled {% data variables.product.prodname_ai_credits_short %} are exha > [!NOTE] > Additional usage is **enabled by default** for organizations and enterprises. If you want to prevent any spending beyond your included {% data variables.product.prodname_ai_credits_short %}, an administrator must explicitly disable the **{% data variables.product.prodname_ai_credits_short %} paid usage** policy in your enterprise's or organization's AI Controls settings. -If you have set a user-level budget and a user exhausts it, that user's access to {% data variables.product.prodname_copilot_short %} is halted, regardless of whether the organization's pool still has capacity. A user can also be blocked by an enterprise spending limit before they reach their individual user-level budget, if the spending limit runs out first. There is no automatic fallback to lower-cost models when a budget is exhausted. For more information about how these controls interact, see [AUTOTITLE](/copilot/concepts/billing/budgets-for-usage-based-billing). +If you have set a user-level budget and a user exhausts it, that user's access to {% data variables.product.prodname_copilot_short %} is halted, regardless of whether the organization's pool still has capacity. A user can also be blocked by an enterprise spending limit before they reach their individual user-level budget, if the spending limit runs out first. There is no automatic fallback to lower-cost models when a budget is exhausted. For more information about how these controls interact, see [AUTOTITLE](/copilot/concepts/billing-and-usage/organizations-and-enterprises/budgets). Additional usage budgets are set in US dollars, and usage is shown in {% data variables.product.prodname_ai_credits_short %}. {% data variables.product.prodname_ai_credits_short %} draw down the budget at a fixed rate: 1 {% data variables.product.prodname_ai_credit_singular %} = {% data variables.product.prodname_ai_credits_value %}, so a $10 USD budget covers 1,000 AI credits. @@ -81,9 +67,7 @@ Budget controls let you govern how individual users draw from the shared pool an * **Enterprise spending limits** cap total metered charges across your entire enterprise after the pool is exhausted. * **Organization-level budgets** cap metered charges for users whose {% data variables.product.prodname_copilot_short %} seats are billed to the organization, after the pool is exhausted. -For a full explanation of how these controls work together and when usage gets blocked, see [AUTOTITLE](/copilot/concepts/billing/budgets-for-usage-based-billing). - - +For a full explanation of how these controls work together and when usage gets blocked, see [AUTOTITLE](/copilot/concepts/billing-and-usage/organizations-and-enterprises/budgets). ## Update your IDE, client, and extension @@ -105,8 +89,6 @@ For the best experience with usage-based billing, update your IDE, client, and { We recommend keeping your IDE, client, and {% data variables.product.prodname_copilot_short %} extensions on the latest available stable version. For information on configuring automatic updates, see [AUTOTITLE](/copilot/how-tos/configure-personal-settings/configure-in-ide). To update {% data variables.copilot.copilot_cli_short %}, see [AUTOTITLE](/copilot/how-tos/copilot-cli/set-up-copilot-cli/install-copilot-cli). - - ## Next steps * To set up budget controls for your enterprise, see [AUTOTITLE](/copilot/tutorials/budgets/getting-started-with-budget-controls). diff --git a/content/copilot/concepts/billing/budgets-for-usage-based-billing.md b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/budgets.md similarity index 99% rename from content/copilot/concepts/billing/budgets-for-usage-based-billing.md rename to content/copilot/concepts/billing-and-usage/organizations-and-enterprises/budgets.md index 5a36d0d304cc..f0f8b582c5dc 100644 --- a/content/copilot/concepts/billing/budgets-for-usage-based-billing.md +++ b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/budgets.md @@ -7,6 +7,8 @@ versions: permissions: 'Enterprise owners and billing managers can set all budget controls. Organization owners can set organization-level budgets.' product: '{% data variables.copilot.copilot_enterprise_short %} or {% data variables.copilot.copilot_business_short %}' contentType: concepts +redirect_from: + - /copilot/concepts/billing/budgets-for-usage-based-billing category: - Manage Copilot for a team --- diff --git a/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/index.md b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/index.md new file mode 100644 index 000000000000..44ff47e02270 --- /dev/null +++ b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/index.md @@ -0,0 +1,12 @@ +--- +title: Billing and usage for organizations and enterprises +shortTitle: Organizations and enterprises +intro: 'Understand billing, budgets, and usage metrics for {% data variables.product.prodname_copilot %} in organizations and enterprises.' +versions: + feature: copilot +children: + - /billing + - /seats-and-billing-cycles + - /budgets +contentType: concepts +--- diff --git a/content/copilot/concepts/billing/organizations-and-enterprises/fundamentals.md b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/seats-and-billing-cycles.md similarity index 84% rename from content/copilot/concepts/billing/organizations-and-enterprises/fundamentals.md rename to content/copilot/concepts/billing-and-usage/organizations-and-enterprises/seats-and-billing-cycles.md index 3032f395c216..ac16e38af76c 100644 --- a/content/copilot/concepts/billing/organizations-and-enterprises/fundamentals.md +++ b/content/copilot/concepts/billing-and-usage/organizations-and-enterprises/seats-and-billing-cycles.md @@ -1,8 +1,8 @@ --- -title: About billing for GitHub Copilot in organizations and enterprises -shortTitle: Fundamentals -intro: Learn about pricing and billing cycles for {% data variables.product.prodname_copilot_short %}. -product: Organizations on a {% data variables.product.prodname_free_team %} or {% data variables.product.prodname_team %} plan, or organizations and enterprises on {% data variables.product.prodname_ghe_cloud %} +title: GitHub Copilot seats and billing cycles for organizations and enterprises +shortTitle: Seats and billing cycles +intro: 'Learn about seats and billing cycles for {% data variables.product.prodname_copilot_short %}.' +product: 'Organizations on a {% data variables.product.prodname_free_team %} or {% data variables.product.prodname_team %} plan, or organizations and enterprises on {% data variables.product.prodname_ghe_cloud %}' versions: feature: copilot redirect_from: @@ -17,6 +17,7 @@ redirect_from: - /copilot/concepts/billing/billing-for-enterprises - /copilot/concepts/billing/billing-for-organizations - /copilot/concepts/billing/organizations-and-enterprises + - /copilot/concepts/billing/organizations-and-enterprises/fundamentals contentType: concepts category: - Manage Copilot for a team @@ -29,13 +30,6 @@ category: * **{% data variables.copilot.copilot_business_short %}** at {% data variables.copilot.cfb_price_per_month %} per user per month, includes {% data variables.copilot.ai_credits_per_user_business %} {% data variables.product.prodname_ai_credits_short %} per user, and access to a broad model catalog. * **{% data variables.copilot.copilot_enterprise_short %}** at {% data variables.copilot.ce_price_per_month %} per user per month, includes {% data variables.copilot.ai_credits_per_user_enterprise %} {% data variables.product.prodname_ai_credits_short %} per user ({% data variables.product.prodname_ghe_cloud %} only), and priority access to new models and features. - - -> [!NOTE] -> Existing customers receive higher included {% data variables.product.prodname_ai_credits_short %} during the promotional period (June–August 2026). See [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing#promotional-amounts-for-existing-customers). - - - With {% data variables.product.prodname_ghe_cloud %}: * An enterprise owner chooses the plan for each organization in the enterprise. For guidance on choosing a plan, see [AUTOTITLE](/copilot/tutorials/roll-out-at-scale/assign-licenses/choose-enterprise-plan). @@ -46,7 +40,7 @@ With {% data variables.product.prodname_ghe_cloud %}: {% data variables.product.prodname_copilot_short %} usage is measured in {% data variables.product.prodname_ai_credits_short %} under usage-based billing. Each license contributes {% data variables.product.prodname_ai_credits_short %} to a shared enterprise pool, and usage beyond the pool is charged at {% data variables.product.prodname_ai_credits_value %} per {% data variables.product.prodname_ai_credit_singular %}. Code completions and {% data variables.copilot.next_edit_suggestions %} are not billed in {% data variables.product.prodname_ai_credits_short %} and remain unlimited for all paid plans. -For a full explanation of how {% data variables.product.prodname_ai_credits_short %} work, including pooling, additional usage, and what happens when credits run out, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +For a full explanation of how {% data variables.product.prodname_ai_credits_short %} work, including pooling, additional usage, and what happens when credits run out, see [AUTOTITLE](/copilot/concepts/billing-and-usage/organizations-and-enterprises/billing). ## Seat assignment @@ -68,7 +62,7 @@ For more information, see [AUTOTITLE](/copilot/reference/copilot-billing/license ## Managing costs -You can control {% data variables.product.prodname_ai_credits_short %} spend using budget controls at the user, cost center, and enterprise level. For an overview of how budget controls work, see [AUTOTITLE](/copilot/concepts/billing/budgets-for-usage-based-billing). For guidance on choosing a configuration, see [AUTOTITLE](/copilot/tutorials/budgets/optimizing-your-budget-configuration). +You can control {% data variables.product.prodname_ai_credits_short %} spend using budget controls at the user, cost center, and enterprise level. For an overview of how budget controls work, see [AUTOTITLE](/copilot/concepts/billing-and-usage/organizations-and-enterprises/budgets). For guidance on choosing a configuration, see [AUTOTITLE](/copilot/tutorials/budgets/optimizing-your-budget-configuration). ## Reference diff --git a/content/copilot/concepts/billing/organizations-and-enterprises/index.md b/content/copilot/concepts/billing/organizations-and-enterprises/index.md deleted file mode 100644 index e472d4331fcf..000000000000 --- a/content/copilot/concepts/billing/organizations-and-enterprises/index.md +++ /dev/null @@ -1,11 +0,0 @@ ---- -title: GitHub Copilot billing for organizations and enterprises -shortTitle: Organizations and enterprises -intro: Understand billing and usage for {% data variables.product.prodname_copilot %}. -versions: - feature: copilot -children: - - /fundamentals - - /usage-based-billing -contentType: concepts ---- \ No newline at end of file diff --git a/content/copilot/concepts/context/spaces.md b/content/copilot/concepts/context/spaces.md index b9a3cfb80957..154f403d2701 100644 --- a/content/copilot/concepts/context/spaces.md +++ b/content/copilot/concepts/context/spaces.md @@ -65,7 +65,7 @@ You can use {% data variables.copilot.copilot_spaces %} in {% data variables.cop Questions you submit in a space count as {% data variables.copilot.copilot_chat_short %} requests and consume {% data variables.product.prodname_ai_credits_short %} based on the model used and the number of tokens processed. * If you're a {% data variables.copilot.copilot_free_short %} user, this usage counts toward your monthly chat limit. -* For {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %}, usage draws from your enterprise's shared {% data variables.product.prodname_ai_credits_short %} pool. For details on how consumption is calculated, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +* For {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %}, usage draws from your enterprise's shared {% data variables.product.prodname_ai_credits_short %} pool. For details on how consumption is calculated, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## Next steps diff --git a/content/copilot/concepts/enterprise/agent-management.md b/content/copilot/concepts/enterprise/agent-management.md index d6d36a488a8a..b6cdf46976d2 100644 --- a/content/copilot/concepts/enterprise/agent-management.md +++ b/content/copilot/concepts/enterprise/agent-management.md @@ -74,13 +74,13 @@ To help you meet security and compliance requirements, you can choose to: Private MCP registries apply to {% data variables.copilot.copilot_cli_short %} and IDEs, but not to cloud agents that run on {% data variables.product.github %}. For {% data variables.copilot.copilot_cloud_agent %}, MCP servers can be configured at the repository level or in custom agent profiles defined at the enterprise level. -For more information, see [AUTOTITLE](/copilot/concepts/mcp-management). +For more information, see [AUTOTITLE](/copilot/concepts/enterprise/mcp-management). ## Enterprise-managed settings The `{% data variables.copilot.managed_setting_file %}` file allows enterprises to control how users can interact with agents across {% data variables.product.prodname_copilot_short %} clients. For example: which plugins can people install, and can people use "allow all" commands that let agents run commands without asking for permission? This file can be hosted on {% data variables.product.company_short %} or installed directly on users' machines. -For more information, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). +For more information, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). ## Agent mode in the IDE diff --git a/content/copilot/concepts/enterprise/default-model-availability.md b/content/copilot/concepts/enterprise/default-model-availability.md index e328dd617628..f8e8b32aa093 100644 --- a/content/copilot/concepts/enterprise/default-model-availability.md +++ b/content/copilot/concepts/enterprise/default-model-availability.md @@ -31,4 +31,4 @@ For instructions on managing model policies, see [AUTOTITLE](/copilot/how-tos/ad ## How do I prepare for new models? -We recommend keeping up with new model releases so you can choose your enablement settings for each one. New models are announced on {% data variables.product.github %}'s changelog. For more information, see [AUTOTITLE](/copilot/concepts/learning-about-new-features-and-models#learning-about-new-copilot-models). +We recommend keeping up with new model releases so you can choose your enablement settings for each one. New models are announced on {% data variables.product.github %}'s changelog. For more information, see [AUTOTITLE](/copilot/concepts/enterprise/learning-about-new-features-and-models#learning-about-new-copilot-models). diff --git a/content/copilot/concepts/enterprise/learning-about-new-features-and-models.md b/content/copilot/concepts/enterprise/learning-about-new-features-and-models.md index 9b53069fbda4..8429e9d02766 100644 --- a/content/copilot/concepts/enterprise/learning-about-new-features-and-models.md +++ b/content/copilot/concepts/enterprise/learning-about-new-features-and-models.md @@ -42,7 +42,7 @@ To learn about new {% data variables.product.prodname_copilot_short %} features, Each feature has its own enablement requirements and policy settings. When a new feature is released: 1. Review the feature documentation to understand its capabilities. -1. Check the policy settings available at the enterprise and organization level. See [AUTOTITLE](/copilot/concepts/policies). +1. Check the policy settings available at the enterprise and organization level. See [AUTOTITLE](/copilot/concepts/enterprise/policies). 1. Consider running a pilot with a subset of users before broader rollout. ### Learning about new {% data variables.product.prodname_copilot_short %} models diff --git a/content/copilot/concepts/enterprise/mcp-management.md b/content/copilot/concepts/enterprise/mcp-management.md index 8663d6d2e363..b5cab39c726c 100644 --- a/content/copilot/concepts/enterprise/mcp-management.md +++ b/content/copilot/concepts/enterprise/mcp-management.md @@ -31,7 +31,7 @@ Alternatively, you can host your own MCP registry and restrict access to servers | Release phase | Generally available | {% data variables.release-phases.public_preview_caps %}, not prioritized for development | | Ease of setup | You can host a configuration file on {% data variables.product.github %} that applies automatically to clients. | You must host your own registry that matches the MCP specification and serves HTTPS requests. | | Enforcement level | Enterprise-wide settings, overridable for enterprise teams | Enterprise-wide or for individual organizations | -| Supported clients | Clients supported by the `{% data variables.copilot.managed_setting_file %}` file, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). Planned to expand in the near future. | See [AUTOTITLE](/copilot/reference/enterprise-administrators/mcp-private-registry-enforcement). | +| Supported clients | Clients supported by the `{% data variables.copilot.managed_setting_file %}` file, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). Planned to expand in the near future. | See [AUTOTITLE](/copilot/reference/enterprise-administrators/mcp-private-registry-enforcement). | | Server matching method | Secure matching based on name, URL, or `stdio` commands | Less secure matching, based on name or ID only. Users can bypass the restriction by editing configuration files. | {% endrowheaders %} diff --git a/content/copilot/concepts/enterprise/opentelemetry.md b/content/copilot/concepts/enterprise/opentelemetry.md index de175fa4468d..c6e625519d0b 100644 --- a/content/copilot/concepts/enterprise/opentelemetry.md +++ b/content/copilot/concepts/enterprise/opentelemetry.md @@ -37,7 +37,7 @@ To collect OTel data from users' {% data variables.product.prodname_copilot_shor Enterprises can enforce OTel configuration across supported clients with managed settings. These settings are enforced across users' clients and cannot be overridden. The `telemetry` property includes keys for enabling and configuring OpenTelemetry. -For more information, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings) and [AUTOTITLE](/copilot/reference/enterprise-administrators/enterprise-managed-settings). +For more information, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started) and [AUTOTITLE](/copilot/reference/enterprise-administrators/enterprise-managed-settings). ## Client documentation diff --git a/content/copilot/concepts/enterprise/plugin-standards.md b/content/copilot/concepts/enterprise/plugin-standards.md index 9cb0ad2a5285..47a97f26e19a 100644 --- a/content/copilot/concepts/enterprise/plugin-standards.md +++ b/content/copilot/concepts/enterprise/plugin-standards.md @@ -44,4 +44,4 @@ Enterprise-managed plugin standards help administrators address several common c ## Next step -To configure enterprise plugin standards, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). +To configure enterprise plugin standards, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). diff --git a/content/copilot/concepts/index.md b/content/copilot/concepts/index.md index 92d63b299c3f..8110be9edcc2 100644 --- a/content/copilot/concepts/index.md +++ b/content/copilot/concepts/index.md @@ -9,13 +9,11 @@ children: - /chat - /agents - /about-cloud-and-local-sandboxes - - /copilot-usage-metrics - /prompting - /context - /tools - /models - - /usage-limits - - /billing + - /billing-and-usage - /network-settings - /enterprise contentType: concepts diff --git a/content/copilot/concepts/models/index.md b/content/copilot/concepts/models/index.md index 5e55b889958a..a268f6600fbb 100644 --- a/content/copilot/concepts/models/index.md +++ b/content/copilot/concepts/models/index.md @@ -6,9 +6,9 @@ versions: feature: copilot contentType: concepts children: + - /overview + - /auto-model-selection - /bring-your-own-key - /utility-models - - /auto-model-selection - /fallback-and-lts-models --- - diff --git a/content/copilot/concepts/models/overview.md b/content/copilot/concepts/models/overview.md new file mode 100644 index 000000000000..086cc35e315c --- /dev/null +++ b/content/copilot/concepts/models/overview.md @@ -0,0 +1,54 @@ +--- +title: Models in GitHub Copilot +shortTitle: Overview +intro: 'Understand the types and availability of AI models in {% data variables.product.prodname_copilot %}.' +versions: + feature: copilot +contentType: concepts +--- + +## About models in {% data variables.product.prodname_copilot_short %} + +{% data variables.product.prodname_copilot %} supports a range of AI models. Different models have different strengths. For example, some prioritize low latency, while others are optimized for complex reasoning or large context windows. For a full list of supported models, see [AUTOTITLE](/copilot/reference/ai-models/supported-models). + +Depending on the surface you're using, your plan, and any policies your organization or enterprise has set, you can often **choose** which model handles your request, or **let {% data variables.copilot.copilot_auto_model_selection_short %} choose** one for you. Model choice affects the speed, cost, and quality of your results, so understanding your options helps you get the most out of every feature. + +In addition, {% data variables.product.prodname_copilot_short %} also has utility models that run automatically in the background, and for {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %}, base and long-term support (LTS) models for extended stability. + +## Model choice + +When you're using {% data variables.product.prodname_copilot_short %}, whether that's on {% data variables.product.github %}, {% data variables.copilot.copilot_cli_short %}, the {% data variables.copilot.github_copilot_app %} and supported IDEs, you can select the model that best suits your task. For guidance on which model fits common tasks, such as general-purpose coding, large-scale refactors, or documentation writing, see [AUTOTITLE](/copilot/reference/ai-models/model-comparison). + +### What determines which models are available to you + +The models you see in {% data variables.product.prodname_copilot_short %} depend on several factors: + +* **Your plan.** Some models are available on all plans, while others, such as premium models, require a paid plan. See [AUTOTITLE](/copilot/get-started/plans). +* **The {% data variables.product.prodname_copilot_short %} surface or client you're using.** Not every model is available in every IDE, on {% data variables.product.github %}, in {% data variables.copilot.copilot_cli_short %}, or in the {% data variables.copilot.github_copilot_app %}. See [AUTOTITLE](/copilot/reference/ai-models/supported-models#supported-ai-models-per-client). +* **Administrator policies.** If you're part of an organization or enterprise, administrators can enable or disable specific models, which affects what you and {% data variables.copilot.copilot_auto_model_selection_short %} can use. See [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-access-to-ai-models). +* **Model availability over time.** Providers periodically release new models and retire older ones, so the specific models available to you can change. Check [AUTOTITLE](/copilot/reference/ai-models/supported-models) for the current list. + +## Auto model selection + +Rather than requiring you to track every model's strengths yourself, you can select **Auto** in the model picker. {% data variables.copilot.copilot_auto_model_selection_short_cap_a %} then routes your request to an appropriate supported model based on the complexity of your task and real-time model availability. See [AUTOTITLE](/copilot/concepts/models/auto-model-selection). + +## Bring your own key + +With bring your own key (BYOK), you (or your enterprise) can connect a custom or provider-hosted model to {% data variables.product.prodname_copilot_short %}. Availability depends on the mechanism you use and the client you're working in. See [AUTOTITLE](/copilot/concepts/models/bring-your-own-key). + +## Utility models for background features + +Some {% data variables.product.prodname_copilot_short %} features, such as generating a commit message or a chat session title, run on small utility models that work automatically in the background. Utility models aren't part of the model picker, and you can't select them directly. See [AUTOTITLE](/copilot/concepts/models/utility-models). + +## Base and long-term support models + +{% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} accounts have access to two additional model designations: + +* A **base model** is used automatically when no other model is enabled for the account. +* A **long-term support (LTS) model** is supported for a defined extended period of time, currently one year from its designation date. + +See [AUTOTITLE](/copilot/concepts/models/fallback-and-lts-models). + +## Further reading + +* [AUTOTITLE](/copilot/reference/ai-models) diff --git a/content/copilot/concepts/models/utility-models.md b/content/copilot/concepts/models/utility-models.md index 0f48b57db10b..0251c9ce0173 100644 --- a/content/copilot/concepts/models/utility-models.md +++ b/content/copilot/concepts/models/utility-models.md @@ -6,7 +6,7 @@ versions: contentType: concepts --- -Utility models are a small set of models that are automatically enabled for all {% data variables.product.prodname_copilot %} users across every plan. They power background features such as the generation of commit messages or chat session titles, and they apply across {% data variables.product.prodname_copilot_short %} surfaces: in IDEs, on {% data variables.product.github %}, and in {% data variables.copilot.copilot_cli_short %}. +Utility models are a small set of models that are automatically enabled for all {% data variables.product.prodname_copilot %} users across every plan. They power background features such as the generation of commit messages or chat session titles, and they apply across {% data variables.product.prodname_copilot_short %} surfaces: in IDEs, on {% data variables.product.github %}, in {% data variables.copilot.copilot_cli_short %}, and in {% data variables.copilot.github_copilot_app %}. ## How do utility models work? diff --git a/content/copilot/get-started/enterprise-ai-governance.md b/content/copilot/get-started/enterprise-ai-governance.md index 831c60673078..0436c2cde676 100644 --- a/content/copilot/get-started/enterprise-ai-governance.md +++ b/content/copilot/get-started/enterprise-ai-governance.md @@ -25,6 +25,7 @@ journeyTracks: - href: '/copilot/concepts/enterprise/policies' - href: '/copilot/tutorials/roll-out-at-scale/govern-at-scale/maintain-codebase-standards' - href: '/copilot/how-tos/administer-copilot/manage-for-enterprise/review-audit-logs' + - href: '/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started' - id: 'adopting_agents' title: 'Preparing for agents' description: 'Learn what agents can do for your enterprise, and prepare to roll them out.' diff --git a/content/copilot/get-started/index.md b/content/copilot/get-started/index.md index 04fd99c3a261..62e71e31c8f0 100644 --- a/content/copilot/get-started/index.md +++ b/content/copilot/get-started/index.md @@ -8,6 +8,7 @@ children: - /quickstart - /cli-quickstart - /quickstart-copilot-app + - /sdk-quickstart - /what-is-github-copilot - /plans - /features diff --git a/content/copilot/get-started/plans.md b/content/copilot/get-started/plans.md index 4b88115f0881..bcf808ebc22b 100644 --- a/content/copilot/get-started/plans.md +++ b/content/copilot/get-started/plans.md @@ -67,7 +67,7 @@ The table below provides an overview of differences between plans. All plans inc {% endrowheaders %} -Each plan comes with an allowance of {% data variables.product.prodname_ai_credits %}. For more information, including how {% data variables.product.prodname_ai_credits %} work, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-individuals) and [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +Each plan comes with an allowance of {% data variables.product.prodname_ai_credits %}. For more information, including how {% data variables.product.prodname_ai_credits %} work, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-individuals) and [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). For more detail on what's uniquely available in each plan, see the following sections: * [Individual plans](#individual-plans) @@ -187,7 +187,7 @@ With these plans you'll receive access to the following features and capabilitie {% data variables.product.prodname_copilot_short %} usage is measured in {% data variables.product.prodname_ai_credits_short %} under usage-based billing. Each license contributes {% data variables.product.prodname_ai_credits_short %} to a shared enterprise pool, and usage beyond the pool is charged at {% data variables.product.prodname_ai_credits_value %} per {% data variables.product.prodname_ai_credit_singular %}. Code completions and {% data variables.copilot.next_edit_suggestions %} are not billed in {% data variables.product.prodname_ai_credits_short %} and remain unlimited for all paid plans. -For a full explanation of how {% data variables.product.prodname_ai_credits_short %} work, including pooling, additional usage, and what happens when credits run out, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +For a full explanation of how {% data variables.product.prodname_ai_credits_short %} work, including pooling, additional usage, and what happens when credits run out, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ### Inline suggestions and {% data variables.copilot.copilot_chat_short %} diff --git a/content/copilot/how-tos/copilot-sdk/getting-started.md b/content/copilot/get-started/sdk-quickstart.md similarity index 99% rename from content/copilot/how-tos/copilot-sdk/getting-started.md rename to content/copilot/get-started/sdk-quickstart.md index 0b14f781ee31..33db9d2e1cab 100644 --- a/content/copilot/how-tos/copilot-sdk/getting-started.md +++ b/content/copilot/get-started/sdk-quickstart.md @@ -1,21 +1,22 @@ --- title: Build your first Copilot-powered app -shortTitle: Getting Started +shortTitle: Copilot SDK quickstart +allowTitleToDifferFromFilename: true intro: >- In this tutorial, you'll use the Copilot SDK to build a command-line assistant. You'll start with the basics, add streaming responses, then add custom tools - giving Copilot the ability to call your code. versions: - fpt: '*' - ghec: '*' + feature: copilot redirect_from: - /copilot/how-tos/copilot-sdk/sdk-getting-started -contentType: how-tos + - /copilot/how-tos/copilot-sdk/getting-started +contentType: get-started +category: + - Quickstarts + - Integrate Copilot with your tools --- - - - **What you'll build:** ```text diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/create-github-private-repo.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/create-github-private-repo.md index 62a9ec1c38b1..c9bbb2ba8d74 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/create-github-private-repo.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/create-github-private-repo.md @@ -44,4 +44,4 @@ To control who can propose and merge changes to the governance settings stored h ## Next steps * [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/prepare-for-custom-agents) -* [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings) +* [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started) diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/monitor-agentic-activity.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/monitor-agentic-activity.md index 62c0ea639fd7..6dc84c880741 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/monitor-agentic-activity.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/monitor-agentic-activity.md @@ -41,4 +41,4 @@ OpenTelemetry (OTel) is an open source observability framework. It provides a st When you enable OTel monitoring, you can send data from users' {% data variables.product.prodname_copilot_short %} clients to an OTel-compatible backend. This lets you analyze agent sessions and understand agent usage across your enterprise. -For more information, see [AUTOTITLE](/copilot/concepts/agents/opentelemetry). +For more information, see [AUTOTITLE](/copilot/concepts/enterprise/opentelemetry). diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/prepare-for-custom-agents.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/prepare-for-custom-agents.md index 8bdf3137443d..8fb11a2ffe63 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/prepare-for-custom-agents.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/prepare-for-custom-agents.md @@ -42,4 +42,4 @@ If you prefer to maintain full control over your enterprise's tooling to ensure ## Next steps -To centrally control {% data variables.product.prodname_copilot_short %} client behavior across your enterprise, configure enterprise managed settings. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). +To centrally control {% data variables.product.prodname_copilot_short %} client behavior across your enterprise, configure enterprise managed settings. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-enterprise-policies.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-enterprise-policies.md index b3628cc5a50b..f46ab2084ef0 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-enterprise-policies.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-enterprise-policies.md @@ -23,7 +23,7 @@ If you're setting up {% data variables.product.prodname_copilot_short %} for the ## Defining policies for your enterprise -Enterprise owners can define a policy for the whole enterprise, or delegate the decision to individual organization owners. See [AUTOTITLE](/copilot/concepts/policies). +Enterprise owners can define a policy for the whole enterprise, or delegate the decision to individual organization owners. See [AUTOTITLE](/copilot/concepts/enterprise/policies). {% data reusables.enterprise-accounts.access-enterprise %} {% data reusables.enterprise-accounts.ai-controls-tab %} diff --git a/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-default-models.md b/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-default-models.md index d0715e17454f..72322048c0a4 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-default-models.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-default-models.md @@ -22,7 +22,7 @@ When viewing the model settings for your organization, you may see the following * **Enabled** or **Disabled** with a {% octicon "shield" aria-label="shield" %} icon: The enterprise owner has enforced this setting. You cannot change the availability of this model. * **Enabled** or **Disabled** in a dropdown menu: The enterprise owner has made this model optional. You can configure the availability for your organization. -* **Delegate to Default Policy**: This model is available for you to configure, but no one has configured it in the organization. The model inherits the default set in the "Default availability" policy for your organization. See [AUTOTITLE](/copilot/concepts/models/default-availability). +* **Delegate to Default Policy**: This model is available for you to configure, but no one has configured it in the organization. The model inherits the default set in the "Default availability" policy for your organization. See [AUTOTITLE](/copilot/concepts/enterprise/default-model-availability). ## Configuring model availability for your organization diff --git a/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-plan/subscribe.md b/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-plan/subscribe.md index 8ca6e0194577..a62e0a01716d 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-plan/subscribe.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-organization/manage-plan/subscribe.md @@ -21,14 +21,14 @@ category: --- > [!NOTE] -> If your organization is part of an enterprise, you will gain {% data variables.product.prodname_copilot_short %} through your enterprise instead. See [AUTOTITLE](/copilot/managing-copilot/managing-copilot-for-your-enterprise/subscribing-to-copilot-for-your-enterprise) and [AUTOTITLE](/copilot/managing-copilot/managing-copilot-for-your-enterprise/enabling-copilot-for-organizations-in-your-enterprise). +> If your organization is part of an enterprise, you will gain {% data variables.product.prodname_copilot_short %} through your enterprise instead. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-plan/subscribe) and [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-access/grant-access). 1. Navigate to the [{% data variables.product.prodname_copilot %} sign up page](https://github.com/github-copilot/purchase?ref_product=copilot&ref_type=purchase&ref_style=text). 1. Ensure you are signed in to the right organization account. If you are not, click **{% octicon "arrow-switch" aria-hidden="true" aria-label="arrow-switch" %} Switch** and select the organization for which you want to purchase {% data variables.product.prodname_copilot %}. 1. Click **Enable {% data variables.product.prodname_copilot %}**. -1. Enable {% data variables.product.prodname_copilot_short %} for some or all members of your organization. For more information about assigning seats, see [AUTOTITLE](/copilot/managing-copilot/managing-github-copilot-in-your-organization/managing-access-to-github-copilot-in-your-organization/granting-access-to-copilot-for-members-of-your-organization). +1. Enable {% data variables.product.prodname_copilot_short %} for some or all members of your organization. For more information about assigning seats, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/manage-access/grant-access). ## Next steps -* To finish setting up {% data variables.product.prodname_copilot_short %} for your organization, see [AUTOTITLE](/copilot/setting-up-github-copilot/setting-up-github-copilot-for-your-organization). -* For billing information, see [AUTOTITLE](/billing/managing-billing-for-github-copilot/about-billing-for-github-copilot#about-billing-for-github-copilot-business-and-github-copilot-enterprise) and [AUTOTITLE](/billing/managing-your-billing). \ No newline at end of file +* To finish setting up {% data variables.product.prodname_copilot_short %} for your organization, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/enable-copilot/set-up-for-organization). +* For billing information, see [AUTOTITLE](/billing/concepts/product-billing/github-copilot-licenses#about-billing-for-github-copilot-business-and-github-copilot-enterprise) and [AUTOTITLE](/billing/get-started). \ No newline at end of file diff --git a/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-enterprise-allowlist.md b/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-enterprise-allowlist.md index 97f4ef40bad4..ec9868c37ab3 100644 --- a/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-enterprise-allowlist.md +++ b/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-enterprise-allowlist.md @@ -16,7 +16,7 @@ category: You can define an allowlist and denylist to control which MCP servers users in your enterprise can run in {% data variables.product.prodname_copilot_short %} clients. These lists are defined in your enterprise's `{% data variables.copilot.managed_setting_file %}`, which you can store on {% data variables.product.github %}. -For more information, see [AUTOTITLE](/copilot/concepts/mcp-management). +For more information, see [AUTOTITLE](/copilot/concepts/enterprise/mcp-management). ## Prerequisites @@ -27,7 +27,7 @@ You can find these settings in the {% octicon "mcp" aria-hidden="true" aria-labe ## Defining an allowlist or denylist -1. Create a `{% data variables.copilot.managed_setting_file %}` file for your enterprise. Most enterprises store this file in a `.github-private` repository. You can also install it directly on users' machines using mobile device management. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings#deploying-server-managed-settings). +1. Create a `{% data variables.copilot.managed_setting_file %}` file for your enterprise. Most enterprises store this file in a `.github-private` repository. You can also install it directly on users' machines using mobile device management. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/deploy-managed-settings#deploying-server-managed-settings). 1. Edit the file to define an allowlist and denylist for MCP servers. You can match by name, server URL, or specific commands. For syntax details, see [allowedMcpServers](/copilot/reference/enterprise-administrators/enterprise-managed-settings#allowedmcpservers), and [deniedMcpServers](/copilot/reference/enterprise-administrators/enterprise-managed-settings#deniedmcpservers) in "Enterprise managed settings." The following example allows servers that match any of the three allowlist entries. The filesystem server configured to access the root filesystem is always blocked, even if it also matches an allowlist entry. diff --git a/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-mcp-registry.md b/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-mcp-registry.md index 4e8ba65eb0b4..7eb195f216e9 100644 --- a/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-mcp-registry.md +++ b/content/copilot/how-tos/administer-copilot/manage-mcp-usage/configure-mcp-registry.md @@ -16,7 +16,7 @@ category: ## Prerequisites -Before you create your Model Context Protocol (MCP) registry, you should understand the functionality and benefits of MCP management for your company. See [AUTOTITLE](/copilot/concepts/mcp-management). +Before you create your Model Context Protocol (MCP) registry, you should understand the functionality and benefits of MCP management for your company. See [AUTOTITLE](/copilot/concepts/enterprise/mcp-management). ## Option 1: Self-hosting an MCP registry diff --git a/content/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating.md b/content/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating.md index f42ba006c413..129e40911991 100644 --- a/content/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating.md +++ b/content/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating.md @@ -22,38 +22,54 @@ Plugins are packages that extend the functionality of {% data variables.copilot. ## Plugin structure -A plugin consists of a directory with a specific structure. At minimum, it must contain a `plugin.json` manifest file at the root of the directory. It can also contain any combination of agents, skills, hooks, and MCP server configurations. - -### Example plugin structure - -```text -my-plugin/ -├── plugin.json # Required manifest -├── agents/ # Custom agents (optional) -│ └── helper.agent.md -├── skills/ # Skills (optional) -│ └── deploy/ -│ └── SKILL.md -├── hooks.json # Hook configuration (optional) -└── .mcp.json # MCP server config (optional) -``` +A plugin consists of a directory with a specific structure and a `plugin.json` manifest file. Agent Plugins 1.0 requires the manifest at the plugin root. Legacy plugins support additional manifest locations. A plugin can also contain any combination of agents, skills, hooks, and MCP server configurations. + +{% data variables.copilot.copilot_cli_short %} supports two plugin formats: + +* Agent Plugins 1.0, a portable format for skills and MCP servers. Declaring the canonical `$schema` in `plugin.json` opts the plugin into this format. +* The legacy {% data variables.product.prodname_copilot_short %} format, which supports {% data variables.product.prodname_copilot_short %}-specific components and configurable component paths. A manifest without the Agent Plugins `$schema` continues to use this format. + +Both formats are supported. Choose Agent Plugins 1.0 when you want to make skills and MCP servers portable across compatible clients. Choose the legacy format when you need custom component paths or are maintaining an existing {% data variables.product.prodname_copilot_short %}-specific plugin. In Agent Plugins 1.0, skills and MCP servers are portable, and {% data variables.product.prodname_copilot_short %}-specific components such as agents, commands, rules, hooks, and LSP servers come from the `com.github.copilot` directory in the plugin. ## Creating a plugin 1. Create a directory for your plugin. -1. Add a `plugin.json` manifest file to the root of the directory. +1. Choose a plugin format, then add a `plugin.json` manifest file to the root of the directory. + + To create an Agent Plugins 1.0 plugin, include the canonical `$schema`: - **Example `plugin.json` file** + **Example Agent Plugins 1.0 `plugin.json` file** {% data reusables.copilot.copilot-cli.cli-example-plugin-file %} + The schema allows only `$schema`, `name`, `version`, `description`, `author`, `homepage`, `repository`, `license`, `keywords`, and `extensions` as top-level fields. Unknown top-level fields are reported and ignored. The `extensions` field is a map of client-specific data keyed by reverse-domain namespace. + + To create a legacy plugin, omit the Agent Plugins `$schema`. You can use component path fields in the manifest: + + **Example legacy `plugin.json` file** + + ```json copy + { + "name": "my-dev-tools", + "description": "React development utilities", + "agents": "agents/", + "skills": ["skills/", "extra-skills/"], + "hooks": "hooks.json", + "mcpServers": ".mcp.json" + } + ``` + For details of the full set of fields you can include in this file, see [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-plugin-reference#pluginjson). -1. Add some components to your plugin by creating the appropriate files and directories for agents, skills, hooks, and MCP server configurations. +1. Add components to your plugin. + + In an Agent Plugins 1.0 plugin, skills must be immediate subdirectories of `skills/`, and each skill must contain a `SKILL.md` file. MCP configuration must be in `mcp.json` at the plugin root. You cannot override these locations in `plugin.json`. {% data variables.product.prodname_copilot_short %}-specific components go in the `com.github.copilot` directory, such as `com.github.copilot/agents/` for custom agents and `com.github.copilot/hooks/hooks.json` for hooks. + + In a legacy plugin, use the default component locations or the component paths configured in `plugin.json`. For example: - 1. Add an agent by creating a `NAME.agent.md` file in an `agents` subdirectory. + 1. Add an agent by creating a `NAME.agent.md` file in an `agents` subdirectory. In an Agent Plugins 1.0 plugin, create the file in `com.github.copilot/agents/`. In a legacy plugin, create it in `agents/`. ```markdown copy --- @@ -78,6 +94,31 @@ my-plugin/ Instructions for the skill... ``` + 1. For an Agent Plugins 1.0 plugin, add MCP servers in a root `mcp.json` file. The MCP configuration uses its own Agent Plugins schema: + + ```json copy + { + "$schema": "https://agent-plugins.org/schemas/1.0.0/mcp.schema.json", + "mcpServers": { + "deployment-api": { + "type": "streamable-http", + "url": "https://deploy.example.com/mcp" + }, + "local-validator": { + "type": "stdio", + "command": "node", + "args": ["${PLUGIN_ROOT}/server/index.js"], + "cwd": "${PLUGIN_ROOT}", + "env": { + "DATA_DIR": "${PLUGIN_DATA}/validator" + } + } + } + } + ``` + + The `streamable-http` transport name is accepted for Streamable HTTP servers. For `stdio` servers, {% data variables.copilot.copilot_cli_short %} provides `PLUGIN_ROOT` and `PLUGIN_DATA` environment variables and expands `${PLUGIN_ROOT}` and `${PLUGIN_DATA}` in `args`, `env` values, and `cwd`. + 1. Install your plugin locally, so that you can test it as you develop it. For example, where `./my-plugin` is the path to your plugin directory, enter: @@ -137,5 +178,6 @@ To distribute your plugin, you can add it to a marketplace. See [AUTOTITLE](/cop ## Further reading +* [Agent Plugins author documentation](https://agent-plugins.org/plugin-authors) * [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/plugins-finding-installing) * [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-plugin-reference) diff --git a/content/copilot/how-tos/copilot-cli/set-up-copilot-cli/add-lsp-servers.md b/content/copilot/how-tos/copilot-cli/set-up-copilot-cli/add-lsp-servers.md index 3530dc658c3a..09ce7588aa6f 100644 --- a/content/copilot/how-tos/copilot-cli/set-up-copilot-cli/add-lsp-servers.md +++ b/content/copilot/how-tos/copilot-cli/set-up-copilot-cli/add-lsp-servers.md @@ -266,6 +266,7 @@ You can list and manage your LSP servers in an interactive CLI session using the | `/lsp` or `/lsp show` | Show the status of all configured LSP servers. | | `/lsp test SERVER-NAME` | Test whether a server starts correctly. | | `/lsp reload` | Reload LSP configurations from disk. | +| `/lsp logs` | Open the live LSP services panel to view server logs. | | `/lsp help` | Show `/lsp` command information. | ### Listing available LSP servers diff --git a/content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md b/content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md index 3d2c4db07bd5..287a281510d5 100644 --- a/content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md +++ b/content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md @@ -44,7 +44,7 @@ Tab switching is paused while another part of the CLI—such as the slash comman The **Issues**, **Pull requests**, and **Gists** tabs all use the same controls. Regardless of which of these tabs you're on: * Use the up and down arrow keys to highlight an item in the list. -* Use the left and right arrow keys to navigate between pages in a list. +* Use Shift+ and Shift+ to move to the previous or next page in a multi-page list. * Press Enter to display a detailed view of the highlighted item. Press Esc in the details view to return to the list. * Press o to open the highlighted item (or, in the detailed view, the current item) on {% data variables.product.prodname_dotcom_the_website %}. * Press c to insert a reference to the item into the prompt input area and jump back to the **Session** tab. @@ -141,7 +141,7 @@ The footer hint bar in the **Issues**, **Pull requests**, and **Gists** tabs sum | --- | --- | --- | | Tab / Shift+Tab | Any home tab | Switch to the next or previous home tab. | | /
j / k | List view | Highlight the next or previous item in a list. | -| /
l / h | List view | Display the next or previous page in a multi-page list. | +| Shift+ / Shift+ | List view | Display the next or previous page in a multi-page list. | | Enter | List view | Open the details view for the highlighted item. | | o | List view or details view | Open the highlighted item on {% data variables.product.prodname_dotcom_the_website %} in your browser. | | c | List view or details view | Insert a reference to the item into the prompt input area and jump back to the **Session** tab. | diff --git a/content/copilot/how-tos/copilot-cli/use-copilot-cli/chronicle.md b/content/copilot/how-tos/copilot-cli/use-copilot-cli/chronicle.md index 3702153baed8..e8b583570d94 100644 --- a/content/copilot/how-tos/copilot-cli/use-copilot-cli/chronicle.md +++ b/content/copilot/how-tos/copilot-cli/use-copilot-cli/chronicle.md @@ -99,7 +99,7 @@ When you type `/chronicle` without arguments, a picker is displayed that lets yo | ---------- | ----------- | | `standup` | Generate a standup report from your recent work. | | `tips` | Get personalized tips based on your usage patterns. | -| `cost tips` | Get feedback on your token spend and suggestions for reducing costs. | +| `cost-tips` | Get feedback on your token spend and suggestions for reducing costs. | | `search` | Search your session history for specific topics or keywords. | | `improve` | Suggest improvements to your {% data variables.product.prodname_copilot_short %} custom instructions file. | | `reindex` | Rebuild the local session store from your session history, and sync session data to your account. | @@ -160,12 +160,12 @@ You can focus the tips on a specific area by appending context after `/chronicle /chronicle tips for better prompting ``` -### `/chronicle cost tips` +### `/chronicle cost-tips` This analyzes your token usage across recent sessions to show where tokens are being spent and suggests ways to reduce costs. {% data variables.product.prodname_copilot_short %} looks at patterns like prompt length, tool call frequency, and continuation steps to identify opportunities for more efficient usage. ```copilot copy -/chronicle cost tips +/chronicle cost-tips ``` ### `/chronicle search` diff --git a/content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md b/content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md index 354528f219b7..b1ee6a496d02 100644 --- a/content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md +++ b/content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md @@ -14,10 +14,12 @@ docsTeamMetrics: Voice input lets you dictate prompts to {% data variables.copilot.copilot_cli_short %} by speaking into your microphone instead of typing on the keyboard. Transcription runs entirely on your local machine. Your audio is not sent over the network. The recognized text is inserted at the cursor position in the prompt input area, where you can edit it before submitting. -## Prerequisite +## Prerequisites You need a working microphone connected to your machine. By default, voice input uses your system's default microphone. +Voice input is supported on Windows (x64 and ARM64), Linux (x64), and macOS on Apple Silicon (ARM64). It is not available on Intel-based Macs. + ## Limitation {% data variables.copilot.copilot_cli_short %} offers a fixed set of speech-to-text models: a multilingual model, which is the default, plus a dedicated English model and a dedicated Spanish model. Only these models are listed in the voice models picker. diff --git a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-azure-boards.md b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-azure-boards.md index a34bb684e624..d2a9d122f749 100644 --- a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-azure-boards.md +++ b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-azure-boards.md @@ -63,4 +63,4 @@ If you already have the Azure Boards application installed on {% data variables. ## Further reading * [AUTOTITLE](/copilot/concepts/agents/cloud-agent/about-cloud-agent) -* [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management) +* [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access) diff --git a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-jira.md b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-jira.md index 8c3b7247aabe..2c554d68422d 100644 --- a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-jira.md +++ b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-jira.md @@ -140,7 +140,7 @@ Use custom instructions to set defaults that apply to every session, such as the {% data variables.copilot.copilot_cloud_agent %} uses {% data variables.product.prodname_actions %} minutes and {% data variables.product.prodname_ai_credits_short %}. -For more information, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +For more information, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## Adding or removing an organization to the {% data variables.product.prodname_copilot %} for Jira app @@ -200,6 +200,6 @@ To resolve this issue, follow these steps to start a new active SSO session for ## Further reading * [AUTOTITLE](/copilot/concepts/agents/cloud-agent/about-cloud-agent) -* [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management) +* [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access) * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers#example-atlassian) * [Collaborate on work items with AI agents](https://support.atlassian.com/jira-software-cloud/docs/collaborate-on-work-items-with-ai-agents/) in the Atlassian documentation diff --git a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-linear.md b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-linear.md index 6d546c1296fa..c4c718e92361 100644 --- a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-linear.md +++ b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-linear.md @@ -96,4 +96,4 @@ After you trigger {% data variables.copilot.copilot_cloud_agent %} from a Linear ## Further reading * [AUTOTITLE](/copilot/concepts/agents/cloud-agent/about-cloud-agent) -* [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management) +* [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access) diff --git a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md index 41c5fd13e32c..9a10abe04f15 100644 --- a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md +++ b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md @@ -129,4 +129,4 @@ You can view and share feedback in our [discussion forum](https://github.com/org ## Further reading * [AUTOTITLE](/copilot/concepts/agents/cloud-agent/about-cloud-agent) -* [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management) +* [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access) diff --git a/content/copilot/how-tos/copilot-on-github/chat-with-copilot/chat-in-mobile.md b/content/copilot/how-tos/copilot-on-github/chat-with-copilot/chat-in-mobile.md index 267cd13ba512..48f05a93d72e 100644 --- a/content/copilot/how-tos/copilot-on-github/chat-with-copilot/chat-in-mobile.md +++ b/content/copilot/how-tos/copilot-on-github/chat-with-copilot/chat-in-mobile.md @@ -24,7 +24,7 @@ category: The following limitations apply to {% data variables.copilot.copilot_mobile_short %}: -* If you're a member of an organization or enterprise, your access to {% data variables.copilot.copilot_mobile_short %} may depend on policies set by your administrator. See [AUTOTITLE](/copilot/concepts/policies). +* If you're a member of an organization or enterprise, your access to {% data variables.copilot.copilot_mobile_short %} may depend on policies set by your administrator. See [AUTOTITLE](/copilot/concepts/enterprise/policies). * If you purchased {% data variables.copilot.copilot_pro_short %}, {% data variables.copilot.copilot_pro_plus_short %}, or {% data variables.copilot.copilot_max_short %} through an in-app purchase on iOS or Android, you cannot enable additional {% data variables.product.prodname_ai_credits %}. To do so, cancel your mobile subscription and re-subscribe on {% data variables.product.prodname_dotcom_the_website %} through a web browser. ## Asking a general question about software development diff --git a/content/copilot/how-tos/copilot-on-github/copilot-for-github-tasks/use-copilot-to-create-or-update-issues.md b/content/copilot/how-tos/copilot-on-github/copilot-for-github-tasks/use-copilot-to-create-or-update-issues.md index cf4e82664d6d..e6a265155af3 100644 --- a/content/copilot/how-tos/copilot-on-github/copilot-for-github-tasks/use-copilot-to-create-or-update-issues.md +++ b/content/copilot/how-tos/copilot-on-github/copilot-for-github-tasks/use-copilot-to-create-or-update-issues.md @@ -81,7 +81,7 @@ Review the draft in the workbench, then click **Review and create** > **Create i ## Assign an issue to {% data variables.product.prodname_copilot_short %} -With {% data variables.copilot.copilot_cloud_agent %} enabled, you can assign an issue to {% data variables.product.prodname_copilot_short %} during creation. See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management). +With {% data variables.copilot.copilot_cloud_agent %} enabled, you can assign an issue to {% data variables.product.prodname_copilot_short %} during creation. See [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access). * **Natural language:** Include `Assign this issue to {% data variables.product.prodname_copilot_short %}.` in your prompt. * **Manually:** Select "{% data variables.product.prodname_copilot_short %}" from the assignee list. diff --git a/content/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers.md b/content/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers.md index 3edc35457f0a..84738cde882e 100644 --- a/content/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers.md +++ b/content/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers.md @@ -87,6 +87,9 @@ The configuration object can contain the following keys: * `tools` (`string[]`): The tools from the MCP server to enable. You may be able to find a list of tools in the server's documentation, or in its code. We strongly recommend that you allowlist specific read-only tools, since the agent will be able to use these tools autonomously and will not ask you for approval first. You can also enable all tools by including `*` in the array. * `type` (`string`): {% data variables.copilot.copilot_cloud_agent %} accepts `"local"`, `"stdio"`, `"http"`, or `"sse"`. +> [!NOTE] +> For {% data variables.copilot.copilot_code-review_short %}, each tool in the MCP server's `tools/list` response must set `annotations.readOnlyHint` to `true` to allow {% data variables.product.prodname_copilot_short %} to use it. {% data variables.copilot.copilot_code-review_short %} excludes tools when this annotation is missing or set to `false`. For more information, see [Tool annotations in the MCP specification](https://modelcontextprotocol.io/specification/2025-11-25/schema#toolannotations-readonlyhint). + **Local MCP specific keys** * `command` (`string`): Required. The command to run to start the MCP server. * `args` (`string[]`): Required. The arguments to pass to the `command`. diff --git a/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/customize-the-agent-environment.md b/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/customize-the-agent-environment.md index 8ee0ce1cf4e6..d8c79e090e7e 100644 --- a/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/customize-the-agent-environment.md +++ b/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/customize-the-agent-environment.md @@ -49,9 +49,9 @@ A `copilot-setup-steps.yml` file looks like a normal {% data variables.product.p > [!NOTE] > The `copilot-setup-steps.yml` workflow won't trigger unless it's present on your default branch. -Here is a simple example of a `copilot-setup-steps.yml` file for a TypeScript project that clones the project, installs Node.js and downloads and caches the project's dependencies. You should customize this to fit your own project's language(s) and dependencies: +Here is a simple example of a `copilot-setup-steps.yml` file for a TypeScript project that clones the project, installs Node.js and downloads and caches the project's dependencies. You should customize this to fit your own project, including its language(s), its dependencies, and the workflow triggers you need. For example, you wouldn't typically run on both `push` and `pull_request`. -```yaml copy +```yaml name: "Copilot Setup Steps" # Automatically run the setup steps when they are changed to allow for easy validation, and diff --git a/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview.md b/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview.md index 07591c5dc3d1..9e83e1e90d97 100644 --- a/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview.md +++ b/content/copilot/how-tos/copilot-on-github/customize-copilot/customize-copilot-overview.md @@ -16,7 +16,7 @@ This quickstart walks you through customizing {% data variables.product.prodname ## Prerequisites * Any paid {% data variables.product.prodname_copilot_short %} plan. For more information, see [AUTOTITLE](/copilot/get-started/plans). -* {% data variables.copilot.copilot_cloud_agent_short_cap_c %} enabled for your organization or account. For more information, see [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management). +* {% data variables.copilot.copilot_cloud_agent_short_cap_c %} enabled for your organization or account. For more information, see [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access). * Write access to a {% data variables.product.github %} repository. ## Step 1: Teach {% data variables.product.prodname_copilot_short %} your project's conventions diff --git a/content/copilot/how-tos/copilot-on-github/set-up-copilot/enable-copilot/set-up-a-dedicated-enterprise-for-copilot-business.md b/content/copilot/how-tos/copilot-on-github/set-up-copilot/enable-copilot/set-up-a-dedicated-enterprise-for-copilot-business.md index 808cf9cf95d9..7e9b7d97774e 100644 --- a/content/copilot/how-tos/copilot-on-github/set-up-copilot/enable-copilot/set-up-a-dedicated-enterprise-for-copilot-business.md +++ b/content/copilot/how-tos/copilot-on-github/set-up-copilot/enable-copilot/set-up-a-dedicated-enterprise-for-copilot-business.md @@ -18,7 +18,7 @@ category: - Manage Copilot for a team --- -Before you begin, see [AUTOTITLE](/copilot/concepts/about-enterprise-accounts-for-copilot-business) to understand how to use a standard enterprise account for {% data variables.copilot.copilot_business_short %} without consuming {% data variables.product.prodname_ghe_cloud %} licenses. +Before you begin, see [AUTOTITLE](/copilot/concepts/enterprise/about-enterprise-accounts-for-copilot-business) to understand how to use a standard enterprise account for {% data variables.copilot.copilot_business_short %} without consuming {% data variables.product.prodname_ghe_cloud %} licenses. ## Create an enterprise account @@ -63,7 +63,7 @@ For detailed steps, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-f After you assign licenses, you can centrally govern how members use {% data variables.product.prodname_copilot_short %}: * **Policies**. Control feature availability with policies in AI Controls. -* **Enterprise managed settings**. Distribute client governance and extensibility configuration from a centrally defined source. For example, you can disable bypass mode, restrict plugins, and set the default model for new conversations. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). +* **Enterprise managed settings**. Distribute client governance and extensibility configuration from a centrally defined source. For example, you can disable bypass mode, restrict plugins, and set the default model for new conversations. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). To use server-managed settings, you need an organization and a `.github-private` repository, which requires a {% data variables.product.prodname_enterprise %} license for the user who creates them. Alternatively, you can deploy managed settings through MDM or a file-based deployment without creating an organization. diff --git a/content/copilot/how-tos/copilot-on-github/use-copilot-agents/copilot-code-review.md b/content/copilot/how-tos/copilot-on-github/use-copilot-agents/copilot-code-review.md index b9ffeb91fd26..e2e0f329d28b 100644 --- a/content/copilot/how-tos/copilot-on-github/use-copilot-agents/copilot-code-review.md +++ b/content/copilot/how-tos/copilot-on-github/use-copilot-agents/copilot-code-review.md @@ -58,13 +58,13 @@ When you push new changes to a pull request that {% data variables.product.prodn To manually request a re-review, click the {% octicon "sync" aria-label="Re-request review" %} button next to {% data variables.product.prodname_copilot_short %}'s name in the **Reviewers** menu. For more information, see [AUTOTITLE](/pull-requests/how-tos/create-pull-requests/requesting-a-pull-request-review). -To automatically request re-reviews on every push, enable automatic code review and select **Review new pushes** in the ruleset settings. For more information, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review#configuring-automatic-code-review-for-repositories-in-an-organization). +To automatically request re-reviews on every push, enable automatic code review and select **Review new pushes** in the ruleset settings. For more information, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review#configuring-automatic-code-review-for-repositories-in-an-organization). When re-reviewing, {% data variables.product.prodname_copilot_short %} may repeat previous comments, even if you resolved or downvoted them. ## Enable automatic reviews -By default, you request reviews from {% data variables.product.prodname_copilot_short %} manually on each pull request. To enable automatic reviews for all pull requests, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review). +By default, you request reviews from {% data variables.product.prodname_copilot_short %} manually on each pull request. To enable automatic reviews for all pull requests, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review). ## Customize reviews with custom instructions diff --git a/content/copilot/how-tos/copilot-on-github/use-copilot-agents/overview.md b/content/copilot/how-tos/copilot-on-github/use-copilot-agents/overview.md index 945ae16c17e1..1e60d6018a65 100644 --- a/content/copilot/how-tos/copilot-on-github/use-copilot-agents/overview.md +++ b/content/copilot/how-tos/copilot-on-github/use-copilot-agents/overview.md @@ -11,7 +11,7 @@ contentType: how-tos ## Prerequisite -You need a repository where {% data variables.copilot.copilot_cloud_agent %} is enabled. For {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} subscribers, an administrator must enable the agent before you can use it. See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management). +You need a repository where {% data variables.copilot.copilot_cloud_agent %} is enabled. For {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} subscribers, an administrator must enable the agent before you can use it. See [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access). ## Step 1: Assign an issue to {% data variables.product.prodname_copilot_short %} diff --git a/content/copilot/how-tos/copilot-sdk/auth/authenticate.md b/content/copilot/how-tos/copilot-sdk/auth/authenticate.md index 7b6068443725..efd6654f5bb8 100644 --- a/content/copilot/how-tos/copilot-sdk/auth/authenticate.md +++ b/content/copilot/how-tos/copilot-sdk/auth/authenticate.md @@ -404,5 +404,5 @@ const client = new CopilotClient({ ## Next steps * [AUTOTITLE](/copilot/how-tos/copilot-sdk/auth/byok) - Learn how to use your own API keys -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) - Build your first Copilot-powered app +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) - Build your first Copilot-powered app * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/mcp) - Connect to external tools diff --git a/content/copilot/how-tos/copilot-sdk/auth/byok.md b/content/copilot/how-tos/copilot-sdk/auth/byok.md index a5ec405399ee..6624808ec975 100644 --- a/content/copilot/how-tos/copilot-sdk/auth/byok.md +++ b/content/copilot/how-tos/copilot-sdk/auth/byok.md @@ -594,4 +594,4 @@ foundry model run phi-4-mini ## Next steps * [AUTOTITLE](/copilot/how-tos/copilot-sdk/auth) - Learn about all authentication methods -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) - Build your first Copilot-powered app +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) - Build your first Copilot-powered app diff --git a/content/copilot/how-tos/copilot-sdk/features/hooks.md b/content/copilot/how-tos/copilot-sdk/features/hooks.md index 3958e751636a..172c78fd7633 100644 --- a/content/copilot/how-tos/copilot-sdk/features/hooks.md +++ b/content/copilot/how-tos/copilot-sdk/features/hooks.md @@ -890,7 +890,7 @@ For full type definitions, input/output field tables, and additional examples fo ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/custom-agents) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/streaming-events) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/troubleshooting/debugging) diff --git a/content/copilot/how-tos/copilot-sdk/features/mcp.md b/content/copilot/how-tos/copilot-sdk/features/mcp.md index d23b054c0bb9..9569df0f34d1 100644 --- a/content/copilot/how-tos/copilot-sdk/features/mcp.md +++ b/content/copilot/how-tos/copilot-sdk/features/mcp.md @@ -340,7 +340,7 @@ For detailed debugging guidance, see the **[AUTOTITLE](/copilot/how-tos/copilot- * [Model Context Protocol Specification](https://modelcontextprotocol.io/) * [MCP Servers Directory](https://github.com/modelcontextprotocol/servers) - Community MCP servers * [GitHub MCP Server](https://github.com/github/github-mcp-server) - Official GitHub MCP server -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) - SDK basics and custom tools +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) - SDK basics and custom tools * [AUTOTITLE](/copilot/how-tos/copilot-sdk/troubleshooting/debugging) - SDK-wide debugging ## See also diff --git a/content/copilot/how-tos/copilot-sdk/features/skills.md b/content/copilot/how-tos/copilot-sdk/features/skills.md index 17676dc35f94..71fa9121dc63 100644 --- a/content/copilot/how-tos/copilot-sdk/features/skills.md +++ b/content/copilot/how-tos/copilot-sdk/features/skills.md @@ -373,6 +373,6 @@ If multiple skills provide conflicting instructions: ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started#create-custom-agents) - Define specialized AI personas -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started#step-4-add-a-custom-tool) - Build your own tools +* [AUTOTITLE](/copilot/get-started/sdk-quickstart#create-custom-agents) - Define specialized AI personas +* [AUTOTITLE](/copilot/get-started/sdk-quickstart#step-4-add-a-custom-tool) - Build your own tools * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/mcp) - Connect external tool providers diff --git a/content/copilot/how-tos/copilot-sdk/features/steering-and-queueing.md b/content/copilot/how-tos/copilot-sdk/features/steering-and-queueing.md index b1576cef0332..3669f9c5c2ca 100644 --- a/content/copilot/how-tos/copilot-sdk/features/steering-and-queueing.md +++ b/content/copilot/how-tos/copilot-sdk/features/steering-and-queueing.md @@ -546,7 +546,7 @@ class InteractiveChat { ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started): Set up a session and send messages +* [AUTOTITLE](/copilot/get-started/sdk-quickstart): Set up a session and send messages * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/custom-agents): Define specialized agents with scoped tools * [AUTOTITLE](/copilot/how-tos/copilot-sdk/hooks/hooks-overview): React to session lifecycle events * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/session-persistence): Resume sessions across restarts diff --git a/content/copilot/how-tos/copilot-sdk/hooks/hooks-overview.md b/content/copilot/how-tos/copilot-sdk/hooks/hooks-overview.md index 2a5df49b0ab7..58541e6eeb89 100644 --- a/content/copilot/how-tos/copilot-sdk/hooks/hooks-overview.md +++ b/content/copilot/how-tos/copilot-sdk/hooks/hooks-overview.md @@ -277,6 +277,6 @@ const session = await client.createSession({ ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started#step-4-add-a-custom-tool) +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) +* [AUTOTITLE](/copilot/get-started/sdk-quickstart#step-4-add-a-custom-tool) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/troubleshooting/debugging) diff --git a/content/copilot/how-tos/copilot-sdk/index.md b/content/copilot/how-tos/copilot-sdk/index.md index 094b1f3411a1..2285a39ff9fa 100644 --- a/content/copilot/how-tos/copilot-sdk/index.md +++ b/content/copilot/how-tos/copilot-sdk/index.md @@ -9,7 +9,6 @@ versions: ghec: '*' contentType: how-tos children: - - /getting-started - /auth - /features - /hooks diff --git a/content/copilot/how-tos/copilot-sdk/integrations/microsoft-agent-framework.md b/content/copilot/how-tos/copilot-sdk/integrations/microsoft-agent-framework.md index 2bc40d5b2b24..ce4a8769c230 100644 --- a/content/copilot/how-tos/copilot-sdk/integrations/microsoft-agent-framework.md +++ b/content/copilot/how-tos/copilot-sdk/integrations/microsoft-agent-framework.md @@ -33,7 +33,7 @@ The Microsoft Agent Framework is the unified successor to Semantic Kernel and Au Before you begin, ensure you have: -* A working [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) in your language of choice +* A working [AUTOTITLE](/copilot/get-started/sdk-quickstart) in your language of choice * A GitHub Copilot subscription (Individual, Business, or Enterprise) * The Copilot CLI installed or available via the SDK's bundled CLI @@ -593,7 +593,7 @@ client.stop().get(); ### Copilot SDK options (passed through) -All standard [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) options are still available when creating the underlying Copilot client. The MAF wrapper delegates to the SDK under the hood: +All standard [AUTOTITLE](/copilot/get-started/sdk-quickstart) options are still available when creating the underlying Copilot client. The MAF wrapper delegates to the SDK under the hood: | SDK Feature | MAF Support | |-------------|-------------| @@ -661,7 +661,7 @@ catch (AgentException ex) ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started): initial Copilot SDK setup +* [AUTOTITLE](/copilot/get-started/sdk-quickstart): initial Copilot SDK setup * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/custom-agents): define specialized sub-agents within the SDK * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/skills): reusable prompt modules * [Microsoft Agent Framework documentation](https://learn.microsoft.com/en-us/agent-framework/agents/providers/github-copilot): official MAF docs for the Copilot provider diff --git a/content/copilot/how-tos/copilot-sdk/setup/bundled-cli.md b/content/copilot/how-tos/copilot-sdk/setup/bundled-cli.md index 7f9f3b012772..51076cb21120 100644 --- a/content/copilot/how-tos/copilot-sdk/setup/bundled-cli.md +++ b/content/copilot/how-tos/copilot-sdk/setup/bundled-cli.md @@ -215,4 +215,4 @@ Session state persists at `~/.copilot/session-state/{sessionId}/`. * **[AUTOTITLE](/copilot/how-tos/copilot-sdk/auth/byok)**: Use your own model provider keys * **[AUTOTITLE](/copilot/how-tos/copilot-sdk/features/session-persistence)**: Advanced session management -* **[AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started)**: Build a complete app +* **[AUTOTITLE](/copilot/get-started/sdk-quickstart)**: Build a complete app diff --git a/content/copilot/how-tos/copilot-sdk/setup/choosing-a-setup-path.md b/content/copilot/how-tos/copilot-sdk/setup/choosing-a-setup-path.md index 79d5e41f9608..34c16e7d36cd 100644 --- a/content/copilot/how-tos/copilot-sdk/setup/choosing-a-setup-path.md +++ b/content/copilot/how-tos/copilot-sdk/setup/choosing-a-setup-path.md @@ -101,7 +101,7 @@ All guides assume you have: * Go: `go get github.com/github/copilot-sdk/go` (requires separate CLI installation) * .NET: `dotnet add package GitHub.Copilot.SDK` -If you're brand new, start with the **[AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started)** first, then come back here for production configuration. +If you're brand new, start with the **[AUTOTITLE](/copilot/get-started/sdk-quickstart)** first, then come back here for production configuration. ## Next steps diff --git a/content/copilot/how-tos/copilot-sdk/setup/local-cli.md b/content/copilot/how-tos/copilot-sdk/setup/local-cli.md index 541c481c4038..8efe570391ed 100644 --- a/content/copilot/how-tos/copilot-sdk/setup/local-cli.md +++ b/content/copilot/how-tos/copilot-sdk/setup/local-cli.md @@ -177,5 +177,5 @@ Session state is stored locally at `~/.copilot/session-state/{sessionId}/`. ## Next steps * **[AUTOTITLE](/copilot/how-tos/copilot-sdk/setup/bundled-cli)**: Use the SDK's built-in CLI (recommended for most use cases) -* **[AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started)**: Build a complete interactive app +* **[AUTOTITLE](/copilot/get-started/sdk-quickstart)**: Build a complete interactive app * **[AUTOTITLE](/copilot/how-tos/copilot-sdk/auth/authenticate)**: All auth methods in detail diff --git a/content/copilot/how-tos/copilot-sdk/troubleshooting/compatibility.md b/content/copilot/how-tos/copilot-sdk/troubleshooting/compatibility.md index 4499e127ded7..5a1f9a6cd656 100644 --- a/content/copilot/how-tos/copilot-sdk/troubleshooting/compatibility.md +++ b/content/copilot/how-tos/copilot-sdk/troubleshooting/compatibility.md @@ -308,7 +308,7 @@ console.log("Protocol version:", status.protocolVersion); ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/hooks/hooks-overview) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/mcp) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/troubleshooting/debugging) diff --git a/content/copilot/how-tos/copilot-sdk/troubleshooting/debugging.md b/content/copilot/how-tos/copilot-sdk/troubleshooting/debugging.md index bcd88f945ae6..5f99af3540d1 100644 --- a/content/copilot/how-tos/copilot-sdk/troubleshooting/debugging.md +++ b/content/copilot/how-tos/copilot-sdk/troubleshooting/debugging.md @@ -538,7 +538,7 @@ If you're still stuck: ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/mcp) - MCP configuration and setup * [AUTOTITLE](/copilot/how-tos/copilot-sdk/troubleshooting/mcp-debugging) - Detailed MCP troubleshooting * [API Reference](https://github.com/github/copilot-sdk) diff --git a/content/copilot/how-tos/github-copilot-app/customize-github-copilot-app.md b/content/copilot/how-tos/github-copilot-app/customize-github-copilot-app.md index 2447d870f801..e8f251e7adfa 100644 --- a/content/copilot/how-tos/github-copilot-app/customize-github-copilot-app.md +++ b/content/copilot/how-tos/github-copilot-app/customize-github-copilot-app.md @@ -104,4 +104,4 @@ Use canvas extensions to build shared, agent-driven artifacts and interfaces for Enterprise and organization owners can set policies to govern how {% data variables.product.prodname_copilot_short %} is used across surfaces. For the major policies supported by the {% data variables.copilot.github_copilot_app %}, see [AUTOTITLE](/copilot/reference/supported-surfaces-for-policies). -Enterprises can also define a `{% data variables.copilot.managed_setting_file %}` file to control which actions users can take in supported {% data variables.product.prodname_copilot_short %} clients, such as which plugins users can install and whether "YOLO-style" commands are permitted. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/configure-enterprise-managed-settings). +Enterprises can also define a `{% data variables.copilot.managed_setting_file %}` file to control which actions users can take in supported {% data variables.product.prodname_copilot_short %} clients, such as which plugins users can install and whether "YOLO-style" commands are permitted. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/use-managed-settings/get-started). diff --git a/content/copilot/how-tos/github-copilot-app/using-automations.md b/content/copilot/how-tos/github-copilot-app/using-automations.md index 91bce8c3fd60..771648e80671 100644 --- a/content/copilot/how-tos/github-copilot-app/using-automations.md +++ b/content/copilot/how-tos/github-copilot-app/using-automations.md @@ -36,7 +36,7 @@ Open **[Automations](https://github.com/copilot/app/launch?open=ghapp%3A%2F%2Fau To use cloud {% data variables.copilot.copilot_automations %}, make sure the following settings are enabled. -* {% data variables.copilot.copilot_cloud_agent %} must be enabled for the repository. If you have {% data variables.copilot.copilot_business_short %} or {% data variables.copilot.copilot_enterprise_short %}, an administrator must enable the {% data variables.copilot.copilot_cloud_agent %} policy. See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management). +* {% data variables.copilot.copilot_cloud_agent %} must be enabled for the repository. If you have {% data variables.copilot.copilot_business_short %} or {% data variables.copilot.copilot_enterprise_short %}, an administrator must enable the {% data variables.copilot.copilot_cloud_agent %} policy. See [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access). * The organization must allow both {% data variables.copilot.copilot_cloud_agent %} and {% data variables.copilot.copilot_automations %} in the repository (both are enabled by default). See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/add-copilot-cloud-agent). * If you want to create {% data variables.copilot.copilot_automations %} that can listen to events triggered by users without write access, disable the "Only allow automations to be triggered by users with write access" setting in {% data variables.copilot.copilot_cloud_agent %} repository settings. diff --git a/content/copilot/how-tos/use-copilot-agents/cloud-agent/use-cloud-agent-on-github.md b/content/copilot/how-tos/use-copilot-agents/cloud-agent/use-cloud-agent-on-github.md index dd6f4579c433..1be6dcd31f13 100644 --- a/content/copilot/how-tos/use-copilot-agents/cloud-agent/use-cloud-agent-on-github.md +++ b/content/copilot/how-tos/use-copilot-agents/cloud-agent/use-cloud-agent-on-github.md @@ -138,11 +138,30 @@ When an {% data variables.product.prodname_actions %} workflow run fails on a pu ## Continuing work on a pull request +You can ask {% data variables.product.prodname_copilot_short %} to make changes or address review comments on an existing pull request. You can then track the resulting session and provide follow-up instructions. + +### Asking {% data variables.product.prodname_copilot_short %} to make changes + You can mention `@copilot` in a comment on any pull request to ask {% data variables.product.prodname_copilot_short %} to make changes. This works on pull requests created by {% data variables.product.prodname_copilot_short %} and on pull requests you or others created. By default, {% data variables.product.prodname_copilot_short %} pushes commits directly to the pull request branch. To create a separate pull request instead, describe that in your comment. You can also check out the branch and push changes yourself. -Batch review comments instead of submitting them individually. When submitting a pull request comment (not a review or review comment) through the {% data variables.product.github %} web interface, select a model with the model picker. {% data variables.product.prodname_copilot_short %} uses the model from the original pull request by default. +When submitting a pull request comment (not a review or review comment) through the {% data variables.product.github %} web interface, select a model with the model picker. {% data variables.product.prodname_copilot_short %} uses the model from the original pull request by default. + +### Delegating review comments + +You can delegate review comments to have {% data variables.product.prodname_copilot_short %} implement feedback from human reviewers and {% data variables.copilot.copilot_code-review %}. + +1. In the pull request, open the **Files changed** tab. +1. Navigate to the first review comment you want {% data variables.product.prodname_copilot_short %} to implement. + * To delegate one comment, click **Fix with {% data variables.product.prodname_copilot_short %}**. + * To delegate multiple comments, click **Add to batch**. Continue to add the comments you want {% data variables.product.prodname_copilot_short %} to work on. +1. In the **Manage batch** panel, add any additional instructions, and optionally select a model with the model picker. +1. Choose how you want {% data variables.product.prodname_copilot_short %} to apply the changes: + * To commit the changes directly to the branch, click **{% octicon "agent" aria-label="The Agents icon" %} Fix and commit**. + * To have {% data variables.product.prodname_copilot_short %} create a new pull request with the changes, click **Fix and open pull request** from the dropdown menu. + +### Tracking and continuing a session {% data reusables.copilot.cloud-agent.write-access-required %} diff --git a/content/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review.md b/content/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review.md index 25546e4d8a1f..4c2d03f0dd06 100644 --- a/content/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review.md +++ b/content/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review.md @@ -66,7 +66,7 @@ You can also request a review from {% data variables.product.prodname_copilot_sh ## Enabling automatic reviews -By default, you manually request a review from {% data variables.product.prodname_copilot_short %} on each pull request, in the same way you would request a review from a human. However, you can set up {% data variables.product.prodname_copilot_short %} to automatically review all pull requests. See [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review). +By default, you manually request a review from {% data variables.product.prodname_copilot_short %} on each pull request, in the same way you would request a review from a human. However, you can set up {% data variables.product.prodname_copilot_short %} to automatically review all pull requests. See [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review). ## Requesting a re-review from {% data variables.product.prodname_copilot_short %} @@ -74,7 +74,7 @@ When you push changes to a pull request that {% data variables.product.prodname_ To manually request a re-review from {% data variables.product.prodname_copilot_short %}, click the {% octicon "sync" aria-label="Re-request review" %} button next to {% data variables.product.prodname_copilot_short %}'s name in the **Reviewers** menu. For more information, see [AUTOTITLE](/pull-requests/how-tos/create-pull-requests/requesting-a-pull-request-review). -To automatically request re-reviews from {% data variables.product.prodname_copilot_short %} on every push, enable automatic code review for the repository and select **Review new pushes** in the ruleset settings. For more information, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review#configuring-automatic-code-review-for-repositories-in-an-organization). +To automatically request re-reviews from {% data variables.product.prodname_copilot_short %} on every push, enable automatic code review for the repository and select **Review new pushes** in the ruleset settings. For more information, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review#configuring-automatic-code-review-for-repositories-in-an-organization). > [!NOTE] When re-reviewing a pull request, {% data variables.product.prodname_copilot_short %} may repeat the same comments again, even if they have been dismissed with the "Resolve conversation" button or downvoted with the thumbs down (:-1:) button. @@ -98,7 +98,7 @@ Every {% data variables.copilot.copilot_code-review_short %} includes an approva When approvals are enabled, {% data variables.product.prodname_copilot_short %} can submit an approving review that satisfies your repository's required-approval rule the same way a teammate's approval would. If new commits are pushed after {% data variables.product.prodname_copilot_short %} approves, the approval is dismissed, and you can re-request a review. For more details on required reviews, see [AUTOTITLE](/pull-requests/how-tos/review-pull-requests/approving-a-pull-request-with-required-reviews). -Approvals are off by default and can be configured at the enterprise, organization, and repository levels. Repository administrators can also use file paths to control which {% data variables.product.prodname_copilot_short %} approvals count toward merge requirements. For configuration steps, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review#customizing-copilot-code-review). +Approvals are off by default and can be configured at the enterprise, organization, and repository levels. Repository administrators can also use file paths to control which {% data variables.product.prodname_copilot_short %} approvals count toward merge requirements. For configuration steps, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review#customizing-copilot-code-review). ## Customizing {% data variables.product.prodname_copilot_short %}'s reviews with custom instructions diff --git a/content/copilot/reference/ai-models/model-comparison.md b/content/copilot/reference/ai-models/model-comparison.md index 1a9a81fa8558..28b50a720059 100644 --- a/content/copilot/reference/ai-models/model-comparison.md +++ b/content/copilot/reference/ai-models/model-comparison.md @@ -28,7 +28,7 @@ Use this table to find a suitable model quickly, see more detail in the sections | Model | Task area | Excels at (primary use case) | Further reading | |----------------------------------------------------|-----------------------|------------------------------|-----------------------------| | {% for model in tables.copilot.model-comparison %} | -| {{ model.name }}{% if model.name == 'MAI-Code-1-Flash' or model.name == 'MAI-Code-1.1-Flash' %}[^mai-code-1-flash]{% elsif model.name == 'Kimi K3' %}[^kimi-k3]{% endif %} | {{ model.task_area }} | {{ model.excels_at }} | {{ model.further_reading }} | +| {{ model.name }}{% if model.name == 'MAI-Code-1.1-Flash' %}[^mai-models]{% elsif model.name == 'Kimi K3' %}[^kimi-k3]{% endif %} | {{ model.task_area }} | {{ model.excels_at }} | {{ model.further_reading }} | | {% endfor %} | ## Task: General-purpose coding and writing @@ -40,7 +40,6 @@ Use these models for common development tasks that require a balance of quality, | {% data variables.copilot.copilot_gpt_53_codex %} | Delivers higher-quality code on complex engineering tasks like features, tests, debugging, refactors, and reviews without lengthy instructions. | | {% data variables.copilot.copilot_gpt_5_mini %} | Reliable default for most coding and writing tasks. Fast, accurate, and works well across languages and frameworks. | | {% data variables.copilot.copilot_gpt_56_terra %} | Balanced all-round choice for everyday interactive and agentic coding. | -| {% data variables.copilot.copilot_mai_code_1_flash %} | Strong instruction-following and adaptive reasoning make it a reliable default for everyday coding tasks, writing, and multi-turn development workflows. | ### When to use these models @@ -65,7 +64,6 @@ These models are optimized for speed and responsiveness. They’re ideal for qui |-------------------------------------------------------|------------------------------------------------------------------------------------------------------------| | {% data variables.copilot.copilot_gpt_56_luna %} | Lightweight, cost-efficient option for smaller, faster tasks. The lowest-cost model in the GPT-5.6 family. | | {% data variables.copilot.copilot_claude_haiku_45 %} | Balances fast responses with quality output. Ideal for small tasks and lightweight code explanations. | -| {% data variables.copilot.copilot_mai_code_1_flash %} | Handles quick coding tasks with adaptive efficiency, stays concise for simple requests and delivers fast, accurate responses without unnecessary depth. | ### When to use these models @@ -144,7 +142,7 @@ Some models have behaviors, limitations, or safeguards that are useful to unders ## Next steps -[^mai-code-1-flash]: MAI models are continuously improving models. Performance and behavior may evolve over time as new checkpoints are released. +[^mai-models]: MAI models are continuously improving models. Performance and behavior may evolve over time as new checkpoints are released. [^kimi-k3]: For important information about {% data variables.copilot.copilot_kimi_k3 %} behavior and safeguards, see [Model-specific considerations](#kimi-k3). diff --git a/content/copilot/reference/ai-models/model-hosting.md b/content/copilot/reference/ai-models/model-hosting.md index 9dd754d33b1d..8dbd481ef9ce 100644 --- a/content/copilot/reference/ai-models/model-hosting.md +++ b/content/copilot/reference/ai-models/model-hosting.md @@ -116,16 +116,15 @@ For more information, see [xAI's enterprise terms of service](https://x.ai/legal Used for: -* {% data variables.copilot.copilot_mai_code_1_flash %} * {% data variables.copilot.copilot_mai_code_1_1_flash %} -{% data variables.copilot.copilot_mai_code_1_flash %} and {% data variables.copilot.copilot_mai_code_1_1_flash %} are first-party Microsoft models hosted on Azure in {% data variables.product.github %}'s tenant. +{% data variables.copilot.copilot_mai_code_1_1_flash %} is a first-party Microsoft model hosted on Azure in {% data variables.product.github %}'s tenant. {% data variables.product.github %} does not use {% data variables.copilot.copilot_business_short %} or {% data variables.copilot.copilot_enterprise_short %} customer data to train AI models. For individual subscribers—{% data variables.copilot.copilot_free_short %}, {% data variables.copilot.copilot_pro_short %}, {% data variables.copilot.copilot_pro_plus_short %}, and {% data variables.copilot.copilot_max_short %} users—{% data variables.product.github %} may use {% data variables.product.prodname_copilot_short %} interaction data, including prompts (inputs), suggestions (outputs), and code snippets generated during {% data variables.product.prodname_copilot_short %} sessions to train and improve AI models, in accordance with our [AUTOTITLE](/free-pro-team@latest/site-policy/privacy-policies/github-general-privacy-statement) and applicable user settings. Individual subscribers can opt out of having their data used for AI model training. To manage this setting, see [AUTOTITLE](/copilot/how-tos/manage-your-account/manage-policies#model-training-and-improvements). -{% data variables.copilot.copilot_mai_code_1_flash %} and {% data variables.copilot.copilot_mai_code_1_1_flash %} are served on Microsoft Azure AI Foundry within {% data variables.product.github %}'s tenant and are subject to {% data variables.product.github %}'s data handling configuration for that deployment. For details about how data is processed, retained, and secured for models served on Azure AI Foundry, see [Data, privacy, and security for Foundry Models sold by Azure](https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal) in the Microsoft documentation. +{% data variables.copilot.copilot_mai_code_1_1_flash %} is served on Microsoft Azure AI Foundry within {% data variables.product.github %}'s tenant and is subject to {% data variables.product.github %}'s data handling configuration for that deployment. For details about how data is processed, retained, and secured for models served on Azure AI Foundry, see [Data, privacy, and security for Foundry Models sold by Azure](https://learn.microsoft.com/en-us/azure/foundry/responsible-ai/openai/data-privacy?tabs=azure-portal) in the Microsoft documentation. -When using {% data variables.copilot.copilot_mai_code_1_flash %} or {% data variables.copilot.copilot_mai_code_1_1_flash %}, input prompts and output completions continue to run through {% data variables.product.prodname_copilot %}'s content filters for public code matching, when applied, along with those for harmful or offensive content. +When using {% data variables.copilot.copilot_mai_code_1_1_flash %}, input prompts and output completions continue to run through {% data variables.product.prodname_copilot %}'s content filters for public code matching, when applied, along with those for harmful or offensive content. ## Open-weight models diff --git a/content/copilot/reference/ai-models/supported-models.md b/content/copilot/reference/ai-models/supported-models.md index 4d67e8352f60..7fce5e8bdc9f 100644 --- a/content/copilot/reference/ai-models/supported-models.md +++ b/content/copilot/reference/ai-models/supported-models.md @@ -39,7 +39,7 @@ This table lists the AI models available in {% data variables.product.prodname_c | Model name | Provider | Release status | |--------------------------------------------------------|-----------|----------------------------| | {% for model in tables.copilot.model-release-status %} | -| {{ model.name }}{% if model.name == 'GPT-5.4 nano' %}[^gpt54nano]{% endif %}{% if model.name == 'MAI-Code-1-Flash' or model.name == 'MAI-Code-1.1-Flash' %}[^mai-code-1-flash]{% endif %}{% if model.name == 'Claude Fable 5' or model.name == 'Claude Fable 5.1' %}[^claude-fable-5]{% endif %}| {{ model.provider }} | {{ model.release_status }} | +| {{ model.name }}{% if model.name == 'GPT-5.4 nano' %}[^gpt54nano]{% endif %}{% if model.name == 'MAI-Code-1.1-Flash' %}[^mai-models]{% endif %}{% if model.name == 'Claude Fable 5' or model.name == 'Claude Fable 5.1' %}[^claude-fable-5]{% endif %}| {{ model.provider }} | {{ model.release_status }} | | {% endfor %} | {% endrowheaders %} @@ -142,7 +142,6 @@ Some {% data variables.product.prodname_copilot_short %} models require minimum | {% data variables.copilot.copilot_claude_fable_51 %} | TBD | TBD | TBD | TBD | TBD | | {% data variables.copilot.copilot_kimi_k27_code %} | `v1.127` | `17.14.6` | `1.9.1-251` | TBD | TBD | | {% data variables.copilot.copilot_kimi_k3 %} | `v1.131` | TBD | TBD | TBD | TBD | -| {% data variables.copilot.copilot_mai_code_1_flash %} | `v1.121` | TBD | TBD | TBD | TBD | | {% data variables.copilot.copilot_mai_code_1_1_flash %} | `v1.121` | TBD | TBD | TBD | TBD | | {% data variables.copilot.copilot_grok_45 %} | TBD | `17.14.19` | TBD | TBD | TBD | | {% data variables.copilot.copilot_grok_46 %} | TBD | TBD | TBD | TBD | TBD | @@ -186,7 +185,7 @@ Access to evaluation models in {% data variables.copilot.copilot_auto_model_sele {% data reusables.enterprise-accounts.ai-controls-tab %} 1. For the **Evaluation models in {% data variables.product.prodname_copilot_short %} {% data variables.copilot.copilot_auto_model_selection_short %}** setting, select **Disabled** from the dropdown. -[^mai-code-1-flash]: MAI models are continuously improving models. Performance and behavior may evolve over time as new checkpoints are released. +[^mai-models]: MAI models are continuously improving models. Performance and behavior may evolve over time as new checkpoints are released. ## Utility models diff --git a/content/copilot/reference/copilot-billing/models-and-pricing.md b/content/copilot/reference/copilot-billing/models-and-pricing.md index 0ee0e06a752b..808a74eda135 100644 --- a/content/copilot/reference/copilot-billing/models-and-pricing.md +++ b/content/copilot/reference/copilot-billing/models-and-pricing.md @@ -19,7 +19,7 @@ The cost of an interaction depends on two things: the model and the number of to How {% data variables.product.prodname_copilot_short %} usage is tracked and billed depends on your plan type: * Individual plans ({% data variables.copilot.copilot_free_short %}, {% data variables.copilot.copilot_pro_short %}, {% data variables.copilot.copilot_pro_plus_short %}, and {% data variables.copilot.copilot_max_short %}) include {% data variables.product.prodname_ai_credits %} allowances that vary by plan. For details, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-individuals). -* {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} include per-user {% data variables.product.prodname_ai_credits %} allowances that are pooled at the billing entity level. For details, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +* {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} include per-user {% data variables.product.prodname_ai_credits %} allowances that are pooled at the billing entity level. For details, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). When usage exceeds the included allowances for any {% data variables.product.prodname_copilot_short %} plan, additional usage is billed in {% data variables.product.prodname_ai_credits %} at the per-token rates shown in the pricing tables below (1 {% data variables.product.prodname_ai_credit_singular %} = {% data variables.product.prodname_ai_credits_value %}). diff --git a/content/copilot/reference/copilot-billing/request-based-billing-legacy/model-multipliers-for-annual-plans.md b/content/copilot/reference/copilot-billing/request-based-billing-legacy/model-multipliers-for-annual-plans.md index d19fb18537df..8eaedc745014 100644 --- a/content/copilot/reference/copilot-billing/request-based-billing-legacy/model-multipliers-for-annual-plans.md +++ b/content/copilot/reference/copilot-billing/request-based-billing-legacy/model-multipliers-for-annual-plans.md @@ -35,7 +35,6 @@ The following table shows the model multipliers per supported model. > > * {% data variables.copilot.copilot_claude_sonnet_46 %} > * {% data variables.copilot.copilot_gpt_54_mini %} -> * The multiplier for {% data variables.copilot.copilot_mai_code_1_flash %} is a promotional rate. > > If you use {% data variables.copilot.copilot_auto_model_selection_short %} in {% data variables.copilot.copilot_chat_short %}, {% data variables.copilot.copilot_cli_short %}, {% data variables.copilot.github_copilot_app %}, or {% data variables.copilot.copilot_cloud_agent %}, you qualify for a 10% discount. For example, if a model has a multiplier of 1x you'll be billed at 0.9x instead. diff --git a/content/copilot/reference/copilot-cli-reference/acp-server.md b/content/copilot/reference/copilot-cli-reference/acp-server.md index 2f128414e51b..23d3911edf8a 100644 --- a/content/copilot/reference/copilot-cli-reference/acp-server.md +++ b/content/copilot/reference/copilot-cli-reference/acp-server.md @@ -32,7 +32,7 @@ The Agent Client Protocol (ACP) is a protocol that standardizes communication be Use the `--acp` option of the `copilot` command to start the CLI's ACP server. You can specify the transport mode with either the `--stdio` or `--port` options. If no transport mode is specified, the server defaults to stdio mode. -ACP mode allows sessions with a configured bring-your-own-key (BYOK) provider (`COPILOT_PROVIDER_*` environment variables) to run without {% data variables.product.github %} login, matching the behavior of `-p`/interactive mode. +ACP mode allows sessions with a configured bring-your-own-key (BYOK) provider (`COPILOT_PROVIDER_*` environment variables, or a providers configuration file—see `COPILOT_PROVIDERS_CONFIG` in [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#environment-variables)) to run without {% data variables.product.github %} login, matching the behavior of `-p`/interactive mode. ### Options applied to every session diff --git a/content/copilot/reference/copilot-cli-reference/cli-command-reference.md b/content/copilot/reference/copilot-cli-reference/cli-command-reference.md index d16c02a16bdf..67c5488643bc 100644 --- a/content/copilot/reference/copilot-cli-reference/cli-command-reference.md +++ b/content/copilot/reference/copilot-cli-reference/cli-command-reference.md @@ -25,9 +25,10 @@ docsTeamMetrics: | `copilot init` | Initialize {% data variables.product.prodname_copilot_short %} custom instructions for this repository. | | `copilot login [OPTION]` | Authenticate with {% data variables.product.prodname_copilot_short %} via OAuth. See [`copilot login` options](#copilot-login-options). | | `copilot mcp` | Manage MCP server configurations from the command line. | -| `copilot plugin` | Manage plugins and plugin marketplaces. | -| `copilot plugins list` | Non-interactively inspect every plugin, MCP server, skill, instruction source, and language server discovered for the current working directory. See [Using `copilot plugins list`](#using-copilot-plugins-list). | -| `copilot skill` | Manage agent skills from the command line (list, add, and remove skills). See [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/add-skills). | +| `copilot plugin` | Manage plugins and plugin marketplaces, including listing, enabling, disabling, and uninstalling them. `copilot plugins` (plural) is a legacy alias. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-plugin-reference). | +| `copilot instruction` | Non-interactively list custom instruction sources discovered for the current working directory. See [Using `copilot instruction`](#using-copilot-instruction). | +| `copilot lsp` | Non-interactively list configured language servers. See [Using `copilot lsp`](#using-copilot-lsp). | +| `copilot skill` | Manage agent skills from the command line (list, add, remove, enable, and disable skills). See [Managing skills non-interactively](#managing-skills-non-interactively). | | `copilot update` | Download and install the latest version. | | `copilot version` | Display version information and check for updates. | @@ -102,77 +103,43 @@ Fish: copilot completion fish > ~/.config/fish/completions/copilot.fish ``` -### Using `copilot plugins list` +### Managing plugins non-interactively -Run `copilot plugins list` to inspect every plugin, MCP server, skill, instruction source, and language server discovered for the current working directory. Output is grouped by kind, then by configuration scope (user, repository, organization, plugin-contributed, built-in, or unknown). +Use `copilot plugin` to install, list, update, enable, disable, and uninstall plugins from the command line, without opening an interactive session. `copilot plugins` (plural) is a legacy alias for the same command. For the full command and option reference, see [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-plugin-reference). -```bash -# List everything for the current workspace -copilot plugins list +### Using `copilot instruction` -# Only MCP servers and skills -copilot plugins list --kind mcp --kind skill +Run `copilot instruction list` to non-interactively list custom instruction sources discovered for the current working directory. This replaces the retired `copilot plugins list --kind instruction`. -# Only user-scoped resources, as JSON -copilot plugins list --scope user --json +```bash +copilot instruction list +copilot instruction list --json ``` | Option | Description | |-----------------------|------------------------------------------------------------------------------------| -| `--kind KINDS` | Filter by kind. Repeatable or comma-separated: `mcp`, `skill`, `instruction`, `plugin`, `lsp`. | -| `--scope SCOPES` | Filter by configuration scope. Repeatable or comma-separated. | -| `--json` | Emit machine-readable JSON instead of grouped text. | +| `--json` | Emit JSON instead of text. | | `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | -Custom agents and session-scoped hooks aren't covered by `copilot plugins list`; both require a live session. +Each `--json` entry has the shape `{ id, label, description?, location, type, sourcePath, defaultDisabled, applyTo? }`. This listing resolves plugin-contributed instructions against your global user settings only—an instruction enabled by a trusted repository or by managed settings might not appear here even though a live session applies it. -### `copilot plugins enable` / `copilot plugins disable` +### Using `copilot lsp` -Enable or disable a plugin, MCP server, or skill by name. The change persists to configuration and applies to future sessions. +Run `copilot lsp list` to non-interactively list configured language servers. This replaces the retired `copilot plugins list --kind lsp`. This command is inspect-only; use the `/lsp` slash command in an interactive session to start, stop, or reload a language server. ```bash -# Disable an MCP server -copilot plugins disable github --mcp - -# Enable a skill -copilot plugins enable my-skill --skill - -# Enable a plugin (default kind) -copilot plugins enable spark@copilot-plugins +copilot lsp list +copilot lsp list --json ``` | Option | Description | -|------------------------|------------------------------------------------------------------------------------| -| `--plugin` | Target a plugin (default). | -| `--mcp` | Target an MCP server. | -| `--skill` | Target a skill. | +|-----------------------|------------------------------------------------------------------------------------| +| `--json` | Emit JSON instead of text. | | `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | -Instructions are session-scoped only and can't be toggled with these commands. Language servers, agents, and hooks are managed elsewhere. - -### `copilot plugins remove` - -Uninstall a plugin, remove an MCP server, or delete a skill by name. - -```bash -# Remove an MCP server -copilot plugins remove github --mcp - -# Delete a personal or project skill -copilot plugins remove my-skill --skill - -# Uninstall a plugin (default kind) -copilot plugins remove spark@copilot-plugins -``` - -| Option | Description | -|------------------------|------------------------------------------------------------------------------------| -| `--plugin` | Remove a plugin (default). | -| `--mcp` | Remove an MCP server. | -| `--skill` | Remove a personal or project skill. | -| `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | +Each `--json` entry has the shape `{ id, fileExtensions?, sourcePlugin? }`. -With `--skill`, pass either a skill name or the path to a custom skill directory you added. A skill name deletes that skill's files; a custom directory path only unregisters the directory and leaves its files on disk. Only personal and project skills you added can be deleted—skills provided by a plugin or the builtin set can't be removed this way (disable them instead). Instruction sources are discovered from disk and can't be removed here. +Custom agents and session-scoped hooks aren't covered by `copilot instruction`, `copilot lsp`, `copilot plugin`, `copilot mcp`, or `copilot skill`. All require a live session. ## The sessions sidebar @@ -298,8 +265,10 @@ For more information about the sessions sidebar, see [AUTOTITLE](/copilot/how-to | Ctrl+X then `e` | Edit the prompt in an external editor (`$EDITOR`). | | Ctrl+X then `b` | Promote the running task or shell command to the background. | | Ctrl+X then `g` | Collapse or expand the autopilot goal panel. | +| Ctrl+X then `h` | Hide the current-session sidebar. | | Ctrl+X then `o` | Open the most recent link from the timeline. | | Ctrl+X then `v` | Toggle voice dictation on or off. | +| Ctrl+X then `x` | Close the current session. | | Ctrl+Z | Suspend the process to the background (Unix). | | Shift+Enter or Option+Enter (Mac) / Alt+Enter (Windows/Linux) | Insert a newline in the input. | | Shift+Tab | Cycle between standard, plan, and autopilot mode. | @@ -334,6 +303,12 @@ When the tasks dialog is open (opened via `/tasks`): Subagents that spawn their own nested subagents appear as an indented tree; the row you're teleported into is highlighted as "current." While drilled into a subagent's view, you can send it a steering message from the composer the same way you would the main session. +## Restoring an interrupted session + +If a session was still open when its CLI process went away—for example, due to a crash or a machine restart—the next `copilot` startup can offer to restore it, letting you choose which sessions to bring back or start fresh instead. A session whose agent was mid-turn automatically resumes that work once restored. + +This restore behavior is temporarily opt-in while its startup dialog is reworked. Set the `COPILOT_ENABLE_INTERRUPTED_SESSION_RESTORE` environment variable to `1` to enable it. See [Environment variables](#environment-variables). + ## Session picker shortcuts When the session picker is open (opened via `/resume` or `--continue`): @@ -358,6 +333,41 @@ Sessions sort by the following modes: Sessions already open in another window float to the top in all non-relevance sort modes. When no working-directory context is available, the `relevance` mode is skipped. +## Sidebar and sessions tab shortcuts + +The current-session sidebar lets you browse and switch between sessions without leaving the one you're in. On an empty composer, / walk a three-state focus cycle: closed, timeline-focused, and sidebar-focused. Disable the sidebar entirely with the `sidebar` setting—see [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#configuration-file-settings). + +| Shortcut | Purpose | +|----------|---------| +| (Current tab, closed) | Open the sidebar; the timeline keeps focus. | +| (timeline-focused) | Move focus into the sidebar. | +| (sidebar-focused) | Return focus to the timeline. | +| (timeline-focused) | Close the sidebar. | +| Tab/Shift+Tab | Switch tabs (**Current**, **Sessions**, and so on). | +| / (sidebar-focused) | Move the selection cursor; `j`/`k` are aliases. | +| Enter (sidebar-focused) | Switch the foreground session to the selected card. | +| `n` (sidebar-focused) | Spawn a new background session and bring it to the foreground. | +| `s` (sidebar-focused) | Cycle the sort order: recent → created → name → none. | +| `x`, `x` (sidebar-focused) | Close the selected card (armed for one keystroke, shown in red, before closing). | + +The sidebar's divider can be dragged to resize it, and it auto-collapses below a minimum usable width. Each card shows a status dot, the session name, and its Git branch (or working directory when there is no branch). The foreground session's title is highlighted in accent color, and its card carries a persistent subtle fill. The active sort order (`recent`, `created`, `name`, or `none` for insertion order) persists across restarts. + +Mouse actions mirror the keyboard: click a card to switch the foreground session, double-click a card or empty rail space to focus the sidebar, and click the timeline pane while the sidebar is focused to return focus to it. + +The **Sessions** tab lists the current session plus your full resumable session history under a "Resumable" divider: + +| Shortcut | Purpose | +|----------|---------| +| / | Navigate rows. | +| Shift+/ | Page up or down. | +| Enter | Resume the selected session. | +| `n` | Start a new session. | +| `a` | Cycle the filter scope: all → local → remote (cloud). | +| `/` | Search live across name, branch or working directory, repository, and session ID. | +| / | Switch tabs. | + +Remote (cloud) rows in the **Sessions** tab also show online or offline status and the repository. + ## Diff mode shortcuts When diff mode is open (entered via `/diff`): @@ -449,7 +459,7 @@ These are the slash commands you can use from within an interactive CLI session. | `/login` | Log in to {% data variables.product.prodname_copilot_short %}. | | `/logout` | Log out of {% data variables.product.prodname_copilot_short %}. | | `/lsp [show\|test\|reload\|logs\|help] [SERVER-NAME]` | Manage the language server configuration. The `logs` subcommand opens the live LSP services log panel. | -| `/mcp [config\|list\|show\|add\|edit\|delete\|disable\|enable\|auth\|reload\|search] [SERVER-NAME]` | Manage the MCP server configuration. With no subcommand, or with `show`, the plugins dashboard opens showing your MCP servers. Select a server and press Enter for its details and for actions such as enabling or disabling it, or use `show SERVER-NAME` to open that server's details directly. `config` opens the MCP configuration interface instead of the dashboard. `list` (alias `ls`) prints a plain-text list of configured servers with connection status and live state, and is read-only, so it can run while the agent is busy processing a turn. All subcommands other than `config`, `show`, and `list` are blocked until the turn finishes. Sandboxed local servers show a `connected (sandboxed)` status. See [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/add-mcp-servers#managing-mcp-servers). | +| `/mcp [config\|list\|show\|add\|edit\|delete\|disable\|enable\|auth\|reload\|search] [SERVER-NAME]` | Manage the MCP server configuration. With no subcommand, or with `config`, the plugins dashboard opens pinned to the MCP server list; the add, edit, and authenticate forms open inside that dashboard too, so closing a form returns you to the server list. Use `show` or `show SERVER-NAME` to display all configured servers or open one server's details directly, including its available tools, and to enable or disable it. `list` (alias `ls`) prints a plain-text list of configured servers with connection status and live state. Bare `/mcp`, `config`, `show`, and `list` (alias `ls`) are read-only or open the dashboard, so they can run while the agent is busy processing a turn. The mutating subcommands (`add`, `edit`, `delete`, `disable`, `enable`, `auth`, `reload`, and `search`) are blocked until the turn finishes. `edit ` rejects a workspace-sourced server (one defined in a repository's `.mcp.json`) instead of opening the user-tier wizard, since saving would silently create a same-name user entry that the workspace one still shadows. The error names the file to edit directly. `delete ` reports the same file when asked to remove a workspace-sourced server. Sandboxed local servers show a `connected (sandboxed)` status. See [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/add-mcp-servers#managing-mcp-servers). | | `/model [--session\|--global\|--repo\|--local] [MODEL]`, `/models` | Select the AI model you want to use, or choose **Auto**. By default (or with `--session`, alias `-s`), changes the model, reasoning effort, or context window for the current session only, without touching saved settings. `--repo`/`--local` pins the default model in repository settings instead; `--global` (or `/config model`) sets the default for future sessions. Press Tab on a model with a long-context variant to toggle its Context column between the default and long-context window. The picker groups models into sections—press Shift+Tab to cycle grouping between recommended (Recent, Recommended, New, and other models), vendor, and category. A model with vendor-specific data retention terms shows a data retention warning banner with a link to the vendor's policy. Usable mid-turn: a change requested while the agent is running is queued as a cancellable (Ctrl+C) command and applied once the current turn finishes, instead of switching the live model mid-request. See [AUTOTITLE](/copilot/concepts/models/auto-model-selection). | | `/permissions [default\|assisted\|allow-all\|show]` | Switch between permission modes (`default`, `assisted`, `allow-all`), or show the current mode (`show`). This is the canonical command for permission mode changes; `/allow-all` and `/yolo` remain supported as aliases. | | `/permissions reset` | Reset all in-memory tool and path approvals for the current session (re-prompt on next use). | @@ -474,7 +484,7 @@ These are the slash commands you can use from within an interactive CLI session. | `/resume [SESSION-ID]`, `/continue [SESSION-ID]` | Switch to a different session by choosing from a list (optionally specify a session ID). | | `/review [PROMPT]` | Run the code review agent to analyze changes. See [AUTOTITLE](/copilot/how-tos/copilot-cli/use-copilot-cli/agentic-code-review). | | `/rubber-duck [PROMPT]` | Consult the rubber duck agent for a second opinion on plans, code, and tests. See [AUTOTITLE](/copilot/concepts/agents/copilot-cli/rubber-duck). | -| `/sandbox [config\|status\|policy\|enable\|disable]` | Manage OS-level sandboxing that restricts filesystem and network access for shell commands, MCP/LSP servers, and built-in file/web tools. `config` (or bare `/sandbox`) opens the sandbox settings dialog. `status` shows whether sandboxing is enabled. `policy` shows the effective policy, with path grants grouped by source (user-configured, system, working directory, current session, and `~/.copilot`) and access type, plus the network stance and any detected developer tools. `enable`/`disable` turn sandboxing on or off directly. {% data reusables.copilot.experimental %} | +| `/sandbox [config\|status\|policy\|enable\|disable]` | Manage OS-level sandboxing that restricts filesystem and network access for shell commands, MCP/LSP servers, and built-in file/web tools. `config` (or bare `/sandbox`) opens the sandbox settings dialog. `status` shows whether sandboxing is enabled. `policy` shows the effective policy, with path grants grouped by source (user-configured, system, working directory, current session, and `~/.copilot`) and access type, plus the network stance and any detected developer tools. `enable`/`disable` turn sandboxing on or off directly. `status` and `policy` are read-only and can run while the agent is busy processing a turn. `config`, `enable`, and `disable` are queued until the turn finishes. {% data reusables.copilot.experimental %} | | `/search [QUERY]`, `/find [QUERY]` | Search the conversation timeline. | | `/security-review [PROMPT]` | Run a focused security review of active local code changes and return prioritized vulnerability findings with remediation suggestions. This command is not a full repository security audit. | | `/session [info\|checkpoints [n]\|files\|plan\|rename [NAME]\|cleanup\|prune\|delete [ID]\|delete-all]`, `/sessions [info\|checkpoints [n]\|files\|plan\|rename [NAME]\|cleanup\|prune\|delete [ID]\|delete-all]` | Show session information and manage sessions. The `info` subcommand shows session details including the session link (when available). Subcommands: `info`, `checkpoints`, `files`, `plan`, `rename`, `cleanup`, `prune`, `delete`, `delete-all`. | @@ -487,7 +497,7 @@ These are the slash commands you can use from within an interactive CLI session. | `/skills remove ` | Remove a skill by name, or unregister a custom skill directory. | | `/skills reload` | Reload skills from all directories. See [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/add-skills). | | `/statusline`, `/footer` | Configure which items appear in the status line. | -| `/subagents`, `/agents` | Configure default and per-agent subagent models. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#configuration-file-settings). | +| `/subagents`, `/agents` | Configure default and per-agent subagent models. For an agent with `modelPolicy: "required"`—whether set in the agent's own definition or in the `subagents` settings override—the picker shows a locked **Model** entry and a **Model enforcement** row reading "required - cannot be overridden" (or "required by agent definition" when the agent definition itself sets the policy). Switch the policy back to `"preferred"` from the picker to allow overrides again, unless the agent definition requires it. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#configuration-file-settings). | | `/tasks` | View and manage tasks (subagents and shell commands). | | `/terminal-setup` | Configure the terminal for multiline input support (Shift+Enter and Ctrl+Enter). | | `/theme [default\|github\|dim\|high-contrast\|colorblind]` | View or set the color mode. | @@ -497,6 +507,7 @@ These are the slash commands you can use from within an interactive CLI session. | `/usage` | Display session usage metrics and statistics, including per-model token totals. | | `/user [show\|list\|switch]` | Manage the current {% data variables.product.github %} user. | | `/version` | Display version information and check for updates. | +| `/vim` | Toggle Vim mode for the input composer, enabling Vim-style modal editing: motions (for example, `hjkl`, `w`, `b`, `e`, `0`, `$`, `gg`, `G`), character search (`f`/`F`/`t`/`T`/`;`/`,`), insert commands (`i`/`a`/`o`), edit commands (`r`/`~`/`J`/`x`/`D`/`C`), operators (`d`/`c`/`y`), yank and put (`y`/`p`/`P`), repeat (`.`), undo and redo (`u`/Ctrl+R), counts, and Esc to return to normal mode. Also configurable with the `editorMode` setting. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#user-settings-copilotsettingsjson). | | `/voice [on\|off\|models\|devices]` | Toggle voice mode, browse available voice models, or choose the input device (microphone). | | `/fork [NAME]`, `/branch [NAME]` | Fork the current session into a new session, optionally with a name. | | `/worktree [branch\|task]` | Create a new Git worktree and switch to it, leaving uncommitted changes behind in the current worktree. Pass a branch name, a task description (multiline supported, used as the opening prompt in the new worktree), or omit the argument to auto-generate a branch name from the conversation. By default, branches off the current checkout (`HEAD`); set the `worktreeBaseRef` setting to `"defaultBranch"` to branch off the remote default branch instead. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#user-settings-copilotsettingsjson). Requires a Git repository. {% data reusables.copilot.experimental %} | @@ -518,7 +529,7 @@ In the schedule manager opened by a bare `/every` or `/after`, use ↑/providers.json`. When this file declares any provider or model, it takes precedence over the legacy `COPILOT_PROVIDER_*` environment variables. See [`providers.json`](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#providersjson). | | `COPILOT_SKILLS_DIRS` | Comma-separated list of additional directories for skills. | | `PLUGINS_DASHBOARD` | Set to `false` to disable the plugins dashboard opened by bare `/plugin`, `/mcp`, and `/skills`, and to disable the non-interactive `copilot plugin`/`copilot plugins` commands. | | `COPILOT_STRIP_REASONING_ON_RESUME` | Set to `0` or `false` to keep BYOK reasoning tokens across a session resume instead of stripping them. Defaults to stripping them. | @@ -762,7 +776,7 @@ copilot --deny-tool='write(secret.txt)' | `GITHUB_TOKEN` | Authentication token. | | `PLAIN_DIFF` | Set to `true` to disable rich diff rendering. | | `USE_BUILTIN_RIPGREP` | Set to `false` to use the system ripgrep instead of the bundled version. | -| `USE_TGREP` | Set to `true` to always use [tgrep](https://github.com/microsoft/tgrep), a trigram-indexed search engine, regardless of repository size, or `false` to always use ripgrep. When unset, {% data variables.copilot.copilot_cli_short %} automatically switches from ripgrep to tgrep once a repository exceeds a platform-specific file-count threshold. | +| `USE_TGREP` | Set to `true` to always use [tgrep](https://github.com/microsoft/tgrep), a trigram-indexed search engine, even outside a Git repository or on a virtualized or network filesystem (for example, a VFS for Git checkout, or an SMB/9p mount), or `false` to always use ripgrep. When forced outside a Git repository, tgrep indexes the working directory itself, so avoid forcing it somewhere large such as your home directory. Windows cloud-sync folders (for example, OneDrive) always use ripgrep, even when this is set to `true`. When unset, {% data variables.copilot.copilot_cli_short %} automatically switches from ripgrep to tgrep only inside a Git repository, on a non-virtualized filesystem, and once it exceeds a platform-specific file-count threshold. | ## Configuration file settings @@ -839,6 +853,7 @@ Use `copilot mcp` to manage MCP server configurations from the command line with | `list [--json]` | List all configured MCP servers grouped by source, including plugin-provided servers. | | `get [--json]` | Show configuration and tools for a specific server. For plugin-provided servers, also shows the source plugin name and version. | | `add [options] [url]` | Add a server to the user configuration. Writes to `~/.copilot/mcp-config.json`. | +| `enable ` / `disable ` | Enable or disable a server by name. The change persists to the user configuration and applies to future sessions. | | `remove ` | Remove a user-level server. Workspace servers must be edited in their configuration files directly. | For local (stdio) servers, provide the command after `--`: @@ -1003,6 +1018,10 @@ The `github-mcp-server` provides the following tools. | `list_workflow_runs`, `get_workflow_run_logs` | {% data variables.product.prodname_actions %}. | | `get_label`, `list_label`, `label_write` | Label management. | +### Resource discovery + +{% data reusables.copilot.experimental %} When a local capability is missing, the agent can search a remote catalog for public MCP servers and skills to add, using a built-in `discover-resources` skill. The skill queries the catalog for relevance-ranked MCP servers and skills matching an abstract capability (for example, "database access" or "architecture diagrams"), then presents candidates for you to choose from. The skill itself never installs anything. The `/plugin`, `/mcp`, and `/skills` dashboards also include a typed catalog search that blends the same remote results into the local resource list. + ### MCP server naming Server names can contain any printable characters, including spaces, Unicode characters, and punctuation. Control characters (U+0000–U+001F, U+007F) and the closing brace (`}`) are not allowed. Server names are used as prefixes for tool names—for example, a server named `my-server` produces tool names like `my-server-fetch`, and a server named `My Server` produces `My Server-fetch`. @@ -1125,19 +1144,33 @@ Remote skills are projected alongside local skills and follow the same name-base When two plugins provide skills with the same name, both coexist using plugin-qualified invocation names such as `/my-plugin/search` and `/other-plugin/search`. The bare name routes to the higher-priority plugin. This applies to skills only; commands keep the standard tier-based deduplication, where the higher-priority source wins. -### Installing a skill non-interactively +### Managing skills non-interactively -Use `copilot plugins install --skill` to install a skill from a file, URL, or directory without opening an interactive session: +Use `copilot skill` to manage skills from the command line without opening an interactive session. + +| Subcommand | Description | +|------------|-------------| +| `list [--json]` | List all discovered skills. | +| `add [--project]` | Add a skill from a file path, URL, or directory. | +| `remove ` | Remove a personal or project skill, or unregister a custom skill directory. | +| `enable ` / `disable ` | Enable or disable a skill by name. | ```bash -# Install for your user account (default scope) -copilot plugins install --skill ./my-skill/SKILL.md +# Install a skill for your user account (default) +copilot skill add ./my-skill/SKILL.md -# Install into the current project (.github/skills; file or URL skills only) -copilot plugins install --skill --scope project ./my-skill/SKILL.md +# Install a skill into the current project (.github/skills; file or URL skills only) +copilot skill add --project ./my-skill/SKILL.md + +# Enable, disable, or remove a skill by name +copilot skill enable my-skill +copilot skill disable my-skill +copilot skill remove my-skill ``` -Installing a directory registers it as a custom skill source rather than copying it. Installing a file or URL copies the skill's content into your personal or project skills directory. The equivalent interactive command is `/skills add [--project] `. For the full option reference, see [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-plugin-reference#copilot-plugins-install-options). +Installing a directory registers it as a custom skill source rather than copying it. Installing a file or URL copies the skill's content into your personal or project skills directory. The equivalent interactive command is `/skills add [--project] `. + +`copilot skill list --json` rows have the shape `{ name, description, source, path, enabled }`. With `remove`, pass either a skill name or the path to a custom skill directory you added—a skill name deletes that skill's files, while a custom directory path only unregisters the directory and leaves its files on disk. Only personal and project skills you added can be removed; skills provided by a plugin or the builtin set can't be removed this way (disable them instead). This replaces the retired `copilot plugins install --skill [--scope project]` and `copilot plugins remove/enable/disable --skill`. ### Commands (alternative skill format) @@ -1151,12 +1184,12 @@ Custom agents are specialized AI agents defined in Markdown files. The filename | Agent | Default model | Description | |-------|--------------|-------------| -| `code-review` | claude-sonnet-4.5 | High signal-to-noise code review. Analyzes diffs for bugs, security issues, and logic errors. Will not modify code. | +| `code-review` | claude-sonnet-4.6 | High signal-to-noise code review. Analyzes diffs for bugs, security issues, and logic errors. Will not modify code. | | `explore` | gpt-5.4-mini | Fast codebase exploration. Searches files, reads code, and answers questions. Returns focused answers under 300 words. Safe to run in parallel. | -| `general-purpose` | claude-sonnet-4.5 | Full-capability agent for complex multi-step tasks. Runs in a separate context window. | +| `general-purpose` | claude-sonnet-4.6 | Full-capability agent for complex multi-step tasks. Runs in a separate context window. | | `research` | claude-haiku-4.5 | Executes thorough searches based on instructions. Searches {% data variables.product.github %} repositories, fetches files, verifies claims, and reports detailed findings with citations. | | `rubber-duck` | complementary model | Use a complementary model to provide a constructive critique of proposals, designs, implementations, or tests. Identifies weak points and suggests improvements. See [AUTOTITLE](/copilot/concepts/agents/copilot-cli/rubber-duck). | -| `security-review` | claude-sonnet-4.5 | Security-focused code review. Analyzes changes for high-confidence vulnerabilities across 11 categories. Only flags issues with >80% confidence of exploitability. Reports severity and confidence scores. Will not modify code. | +| `security-review` | claude-sonnet-4.6 | Security-focused code review. Analyzes changes for high-confidence vulnerabilities across 11 categories. Only flags issues with >80% confidence of exploitability. Reports severity and confidence scores. Will not modify code. | | `task` | claude-haiku-4.5 | Command execution (tests, builds, lints). Returns brief summary on success, full output on failure. | `code-review` and `security-review` never forward a full review to another review agent: launching one already fulfills a request to "use" or "call" a reviewer, so it performs the review itself instead of delegating the whole task to a nested `code-review` or `security-review` subagent, recursively, across the entire delegation chain. `code-review` still hands off to the dedicated `security-review` specialist for security-focused portions of a request, and both agents may delegate narrow, independently scoped fact-finding work to non-review agents such as `explore`. @@ -1171,11 +1204,13 @@ Only the root agent can call `store_memory` or `vote_memory` to save or vote on | `infer` | boolean | No | Allow auto-delegation by the main agent. Default: `true`. | | `mcp-servers` | object | No | MCP servers to connect. Uses the same schema as `~/.copilot/mcp-config.json`. | | `model` | string | No | AI model for this agent. When unset, inherits the outer agent's model. When the session model is set to `Auto` (server-selected), subagents always inherit the resolved session model regardless of this field. | +| `models` | string[] | No | Authored models in priority order. The runtime uses the first model the user's plan can access; if none resolve, dispatch falls back to the session's model. Overrides `model` when both are set. | +| `modelPolicy` | string | No | `"preferred"` (default) lets `model`/`models` be overridden by a `subagents` override in `~/.copilot/settings.json` or the `/subagents` picker. `"required"` locks dispatch to one of the authored models—overrides are rejected and the picker's **Model** entry is disabled. | | `name` | string | No | Display name. Defaults to the filename. | | `reasoningEffort` | string | No | Default reasoning effort for this agent (for example, `"low"`, `"medium"`, or `"high"`). When unset, inherits the outer agent's effort. | | `tools` | string[] | No | Tools available to the agent. Default: `["*"]` (all tools). Include `*` anywhere in the list to grant full tool access—for example, `["view", "*"]` grants every tool, not just `view`. | -`model` and `reasoningEffort` apply whether the agent is dispatched through the `task` tool or started directly—for example, through the SDK's `session.startSubagent`. They're resolved with this precedence, highest first: an explicit per-call value, the `subagents` override in `~/.copilot/settings.json`, the agent definition's `model`/`reasoningEffort` field, then the parent session's value. A declared model or effort that can't be honored falls back to the session's value instead of failing the dispatch. +`model`, `models`, `modelPolicy`, and `reasoningEffort` apply whether the agent is dispatched through the `task` tool or started directly—for example, through the SDK's `session.startSubagent`. Model and effort are resolved with this precedence, highest first: an explicit per-call value, the `subagents` override in `~/.copilot/settings.json`, the agent definition's `model`/`models`/`reasoningEffort` field, then the parent session's value. A declared model or effort that can't be honored falls back to the session's value instead of failing the dispatch—unless the agent declares `modelPolicy: "required"`, in which case dispatch is refused rather than silently substituting an unauthored model. ### Custom agent locations @@ -1373,6 +1408,12 @@ High-risk commands display additional warnings and require explicit confirmation When sandboxing is enabled and the **Allow sandbox bypass** setting is on (the default), a synchronous shell command that's blocked by the sandbox's filesystem or network policy prompts you to re-run it outside the sandbox—no model round-trip is required. Approving the prompt re-runs the command and returns its output. Declining keeps the sandboxed (blocked) result. +A sandbox bypass prompt also offers a **Yes, and disable the sandbox for the rest of this session** option. Choosing it turns off sandboxing for every remaining command in the current session, not just the command being approved. This only applies to the current session—starting a new session with `/new` sandboxes commands again, and the option has no effect on the saved `sandbox` configuration setting or on other running sessions. + +A detached (backgrounded) command can't be sandboxed at all, since the sandbox can't wrap a process that outlives the tool call. When the **Allow sandbox bypass** setting is on, this prompts for approval before the command starts, instead of being refused outright. Approving runs the command unsandboxed from the start. + +On Windows hosts whose sandbox policy supports denial capture, a blocked interactive shell command escalates in a single step instead of jumping straight to a full bypass. Approving re-runs the command with file and process restrictions set to record instead of block (the network policy still applies), then falls back to the disclosed full bypass only if the command is still blocked. Only one prompt is shown for the entire escalation. + For more information, see [AUTOTITLE](/copilot/how-tos/cloud-and-local-sandboxes/configuring-local-sandbox-settings#allowing-sandbox-bypass). #### Environment variable denylist @@ -1396,6 +1437,8 @@ The `web_fetch` tool enforces server-side request forgery (SSRF) protections bef * **IP blocklist**: Requests to loopback addresses (`127.x.x.x`, `::1`), RFC-1918 private ranges (`10.x`, `172.16–31.x`, `192.168.x`), and cloud metadata endpoints (for example, `169.254.169.254`) are blocked by IP-literal check and DNS pre-resolution. * **Validated redirects**: `web_fetch` follows `3xx` redirects (up to 10 hops, within a 60-second network budget), re-validating each hop's target against the same IP blocklist before following it. A redirect to a different origin than the original URL requires permission approval, the same as any other cross-origin fetch; same-origin redirects are followed without an extra prompt. The final result notes when content was `(redirected from )`. +When sandboxing is enabled, requests are checked against the sandbox network policy (outbound access, local and private hosts) before the permission prompt, so a target blocked by policy fails fast instead of prompting. If the **Allow sandbox bypass** setting is on and the sandbox network proxy can't reach a URL—as opposed to the URL being denied by policy—`web_fetch` prompts you to retry the request outside the sandbox. Approving makes one more attempt at the fetch and returns its outcome. + To allow `web_fetch` to reach `localhost` during development—for example, for a local docs server—set the following environment variable: ```bash @@ -1438,6 +1481,8 @@ Every variable is read on every platform; the **Typically set on** column shows These are not the only read-only grants. {% data variables.copilot.copilot_cli_short %} also grants your user-profile application directories (`~/.local/bin` and `~/.local/lib` on Linux and macOS; the immediate subdirectories of `%LOCALAPPDATA%\Programs` on Windows), standard system and profile locations, and the caches and registries used by common package managers and toolchains (shown as **dev-tool access** in the `/sandbox policy` report). To see the fully resolved policy for your current directory—read/write, read-only, and denied paths—run `/sandbox policy` in a session. For the concepts behind how the policy is assembled, see [AUTOTITLE](/copilot/concepts/agents/copilot-cli/understanding-local-sandboxing). +On Windows, `/sandbox policy` lists the directories on your `PATH` environment variable under **System** read-only grants; other developer-tool paths are grouped separately as detected project tool groups. + ## OpenTelemetry monitoring {% data variables.copilot.copilot_cli_short %} can export traces and metrics via [OpenTelemetry](https://opentelemetry.io/) (OTel), giving you visibility into agent interactions, LLM calls, tool executions, and token usage. All signal names and attributes follow the [OTel GenAI Semantic Conventions](https://github.com/open-telemetry/semantic-conventions-genai/tree/main/docs/gen-ai/). diff --git a/content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md b/content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md index 480a58f4102f..7f9c2df7230b 100644 --- a/content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md +++ b/content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md @@ -38,6 +38,7 @@ The `~/.copilot` directory contains the following top-level items. | `mcp-secrets/` | Directory | Local fallback storage and index for MCP secret placeholders | | `permissions-config.json` | File | Saved tool and directory permissions per project | | `plugin-data/` | Directory | Persistent data for installed plugins | +| `providers.json` | File | User-level bring-your-own-key (BYOK) provider and model registry | | `session-state/` | Directory | Session history and workspace data | | `command-history-state/` | Directory | Command history data | | `session-store.db` | File | SQLite database for cross-session data | @@ -93,6 +94,12 @@ Defines Language Server Protocol (LSP) servers available at the user level. Thes For more information, see [AUTOTITLE](/copilot/how-tos/copilot-cli/set-up-copilot-cli/add-lsp-servers). +### `providers.json` + +Defines a registry of bring-your-own-key (BYOK) providers and models, as a JSON object with `providers` and `models` keys. When this file declares any provider or model, it takes precedence over the legacy `COPILOT_PROVIDER_*` environment variables. + +By default, this file is located at `~/.copilot/providers.json`. Override its location with the `COPILOT_PROVIDERS_CONFIG` environment variable. + ### `agents/` Store personal custom agent definitions here as `.agent.md` files. Agents placed in this directory are available in all your sessions. Project-level agents (in `.github/agents/`) take precedence over personal agents if they share the same name. @@ -401,6 +408,7 @@ To override the default `~/.copilot` location, set the `COPILOT_HOME` environmen | `mcp-secrets/` | With caution | Clears local MCP secret fallback state and mappings. Secret-backed MCP servers may need reconfiguration. | | `permissions-config.json` | With caution | Resets all saved permissions. The CLI will prompt you again for tool and directory approvals. | | `plugin-data/` | Yes | Plugin persistent data is re-created as needed. | +| `providers.json` | Not recommended | You will lose your BYOK provider and model configuration. Back up first. | | `session-state/` | With caution | Deleting removes session history. You will no longer be able to resume past sessions. | | `command-history-state/` | With caution | Deleting removes command history. You will no longer be able to search previous commands with Ctrl+R. | | `session-store.db` | With caution | Deleting removes cross-session data. The file is re-created automatically. | @@ -458,6 +466,7 @@ These settings apply across all your sessions and repositories. You can use the | `disabledMcpServers` | `string[]` | `[]` | MCP server names to disable. Listed servers are configured but not started. | | `disabledSkills` | `string[]` | `[]` | Skill names to disable. Listed skills are discovered but not loaded. | | `dynamicRetrieval` | `{ skills?: boolean }` | unset | Per-category control of embeddings-based dynamic instruction retrieval. Set `skills` to `false` to disable retrieval for skills. | +| `editorMode` | `"normal"` \| `"vim"` | `"normal"` | Input composer editing mode. Set by toggling the `/vim` slash command. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#slash-commands-in-the-interactive-interface). | | `effortLevel` | `string` | `"medium"` | Reasoning effort level for extended thinking: `"low"`, `"medium"`, `"high"`, or `"xhigh"`. Higher levels use more compute. | | `enabledMcpServers` | `string[]` | `[]` | Enable built-in MCP servers that are disabled by default. | | `enabledPlugins` | `Record` | `{}` | Declarative plugin auto-install. Keys are plugin specs; values are `true` (enabled) or `false` (disabled). | @@ -496,19 +505,21 @@ These settings apply across all your sessions and repositories. You can use the | `shellShortcut` | `boolean` | `true` | Let a lone `$` at the prompt, followed by Enter, open an interactive shell rooted at the session's working directory (activates only for a local, trusted, idle session on a real TTY). User- or managed-scoped only—not repo-overridable. | | `showTimestamps` | `boolean` | `true` | Show dim `HH:mm` timestamps next to user messages in the timeline. | | `showTipsOnStartup` | `boolean` | `true` | Show a random command tip when the CLI starts. | +| `sidebar` | `boolean` | `true` | Enable the current-session sidebar. Set to `false` to disable it entirely, hiding the composer hint and the open gesture. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#sidebar-and-sessions-tab-shortcuts). | | `skillDirectories` | `string[]` | `[]` | Additional directories to search for custom skill definitions (in addition to `~/.copilot/skills/`). | | `statusLine` | `object` | — | Custom status line display. `type`: must be `"command"`. `command`: path to an executable script that receives session JSON on stdin and prints status content to stdout. `padding`: optional number of left-padding spaces. `refreshInterval`: optional integer number of seconds (`1`–`2147483`) to re-run the command on a timer instead of only on events; omit it to refresh only when the session state changes. If the command fails to spawn, exits non-zero, or fails to receive the status JSON on stdin, the CLI logs a warning once per continuous failure episode and leaves the status line blank instead of failing silently. Run with `--log-level all` to see the underlying error detail. | | `stayInAutopilot` | `boolean` | `true` | Remain in autopilot mode after each task completes. When enabled, the next prompt you enter after a task completes is also handled in autopilot mode. For more information, see [AUTOTITLE](/copilot/concepts/agents/copilot-cli/autopilot#staying-in-autopilot-mode-between-tasks). | | `storeTokenPlaintext` | `boolean` | `false` | Allow authentication tokens to be stored in plain text in `config.json` when no system keychain is available. | | `stream` | `boolean` | `true` | Enable streaming responses. | | `streamerMode` | `boolean` | `false` | Hide preview model names, quota details, prompt timestamps, and the update-available notice. Useful when demonstrating {% data variables.copilot.copilot_cli_short %} or screen sharing. | -| `subagents.agents` | `object` | `{}` | Per-agent model configuration, keyed by agent name. Each value is an object with optional `model` (string), `effortLevel` (string), and `contextTier` (`"default"`, `"long_context"`, or `"inherit"`) fields. Set any field to `"inherit"` to use the parent session's value at dispatch time. Use the `/subagents` slash command to configure these settings interactively. | +| `subagents.agents` | `object` | `{}` | Per-agent model configuration, keyed by agent name. Each value is an object with optional `model` (string), `modelPolicy` (`"preferred"` or `"required"`), `effortLevel` (string), and `contextTier` (`"default"`, `"long_context"`, or `"inherit"`) fields. Set `model`, `effortLevel`, or `contextTier` to `"inherit"` to use the parent session's value at dispatch time. `modelPolicy` has no effect when the agent definition itself sets `modelPolicy: "required"`—that lock can't be overridden here. Use the `/subagents` slash command to configure these settings interactively. | | `subagents.disabledSubagents` | `string[]` | `[]` | Agent names to prevent from being dispatched. Only the `rubber-duck` agent cannot be disabled via this setting. All other built-in agents—including `explore`, `task`, `code-review`, `general-purpose`, `research`, and `security-review`—can be disabled. | | `subagents.maxConcurrency` | `number` | plan-based | Maximum concurrent subagents for this session. Only honored for usage-based billing users; ignored for all other plans. Capped at `32`. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#subagent-limits). | | `subagents.maxDepth` | `number` | `6` | Maximum subagent nesting depth. Only honored for usage-based billing users; ignored for all other plans. Capped at `256`. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#subagent-limits). | | `tabs.enabled` | `boolean` | `true` | Show the home tab bar. Set to `false` to hide it entirely. | | `tabs.hide` | `string[]` | `[]` | Tab identifiers to hide. Accepted values: `"copilot"`, `"agents"`, `"issues"`, `"pull-requests"`, `"gists"` (matched case-insensitively). | | `tabs.sort` | `string[]` | `[]` | Order in which tabs are displayed. Tabs not listed keep their default relative order after the listed ones. Unknown identifiers are ignored. | +| `taskbarPresence` | `boolean` | `true` | Show a live {% data variables.product.prodname_copilot_short %} session on the Windows taskbar (agent icon and hover card). Set to `false` to opt out. Startup-only; takes effect on the next launch. Windows only. | | `terminalProgress` | `boolean` | `true` | Emit OSC 9;4 terminal progress indicators while the agent is working. Supported terminals include Windows Terminal, iTerm2, Ghostty, and ConEmu. | | `theme` | `"default"` \| `"github"` \| `"dim"` \| `"high-contrast"` \| `"colorblind"` | `"github"` | Color palette for terminal output. Managed by the `/settings` and `/theme` slash commands. `colorMode` is a deprecated alias for this setting. | | `toolSearch` | `boolean` | model- and feature-dependent | Controls tool search (deferred tool loading). Set `toolSearch: false` to opt out of tool search. | @@ -633,6 +644,7 @@ Only the following keys are supported in MDM managed settings. | `deniedMcpServers` | Denylist of MCP servers that must never load, matched the same way as `allowedMcpServers`. A matching non-default server is blocked regardless of the allowlist—deny always wins. See [Managed MCP server allow/deny list](#managed-mcp-server-allowdeny-list). | | `enabledPlugins` | Enable or disable specific plugins | | `extraKnownMarketplaces` | Add trusted plugin marketplaces | +| `forceLoginOrgs` | Pin sign-in to an approved set of {% data variables.product.github %} organizations (an array of organization logins, matched case-insensitively). {% data variables.product.prodname_copilot_short %} only runs for an account belonging to at least one listed organization; a personal account, an account that belongs only to some other enterprise, or BYOK/API-key authentication is refused with an actionable error. Set an empty array to turn the pin off without deleting the key. Deploy this key through the device channel (MDM plist/registry, or `managed-settings.json`) since it must be able to redirect a developer's first sign-in—the server-managed channel only reaches accounts that have already authenticated into the organization. This key fails closed: an unusable value, or a managed policy that can't be read on a known-managed device, blocks all sign-in until fixed. | | `forceRemoteSettingsRefresh` | Require a fresh server-managed settings fetch on startup, even when a fresh cached policy exists. The cached entry is still kept as a fallback if the fetch fails. The device (MDM) value takes precedence over a cached server value. | | `model` | Set a default model for all users (overridden by the `--model` flag or a resumed-session model) | | `permissions` | Set managed permissions, including `disableBypassPermissionsMode` and `deny` / `ask` / `allow` rule arrays. See [Managed permission rules](#managed-permission-rules). | diff --git a/content/copilot/reference/copilot-cli-reference/cli-plugin-reference.md b/content/copilot/reference/copilot-cli-reference/cli-plugin-reference.md index 7fdc016ee897..d5c17c556250 100644 --- a/content/copilot/reference/copilot-cli-reference/cli-plugin-reference.md +++ b/content/copilot/reference/copilot-cli-reference/cli-plugin-reference.md @@ -20,12 +20,12 @@ For an overview of what plugins are and how they work across {% data variables.p ## CLI commands -You can use the following commands in the terminal to manage plugins for {% data variables.copilot.copilot_cli_short %}. `copilot plugin` and `copilot plugins` are interchangeable—use whichever reads better for the subcommand. +You can use the following commands in the terminal to manage plugins for {% data variables.copilot.copilot_cli_short %}. `copilot plugins` (plural) is a legacy alias for `copilot plugin`—both resolve to the same command. | Command | Description | |------------------------------------------------|-------------| -| `copilot plugin install SPECIFICATION` | Install a plugin. See [Plugin specification for `install` command](#plugin-specification-for-install-command) below. | -| `copilot plugin uninstall NAME` | Remove a plugin | +| `copilot plugin install SPECIFICATION` (alias `add`) | Install a plugin. See [Plugin specification for `install` command](#plugin-specification-for-install-command) below. | +| `copilot plugin uninstall NAME` (aliases `remove`, `rm`) | Remove a plugin | | `copilot plugin list` | List installed plugins | | `copilot plugin update NAME` | Update a named plugin. Use `--all` to update all installed plugins at once. | | `copilot plugin enable NAME` | Enable a previously disabled plugin | @@ -36,10 +36,13 @@ You can use the following commands in the terminal to manage plugins for {% data | `copilot plugin marketplace update [NAME]` (alias `refresh`) | Re-fetch a marketplace's plugin catalog. Omit `NAME` to refresh the catalogs of every registered marketplace. | | `copilot plugin marketplace remove NAME` | Unregister a marketplace. Refused if plugins from the marketplace are still installed; pass `--force` to also uninstall those plugins. | -Non-interactively, `copilot plugins enable NAME --plugin`, `copilot plugins disable NAME --plugin`, and `copilot plugins remove NAME --plugin` provide the same enable, disable, and uninstall operations. `--plugin` is the default kind and can be omitted for these three commands. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#using-copilot-plugins-list) for the non-interactive `--mcp` and `--skill` kinds, which extend these commands to MCP servers and skills. +Before `copilot plugin` was split into separate commands by resource, `copilot plugins` also inspected and toggled MCP servers, skills, instructions, and language servers using `--kind`, `--scope`, `--mcp`, and `--skill` flags. Those cross-kind flags have been removed. Use the dedicated [`copilot mcp`](/copilot/reference/copilot-cli-reference/cli-command-reference#copilot-mcp-subcommand), [`copilot skill`](/copilot/reference/copilot-cli-reference/cli-command-reference#managing-skills-non-interactively), [`copilot instruction`](/copilot/reference/copilot-cli-reference/cli-command-reference#using-copilot-instruction), and [`copilot lsp`](/copilot/reference/copilot-cli-reference/cli-command-reference#using-copilot-lsp) commands instead. `copilot plugin list --json` now emits a flat array of plugins instead of the previous `{ plugins, errors }` object. + > [!NOTE] > A plugin or marketplace pinned by an organization or MDM managed policy (`enabledPlugins`, `extraKnownMarketplaces`) can't be re-enabled, disabled, or repointed locally—the managed value wins for that entry. The `/plugin` dashboard marks these rows with a `Managed` badge and refuses a conflicting toggle. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#mdm-managed-settings). +> +> A plugin whose activation is currently decided by the current repository's `enabledPlugins` overlay rejects `copilot plugin enable`/`disable` instead of silently persisting a global value that would have no effect in that repository. The error names the settings file that actually controls the plugin. See [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-config-dir-reference#repository-settings-githubcopilotsettingsjson). ### Plugin specification for `install` command @@ -51,26 +54,37 @@ Non-interactively, `copilot plugins enable NAME --plugin`, `copilot plugins disa | Git URL | `https://github.com/o/r.git` | Any Git URL | | Local path | `./my-plugin` or `/abs/path` | Local directory | -### `copilot plugins install` options +### `copilot plugin list` options + +| Option | Description | +|------------------------|------------------------------------------------------------------------------------| +| `--json` | Emit a flat JSON array of plugins instead of text. | +| `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | + +Each `--json` row has the shape `{ name, marketplace?, version?, enabled, source, installedFrom? }`. -In addition to installing a plugin from a specification, `copilot plugins install` can install an individual skill from a file, URL, or directory with `--skill`. A skill install isn't a plugin install and doesn't go through a marketplace—see [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference#skills-reference) for details on skills themselves. +### `copilot plugin enable`/`disable` options | Option | Description | |------------------------|------------------------------------------------------------------------------------| -| `--plugin` | Install a plugin (default). | -| `--skill` | Install a skill from a local path or URL. | -| `--scope SCOPE` | For a file or URL `--skill` install: `user` (default) or `project`. `project` scopes the install to the current repository's `.github/skills` directory instead of your user account, and only applies to file or URL skill installs. | | `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | -Installing a directory registers it as a custom skill source rather than copying it; installing a file or URL copies the skill's content into your personal or project skills directory. +### `copilot plugin install` options + +To install a skill instead of a plugin, use [`copilot skill add`](/copilot/reference/copilot-cli-reference/cli-command-reference#managing-skills-non-interactively) instead—it isn't a plugin install and doesn't go through a marketplace. + +| Option | Description | +|------------------------|------------------------------------------------------------------------------------| +| `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | -MCP servers install from a policy-configured registry, which requires authentication and interactive secret entry. Use the **Online** view of the `/mcp` dashboard to add MCP servers instead of `copilot plugins install`. +MCP servers install from a policy-configured registry, which requires authentication and interactive secret entry. Use the **Online** view of the `/mcp` dashboard, or the [`copilot mcp add`](/copilot/reference/copilot-cli-reference/cli-command-reference#copilot-mcp-subcommand) command, to add MCP servers instead of `copilot plugin install`. -### `copilot plugins update` options +### `copilot plugin update` options | Option | Description | |-----------|-----------------------------------------| | `--all` | Update every installed plugin | +| `--config-dir=DIRECTORY` | Path to the configuration directory. This option is deprecated. Use `COPILOT_HOME` instead. | > [!NOTE] > Path-sourced plugins in a local (directory-source) marketplace load live from their real directory—editing one takes effect on `/restart` or in a new session, with no `copilot plugin update` needed. @@ -81,7 +95,7 @@ A marketplace you've added yourself can opt into the same session-start auto-upd In interactive mode, `/plugin` flags an installed plugin or marketplace when a newer version is available upstream, and offers an **Update** action from the dashboard to pull it. -### `copilot plugins marketplace` subcommands +### `copilot plugin marketplace` (alias `marketplaces`) subcommands Built-in default marketplaces ship with the runtime and can't be removed. @@ -97,19 +111,81 @@ In interactive mode, run `/plugin marketplace update [NAME]` (alias `/plugin mar ## `plugin.json` -All plugins consist of a plugin directory containing, at minimum, a manifest file named `plugin.json` located at the root of the plugin directory. See [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating). +All plugins consist of a plugin directory containing a manifest file named `plugin.json`. Agent Plugins 1.0 requires the manifest at the plugin root. Legacy plugins support the alternative locations listed in [File locations](#file-locations). See [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating). + +{% data variables.copilot.copilot_cli_short %} supports both the legacy plugin manifest and the Agent Plugins 1.0 manifest. The exact `$schema` value `https://agent-plugins.org/schemas/1.0.0/plugin.schema.json` opts a plugin into Agent Plugins 1.0 semantics. A manifest without this value uses the legacy format and loads as before. + +### Agent Plugins 1.0 manifest fields + +Agent Plugins 1.0 defines a closed manifest schema. For the complete format requirements, see the [Agent Plugins 1.0 specification](https://github.com/agentplugins/agent-plugins-spec/blob/main/spec/1.0.0.md). + +The following fields are allowed: + +| Field | Type | Required | Description | +|---------------|----------|----------|-------------| +| `$schema` | string | Yes | Must be `https://agent-plugins.org/schemas/1.0.0/plugin.schema.json`. | +| `name` | string | Yes | Plugin name. See [Name constraints](#name-constraints). | +| `version` | string | No | Version string. Semantic Versioning is recommended. | +| `description` | string | No | Brief description. | +| `author` | object | No | Optional `name`, `email`, and `url` string fields. | +| `homepage` | string | No | Plugin homepage or documentation. | +| `repository` | string | No | Source repository. | +| `license` | string | No | License identifier. An SPDX identifier is recommended. | +| `keywords` | string[] | No | Search and discovery keywords. | +| `extensions` | object | No | Client-specific data keyed by reverse-domain namespace. | + +Unknown top-level fields are reported and ignored. Component path fields such as `agents`, `skills`, `hooks`, `mcpServers`, and `lspServers` are not Agent Plugins 1.0 manifest fields. + +#### Name constraints + +An Agent Plugins 1.0 name must: -### Required field +* Contain between 1 and 64 characters. +* Contain only lowercase ASCII letters, digits, hyphens, and periods. +* Start and end with an alphanumeric character. +* Not contain `--` or `..`. + +#### Components + +Agent Plugins 1.0 defines two portable component types: + +* Skills in immediate subdirectories of `skills/` that contain a `SKILL.md` file. +* MCP servers in `mcp.json` at the plugin root. + +These locations are fixed and cannot be configured in `plugin.json`. The root `mcp.json` must declare `https://agent-plugins.org/schemas/1.0.0/mcp.schema.json` in its `$schema` field. The CLI accepts `stdio`, `streamable-http`, and `sse` MCP transport names. + +For `stdio` servers, the CLI provides `PLUGIN_ROOT` and `PLUGIN_DATA` in the subprocess environment. It expands `${PLUGIN_ROOT}` and `${PLUGIN_DATA}` in the server's `args`, `env` values, and `cwd`. `PLUGIN_DATA` points to a persistent, writable directory for the installed plugin. + +Agent Plugins 1.0 does not define portable agents, hooks, commands, rules, or LSP servers. These remain client-specific. Client-specific manifest data belongs in `extensions`, keyed by reverse-domain namespace. Client-specific files belong in a top-level directory with the same namespace. Clients ignore namespaces they do not support. + +{% data variables.copilot.copilot_cli_short %} reads its client-specific components from the `com.github.copilot` directory: + +| Component | Location | +|-----------|----------| +| Custom agents | `com.github.copilot/agents/` | +| Slash commands | `com.github.copilot/commands/` | +| Rules | `com.github.copilot/rules/` | +| Hooks | `com.github.copilot/hooks/hooks.json` | +| LSP servers | `com.github.copilot/lsp.json` | + +These locations apply only to Agent Plugins 1.0 plugins. Legacy plugins continue to use their own component locations and manifest path fields. + +### Example Agent Plugins 1.0 `plugin.json` file + +{% data reusables.copilot.copilot-cli.cli-example-plugin-file %} + +### Legacy manifest fields + +#### Required field | Field | Type | Description | |---------|--------|-------------| -| `name` | string | Kebab-case plugin name (letters, numbers, hyphens only). Max 64 chars. Plugins that opt into [Open Plugin Spec support](#open-plugin-spec-support) may also use dots (for example, `acme.tools`). | +| `name` | string | Kebab-case plugin name (letters, numbers, and hyphens only). Maximum 64 characters. | -### Optional metadata fields +#### Optional metadata fields | Field | Type | Description | |--------------|-----------|-------------| -| `$schema` | string | Set to the canonical Agent Plugins (Open Plugin Spec) v1.0.0 schema URL to opt into spec semantics. See [Open Plugin Spec support](#open-plugin-spec-support). | | `description`| string | Brief description. Max 1024 chars. | | `version` | string | Semantic version (e.g., `1.0.0`). | | `author` | object | `name` (required), `email` (optional), `url` (optional). | @@ -120,7 +196,7 @@ All plugins consist of a plugin directory containing, at minimum, a manifest fil | `category` | string | Plugin category. | | `tags` | string[] | Additional tags. | -### Component path fields +#### Component path fields These tell the CLI where to find your plugin's components. All are optional. The CLI uses default conventions if omitted. @@ -130,19 +206,10 @@ These tell the CLI where to find your plugin's components. All are optional. The | `skills` | string \| string[] | `skills/` | Path(s) to skill directories (`SKILL.md` files). | | `commands` | string \| string[] | — | Path(s) to command directories. | | `hooks` | string \| object | — | Path to a hooks configuration file, or an inline hooks object. | -| `extensions`| string \| string[] \| object | — | Path(s) to extension directories. Use `{ paths: [...], exclusive: true }` to suppress built-in extensions. In [Open Plugin Spec mode](#open-plugin-spec-support), this field has a different meaning. | +| `extensions`| string \| string[] \| object | — | Path(s) to extension directories. Use `{ paths: [...], exclusive: true }` to suppress built-in extensions. In [Agent Plugins 1.0 manifests](#agent-plugins-10-manifest-fields), this field has a different meaning. | | `mcpServers`| string \| object | — | Path to an MCP configuration file (e.g., `.mcp.json`), or inline server definitions. | | `lspServers`| string \| object | — | Path to an LSP configuration file, or inline server definitions. | -### Example `plugin.json` file - -{% data reusables.copilot.copilot-cli.cli-example-plugin-file %} - -## Open Plugin Spec support - -Declaring the canonical `$schema` in `plugin.json` opts a plugin into the [Agent Plugins (Open Plugin Spec)](https://agent-plugins.org) v1.0.0 format, additively on top of standard plugin loading: - - ### LSP server configuration To include LSP (Language Server Protocol) servers in a plugin, create a `lsp-config/servers.json` file in the plugin directory, or specify a path or inline object using the `lspServers` field in `plugin.json`. @@ -216,7 +283,7 @@ For more information, see [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-cop | Field | Type | Required | Description | |------------|----------|----------|-------------| -| `name` | string | Yes | Kebab-case marketplace name. Max 64 chars. Dots are also accepted (for example, `acme.tools`) for [Open Plugin Spec](#open-plugin-spec-support) plugins. | +| `name` | string | Yes | Kebab-case marketplace name. Max 64 chars. Dots are also accepted (for example, `acme.tools`) for [Agent Plugins 1.0](#agent-plugins-10-manifest-fields) plugins. | | `owner` | object | Yes | `{ name, email? }` — marketplace owner info. | | `plugins` | array | Yes | List of plugin entries (see the table below). | | `metadata` | object | No | `{ description?, version?, pluginRoot? }` | @@ -225,7 +292,7 @@ For more information, see [AUTOTITLE](/copilot/how-tos/copilot-cli/customize-cop | Field | Type | Required | Description | |---------------|--------------------|----------|-------------| -| `name` | string | Yes | Kebab-case plugin name. Max 64 chars. Dots are also accepted for [Open Plugin Spec](#open-plugin-spec-support) plugins. | +| `name` | string | Yes | Kebab-case plugin name. Max 64 chars. Dots are also accepted for [Agent Plugins 1.0](#agent-plugins-10-manifest-fields) plugins. | | `source` | string \| object | Yes | Where to fetch the plugin (relative path, {% data variables.product.github %}, or URL). | | `description` | string | No | Plugin description. Max 1024 chars. | | `version` | string | No | Plugin version. | @@ -280,14 +347,14 @@ Both the `github` and `url` source types accept an optional `sha` field to pin i |----------------------|------| | Installed plugins | `~/.copilot/installed-plugins/MARKETPLACE/PLUGIN-NAME` (installed via a marketplace) and `~/.copilot/installed-plugins/_direct/SOURCE-ID/` (installed directly) | | Marketplace cache | Platform cache directory: `~/.cache/copilot/marketplaces/` (Linux), `~/Library/Caches/copilot/marketplaces/` (macOS). Overridable with `COPILOT_CACHE_HOME`. | -| Plugin manifest | `.plugin/plugin.json`, `plugin.json`, `.github/plugin/plugin.json`, or `.claude-plugin/plugin.json` (checked in this order) | +| Plugin manifest | Agent Plugins 1.0: `plugin.json` at the plugin root. Legacy plugins: `.plugin/plugin.json`, `plugin.json`, `.github/plugin/plugin.json`, or `.claude-plugin/plugin.json` (checked in this order). | | Marketplace manifest | `marketplace.json`, `.plugin/marketplace.json`, `.github/plugin/marketplace.json`, or `.claude-plugin/marketplace.json` (checked in this order) | -| Agents | `agents/` (default, overridable in manifest) | -| Skills | `skills/` (default, overridable in manifest) | -| Hooks configuration | `hooks.json` or `hooks/hooks.json` | -| MCP configuration | `.mcp.json`, `.github/mcp.json` | -| LSP configuration | `lsp.json` or `.github/lsp.json` | -| Plugin data | `${COPILOT_PLUGIN_DATA}` (also available as `${CLAUDE_PLUGIN_DATA}`). Points to a persistent, writable directory unique to each installed plugin. Use this for plugin-specific runtime data instead of paths inside the installed-plugins cache directory. | +| Agents | Legacy plugins: `agents/` (default, overridable in manifest). | +| Skills | Agent Plugins 1.0: `skills/` (fixed). Legacy plugins: `skills/` (default, overridable in manifest). | +| Hooks configuration | Legacy plugins: `hooks.json` or `hooks/hooks.json`. | +| MCP configuration | Agent Plugins 1.0: `mcp.json`. Legacy plugins: `.mcp.json`, `.github/mcp.json`, or the `mcpServers` manifest field. | +| LSP configuration | Legacy plugins: `lsp.json` or `.github/lsp.json`. | +| Plugin data | For Agent Plugins 1.0 MCP servers, `${PLUGIN_DATA}` (also available as `${COPILOT_PLUGIN_DATA}` and `${CLAUDE_PLUGIN_DATA}`) points to a persistent, writable directory unique to each installed plugin. Use this for plugin-specific runtime data instead of paths inside the installed-plugins cache directory. | ## Loading order and precedence @@ -346,7 +413,7 @@ The following diagram illustrates the loading order and precedence rules. ## Further reading -* [AUTOTITLE](/copilot/concepts/agents/about-enterprise-plugin-standards) +* [AUTOTITLE](/copilot/concepts/enterprise/plugin-standards) * [AUTOTITLE](/copilot/how-tos/copilot-cli) * [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-command-reference) * [AUTOTITLE](/copilot/reference/copilot-cli-reference/cli-programmatic-reference) diff --git a/content/copilot/reference/enterprise-administrators/enterprise-managed-settings.md b/content/copilot/reference/enterprise-administrators/enterprise-managed-settings.md index c667854ae6d8..96a55c360283 100644 --- a/content/copilot/reference/enterprise-administrators/enterprise-managed-settings.md +++ b/content/copilot/reference/enterprise-administrators/enterprise-managed-settings.md @@ -126,7 +126,7 @@ The following example shows these keys in one managed settings file. ## enabledPlugins -Defines plugins that are automatically installed or blocked for all enterprise users. Each entry uses the format `PLUGIN-NAME@MARKETPLACE-NAME` as the key, with a boolean value: `true` to require the plugin to be enabled, or `false` to require it to be disabled. See [AUTOTITLE](/copilot/concepts/agents/about-enterprise-plugin-standards). +Defines plugins that are automatically installed or blocked for all enterprise users. Each entry uses the format `PLUGIN-NAME@MARKETPLACE-NAME` as the key, with a boolean value: `true` to require the plugin to be enabled, or `false` to require it to be disabled. See [AUTOTITLE](/copilot/concepts/enterprise/plugin-standards). ## extraKnownMarketplaces @@ -142,7 +142,7 @@ The following source types are supported: * `"git"` — requires `url`; optional `ref` and `path` * `"directory"` — requires `path` -See [AUTOTITLE](/copilot/concepts/agents/about-enterprise-plugin-standards). +See [AUTOTITLE](/copilot/concepts/enterprise/plugin-standards). ## strictKnownMarketplaces diff --git a/content/copilot/reference/enterprise-administrators/policy-conflicts.md b/content/copilot/reference/enterprise-administrators/policy-conflicts.md index f7cbaa1e34ba..6c8cf243139a 100644 --- a/content/copilot/reference/enterprise-administrators/policy-conflicts.md +++ b/content/copilot/reference/enterprise-administrators/policy-conflicts.md @@ -15,7 +15,7 @@ contentType: reference ## About delegating policy decisions to organizations -Policies can be defined for a whole enterprise, or set at the organization level. See [AUTOTITLE](/copilot/concepts/policies). +Policies can be defined for a whole enterprise, or set at the organization level. See [AUTOTITLE](/copilot/concepts/enterprise/policies). When an enterprise owner delegates control of a policy to organization owners by setting "No policy," some organizations may enable a feature while others disable it. Users may be granted a {% data variables.product.prodname_copilot_short %} license by organizations with different policies for the same feature. diff --git a/content/copilot/responsible-use/agents.md b/content/copilot/responsible-use/agents.md index 6ccf2ca743bb..9c744465e944 100644 --- a/content/copilot/responsible-use/agents.md +++ b/content/copilot/responsible-use/agents.md @@ -285,7 +285,7 @@ For additional guidance on the responsible use of Copilot agentic features, we r * [AUTOTITLE](/copilot/tutorials/cloud-agent/get-the-best-results) * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/customize-cloud-agent/customize-the-agent-environment) * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall) -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/getting-started) +* [AUTOTITLE](/copilot/get-started/sdk-quickstart) * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers) * [AUTOTITLE](/copilot/concepts/agents/copilot-cli/about-copilot-cli) * [AUTOTITLE](/copilot/concepts/agents/github-copilot-app) diff --git a/content/copilot/tutorials/budgets/getting-started-with-budget-controls.md b/content/copilot/tutorials/budgets/getting-started-with-budget-controls.md index e68253eed67b..3b3570605dfb 100644 --- a/content/copilot/tutorials/budgets/getting-started-with-budget-controls.md +++ b/content/copilot/tutorials/budgets/getting-started-with-budget-controls.md @@ -15,13 +15,6 @@ Under usage-based billing, your enterprise's included {% data variables.product. Before you begin, make sure you understand how the four budget controls work and how the system evaluates them. See [AUTOTITLE](/copilot/concepts/billing/budgets-for-usage-based-billing). - - -> [!NOTE] -> If your enterprise was using {% data variables.product.prodname_copilot_short %} before June 1, 2026, you are on a promotional period (June–August 2026) where your included {% data variables.product.prodname_ai_credits_short %} are higher than the standard amounts. When the promotional period ends on September 1, 2026, the shared pool will be smaller. Use this period to understand your team's baseline consumption and adjust your spending limits before the transition. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises#how-do-ai-credits-work) for the standard and promotional amounts. - - - ## Step 1: Set a universal user-level budget The universal user-level budget (ULB) is the single most important control. It caps how much any one user can consume per billing cycle—from both the shared pool and any additional metered usage—and applies automatically to every licensed user in your enterprise. diff --git a/content/copilot/tutorials/cloud-agent/build-guardrails.md b/content/copilot/tutorials/cloud-agent/build-guardrails.md index 3e28bd90d880..00698ffbf2ac 100644 --- a/content/copilot/tutorials/cloud-agent/build-guardrails.md +++ b/content/copilot/tutorials/cloud-agent/build-guardrails.md @@ -22,7 +22,7 @@ Plan your policies for {% data variables.copilot.copilot_cloud_agent %} in advan Some questions to ask are: -* Which organizations and repositories will {% data variables.copilot.copilot_cloud_agent %} be enabled in? See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/access-management). +* Which organizations and repositories will {% data variables.copilot.copilot_cloud_agent %} be enabled in? See [AUTOTITLE](/copilot/concepts/enterprise/cloud-agent-access). * Which MCP servers will you configure to give {% data variables.copilot.copilot_cloud_agent %} access to external tools? See [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers). ### Which policies don't apply? diff --git a/content/copilot/tutorials/cloud-agent/give-access-to-resources.md b/content/copilot/tutorials/cloud-agent/give-access-to-resources.md index ca0fae4e8c09..0ceb67d89c6a 100644 --- a/content/copilot/tutorials/cloud-agent/give-access-to-resources.md +++ b/content/copilot/tutorials/cloud-agent/give-access-to-resources.md @@ -101,4 +101,4 @@ Now you have seen how access to resources is controlled at the repository and or 1. **Consider who gets admin access** to these repositories. You can control this at the organization level by creating a team with the **All-repository admin** custom role. These users will be able to manage configuration _settings_, such as MCP configuration and Agents secrets and variables, in every repository. 1. **Use rulesets and CODEOWNERS files** to control edits of configuration _files_, such as `copilot-setup-steps.yml`, which anyone with write access can edit by default. 1. **Review the default firewall**. The firewall doesn't affect connections to MCP servers or setup steps in `copilot-setup-steps.yml`, but it does limit {% data variables.product.prodname_copilot_short %}'s access to the Internet during task execution. See [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/customize-the-firewall). -1. **Define plugin standards**. Plugins are installable packages that extend {% data variables.product.prodname_copilot_short %} with reusable agents, skills, hooks, and integrations. You can control which plugins and marketplaces are permitted in an enterprise's `{% data variables.copilot.managed_setting_file %}` file. See [AUTOTITLE](/copilot/concepts/agents/about-enterprise-plugin-standards). +1. **Define plugin standards**. Plugins are installable packages that extend {% data variables.product.prodname_copilot_short %} with reusable agents, skills, hooks, and integrations. You can control which plugins and marketplaces are permitted in an enterprise's `{% data variables.copilot.managed_setting_file %}` file. See [AUTOTITLE](/copilot/concepts/enterprise/plugin-standards). diff --git a/content/copilot/tutorials/cloud-agent/improve-a-project.md b/content/copilot/tutorials/cloud-agent/improve-a-project.md index 9f5a6692e5d1..af676185e001 100644 --- a/content/copilot/tutorials/cloud-agent/improve-a-project.md +++ b/content/copilot/tutorials/cloud-agent/improve-a-project.md @@ -79,7 +79,7 @@ Creating this file is optional but is a good idea if you use {% data variables.c ```text copy - Analyze this repository to understand the dependencies that need to be installed on the development environment to work on the code in this repository. Using this information, and the details about the `copilot-setup-steps.yml` file that are given in https://docs.github.com/copilot/how-tos/use-copilot-agents/cloud-agent/customize-the-agent-environment, add a `.github/workflows/copilot-setup-steps.yml` to this repository. This Actions workflow file should install, in the development environment for {% data variables.copilot.copilot_cloud_agent %}, all of the dependencies necessary to work on the code in this repository. Make sure that the workflow job is named `copilot-setup-steps`. + Analyze this repository to understand the dependencies that need to be installed on the development environment to work on the code in this repository. Using this information, and the details about the `copilot-setup-steps.yml` file that are given in https://docs.github.com/copilot/how-tos/use-copilot-agents/cloud-agent/customize-the-agent-environment, add a `.github/workflows/copilot-setup-steps.yml` to this repository. This Actions workflow file should install, in the development environment for {% data variables.copilot.copilot_cloud_agent %}, all of the dependencies necessary to work on the code in this repository. Make sure that the workflow job is named `copilot-setup-steps`, and that the workflow includes a `workflow_dispatch` trigger so that it can be run manually. Choose any other triggers to suit this repository; there's no need to run on both `push` and `pull_request`. ``` @@ -97,12 +97,6 @@ Creating this file is optional but is a good idea if you use {% data variables.c ```yaml on: workflow_dispatch: - push: - paths: - - .github/workflows/copilot-setup-steps.yml - pull_request: - paths: - - .github/workflows/copilot-setup-steps.yml jobs: copilot-setup-steps: diff --git a/content/copilot/tutorials/copilot-cli-hooks.md b/content/copilot/tutorials/copilot-cli-hooks.md index 1230fbdad344..6e537908575c 100644 --- a/content/copilot/tutorials/copilot-cli-hooks.md +++ b/content/copilot/tutorials/copilot-cli-hooks.md @@ -399,15 +399,6 @@ fi COMMAND="$(echo "$TOOL_ARGS_RAW" | jq -r '.command // empty')" -# --------------------------------------------------------------------------- -# Demo-only deny rule for safe testing. -# This blocks a harmless test command so you can validate the deny flow. -# Remove this rule after confirming your hooks work as expected. -# --------------------------------------------------------------------------- -if echo "$COMMAND" | grep -q "COPILOT_HOOKS_DENY_DEMO"; then - deny "Blocked demo command (test rule). Remove this rule after validating hooks." -fi - deny() { local reason="$1" @@ -436,6 +427,15 @@ deny() { exit 0 } +# --------------------------------------------------------------------------- +# Demo-only deny rule for safe testing. +# This blocks a harmless test command so you can validate the deny flow. +# Remove this rule after confirming your hooks work as expected. +# --------------------------------------------------------------------------- +if echo "$COMMAND" | grep -q "COPILOT_HOOKS_DENY_DEMO"; then + deny "Blocked demo command (test rule). Remove this rule after validating hooks." +fi + # Privilege escalation if echo "$COMMAND" | grep -qE '\b(sudo|su|runas)\b'; then deny "Privilege escalation requires manual approval." diff --git a/content/copilot/tutorials/optimize-code-reviews.md b/content/copilot/tutorials/optimize-code-reviews.md index 2b3b80f78a89..8c3e2d22053c 100644 --- a/content/copilot/tutorials/optimize-code-reviews.md +++ b/content/copilot/tutorials/optimize-code-reviews.md @@ -227,7 +227,7 @@ Automatic review comments help you optimize your reviews and secure your code mo To make your reviews more efficient and effective using {% data variables.product.prodname_copilot_short %}'s review capabilities, get started by following these steps. 1. Create custom instructions specific to your project and repository. Write your own, or take inspiration from our library of examples. See [AUTOTITLE](/copilot/tutorials/customization-library/custom-instructions). -1. To enable automatic {% data variables.copilot.copilot_code-review_short %} for your repository, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review). +1. To enable automatic {% data variables.copilot.copilot_code-review_short %} for your repository, see [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review). 1. To configure {% data variables.copilot.copilot_autofix_short %} for your repo you'll need to enable {% data variables.product.prodname_code_scanning %}. Once {% data variables.product.prodname_code_scanning %} with {% data variables.product.prodname_codeql %} analysis is enabled, {% data variables.copilot.copilot_autofix_short %} is enabled by default. For the easiest setup, see [AUTOTITLE](/code-security/how-tos/find-and-fix-code-vulnerabilities/configure-code-scanning/configure-code-scanning). 1. To add reliability, maintainability, and coverage checks to your pull requests, enable {% data variables.product.prodname_code_quality %} for your repository. See [AUTOTITLE](/code-security/how-tos/maintain-quality-code/enable-code-quality). diff --git a/content/copilot/tutorials/roll-out-at-scale/assign-licenses/choose-enterprise-plan.md b/content/copilot/tutorials/roll-out-at-scale/assign-licenses/choose-enterprise-plan.md index 1cde205b0847..b017f03df758 100644 --- a/content/copilot/tutorials/roll-out-at-scale/assign-licenses/choose-enterprise-plan.md +++ b/content/copilot/tutorials/roll-out-at-scale/assign-licenses/choose-enterprise-plan.md @@ -40,7 +40,7 @@ For a full comparison, see our [plans page](https://github.com/features/copilot/ {% data variables.product.prodname_ai_credits_short %} are consumed by advanced {% data variables.product.prodname_copilot_short %} features and models, including AI agents. Each plan's included {% data variables.product.prodname_ai_credits_short %} are pooled across your enterprise, so heavier users can draw from lighter users' unused portions. By giving members access to more {% data variables.product.prodname_ai_credits_short %}, you can scale your company with AI agents and drive real business outcomes. -By default, usage can continue beyond the included pool, with additional usage charged at {% data variables.product.prodname_ai_credits_value %} per {% data variables.product.prodname_ai_credit_singular %}. You can control this with budget controls. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +By default, usage can continue beyond the included pool, with additional usage charged at {% data variables.product.prodname_ai_credits_value %} per {% data variables.product.prodname_ai_credit_singular %}. You can control this with budget controls. See [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). ## How does {% data variables.copilot.copilot_enterprise_short %} support business goals? diff --git a/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md b/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md index 8a7a4ba745d4..746e8e98aa9c 100644 --- a/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md +++ b/content/copilot/tutorials/roll-out-at-scale/drive-downstream-impact/accelerate-pull-requests.md @@ -158,7 +158,7 @@ Developers **should not**: * [AUTOTITLE](/copilot/how-tos/copilot-on-github/copilot-for-github-tasks/create-a-pr-summary) * [AUTOTITLE](/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review) * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/add-custom-instructions/add-repository-instructions) -* [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review) +* [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review) * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/add-custom-instructions/add-organization-instructions) ## Metrics to watch diff --git a/content/copilot/tutorials/roll-out-at-scale/govern-at-scale/pilot-a-feature-or-model.md b/content/copilot/tutorials/roll-out-at-scale/govern-at-scale/pilot-a-feature-or-model.md index 580c83697efe..36a15d5f8e9c 100644 --- a/content/copilot/tutorials/roll-out-at-scale/govern-at-scale/pilot-a-feature-or-model.md +++ b/content/copilot/tutorials/roll-out-at-scale/govern-at-scale/pilot-a-feature-or-model.md @@ -15,7 +15,7 @@ This tutorial walks you through running a pilot end to end: setting a budget, en ## Before you start your pilot -Before you enable anything, make sure you've evaluated the feature or model and confirmed it meets your compliance requirements. See [AUTOTITLE](/copilot/concepts/learning-about-new-features-and-models). +Before you enable anything, make sure you've evaluated the feature or model and confirmed it meets your compliance requirements. See [AUTOTITLE](/copilot/concepts/enterprise/learning-about-new-features-and-models). If you're not sure whether a feature or model is safe to enable, check with security and compliance teams at your company before you start the pilot. @@ -42,7 +42,7 @@ Many of the features and models you'll want to pilot are billed through usage, s A handful of active developers using a frontier model or an agentic feature could consume more than you'd expect. Work out a rough estimate of what the pilot could cost, and decide on a ceiling you're willing to spend before you enable the feature. -Start by understanding how the feature or model is billed. Usage-based features consume {% data variables.product.prodname_ai_credits %}, and the cost of each interaction depends on the model and the number of tokens consumed. To understand which features count toward usage, how included credits are pooled across your enterprise, and how overages are charged, see [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). +Start by understanding how the feature or model is billed. Usage-based features consume {% data variables.product.prodname_ai_credits %}, and the cost of each interaction depends on the model and the number of tokens consumed. To understand which features count toward usage, how included credits are pooled across your enterprise, and how overages are charged, see [AUTOTITLE](/copilot/concepts/billing/organizations-and-enterprises/usage-based-billing). To produce an estimate, combine three numbers: @@ -75,7 +75,7 @@ If any of your pilot users aren't yet members, or are members but receive their {% data variables.product.prodname_copilot_short %} policies control which features and models your users can access and how their data is handled. Configure these policies for the pilot organization *before* you turn the feature on, so that pilot users get a correctly governed experience from their very first interaction rather than a brief window where the feature is available without the guardrails you intend. -Decide which features and models the pilot should allow, and set the policies at the organization level so the change only affects your pilot organization; policies set at the enterprise level apply to every organization in your enterprise. If your enterprise policy doesn't allow organizations to set their own value, an enterprise owner must change this before you can continue. To understand how policies cascade from the enterprise to organizations and who can override settings at each level, see [AUTOTITLE](/copilot/concepts/policies). +Decide which features and models the pilot should allow, and set the policies at the organization level so the change only affects your pilot organization; policies set at the enterprise level apply to every organization in your enterprise. If your enterprise policy doesn't allow organizations to set their own value, an enterprise owner must change this before you can continue. To understand how policies cascade from the enterprise to organizations and who can override settings at each level, see [AUTOTITLE](/copilot/concepts/enterprise/policies). ### Enable the feature for a single organization diff --git a/content/copilot/tutorials/use-copilot-code-review-across-the-pull-request-lifecycle.md b/content/copilot/tutorials/use-copilot-code-review-across-the-pull-request-lifecycle.md index be06455d09c7..a0624e6bd139 100644 --- a/content/copilot/tutorials/use-copilot-code-review-across-the-pull-request-lifecycle.md +++ b/content/copilot/tutorials/use-copilot-code-review-across-the-pull-request-lifecycle.md @@ -33,7 +33,7 @@ Choose a review model and set up early feedback for draft and active pull reques | Automatic review on draft pull requests | Teams that want earlier feedback loops | Authors can fix issues before human review starts. | | Automatic review on new pushes | Fast-moving pull requests with multiple revisions | {% data variables.product.prodname_copilot_short %} reevaluates substantial updates as the pull request evolves. | -For setup steps, see [AUTOTITLE](/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review) and [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-automatic-review). +For setup steps, see [AUTOTITLE](/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review) and [AUTOTITLE](/copilot/how-tos/copilot-on-github/set-up-copilot/configure-code-review). ### Use {% data variables.copilot.copilot_code-review_short %} early on draft pull requests diff --git a/content/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility.md b/content/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility.md index fcdf731f451c..afc9fdf4dfd4 100644 --- a/content/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility.md +++ b/content/packages/learn-github-packages/configuring-a-packages-access-control-and-visibility.md @@ -116,6 +116,12 @@ The specified repository does not need to be the repository where the source cod If you publish a package that is linked to a repository, {% data variables.product.prodname_actions %} workflows in the linked repository automatically get access to the package, unless your organization has disabled the automatic inheritance of access permissions. For more information, see [About inheritance of access permissions](#about-inheritance-of-access-permissions) above. {% endif %} +{% ifversion org-automatic-registry-access %} + +Granting a repository access here also allows {% data variables.product.prodname_dependabot %} to pull from this package automatically, without requiring {% data variables.product.pat_generic_plural %} or `dependabot.yml` registry configuration. See [AUTOTITLE](/code-security/concepts/supply-chain-security/automatic-dependabot-access-to-github-registries). + +{% endif %} + > [!NOTE] > * Syncing your package with a repository {% data variables.package_registry.package-settings-actions-access-menu %} is different than connecting your package to a repository. For more information about linking a repository to your package, see [AUTOTITLE](/packages/learn-github-packages/connecting-a-repository-to-a-package). > * You can choose to limit permissions to workflow jobs using the `permissions` key and `packages` scope. For more information, see [AUTOTITLE](/actions/tutorials/authenticate-with-github_token#modifying-the-permissions-for-the-github_token). diff --git a/content/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site.md b/content/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site.md index 10ca0cfc10a4..21302821f3c2 100644 --- a/content/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site.md +++ b/content/pages/configuring-a-custom-domain-for-your-github-pages-site/managing-a-custom-domain-for-your-github-pages-site.md @@ -103,6 +103,8 @@ To set up an apex domain, such as `example.com`, you must configure a custom dom Navigate to your DNS provider and create a `CNAME` record for the `www` subdomain that points to your {% data variables.product.prodname_pages %} default domain. For example, if your site is located at `.github.io`, you should create a `CNAME` record that points `www.example.com` to `.github.io` Similarly, for an organization site located at `.github.io`, you should create a `CNAME` record that points `www.example.com` to `.github.io`. Ensure that the `CNAME` record points directly to `.github.io` or `.github.io` without including the repository name. +These `CNAME` record values are the same for both publicly and privately published {% data variables.product.prodname_pages %} sites. Privately published sites are available with {% data variables.product.prodname_ghe_cloud %}. + {% data reusables.pages.contact-dns-provider %} {% data reusables.pages.default-domain-information %} ## Configuring a subdomain diff --git a/content/pull-requests/how-tos/review-pull-requests/commenting-on-a-pull-request.md b/content/pull-requests/how-tos/review-pull-requests/commenting-on-a-pull-request.md index 399cbf736b63..2fe5c3ec5d13 100644 --- a/content/pull-requests/how-tos/review-pull-requests/commenting-on-a-pull-request.md +++ b/content/pull-requests/how-tos/review-pull-requests/commenting-on-a-pull-request.md @@ -48,11 +48,11 @@ To reply to an existing line or file comment, navigate to the comment on either {% data reusables.repositories.start-file-comment %} 1. When you're done: - * If you only want to add this **one comment**, click **Add single comment**. + * If you only want to add this **one comment**, click {% ifversion fpt or ghec %}**Comment**{% elsif ghes %}**Add single comment**{% endif %}. * If you want to add **multiple comments**, click **Start a review**, then continue adding comments. - When you're finished, click **Finish your review**, leave a summary of your review, and click **Submit review**. + When you're finished, click {% ifversion fpt or ghec %}**Submit review**{% elsif ghes %}**Finish your review**{% endif %}, leave a summary of your review, and click **Submit review**. Anyone watching the pull request or repository will receive a notification of your comments. Batching your comments avoids sending multiple notifications. diff --git a/content/pull-requests/how-tos/review-pull-requests/incorporating-feedback-in-your-pull-request.md b/content/pull-requests/how-tos/review-pull-requests/incorporating-feedback-in-your-pull-request.md index 2ec8f7488301..e42cdc06da06 100644 --- a/content/pull-requests/how-tos/review-pull-requests/incorporating-feedback-in-your-pull-request.md +++ b/content/pull-requests/how-tos/review-pull-requests/incorporating-feedback-in-your-pull-request.md @@ -40,6 +40,12 @@ Each person who suggested a change included in the commit will be a co-author of 1. In the commit message field, type a short, meaningful commit message that describes the change you made to the file or files. 1. Click **Commit changes**. +{% ifversion fpt or ghec %} +## Delegating review comments to {% data variables.product.prodname_copilot_short %} + +If you have access to {% data variables.copilot.copilot_cloud_agent %}, you can delegate review comments to have {% data variables.product.prodname_copilot_short %} implement the feedback. For more information, see [AUTOTITLE](/copilot/how-tos/use-copilot-agents/cloud-agent/use-cloud-agent-on-github#delegating-review-comments). +{% endif %} + ## Re-requesting a review For example, you can re-request a review after you've made substantial changes to your pull request. diff --git a/content/pull-requests/how-tos/review-pull-requests/viewing-a-pull-request-review.md b/content/pull-requests/how-tos/review-pull-requests/viewing-a-pull-request-review.md index 10ca5b6ae5bd..354c8d9595d9 100644 --- a/content/pull-requests/how-tos/review-pull-requests/viewing-a-pull-request-review.md +++ b/content/pull-requests/how-tos/review-pull-requests/viewing-a-pull-request-review.md @@ -22,7 +22,7 @@ When you view a full review, you see the same version of the pull request as the {% data reusables.repositories.sidebar-pr %} {% data reusables.repositories.choose-pr-review %} -1. On the "Conversation" tab, scroll to the review you want to see, then click **View changes**. +1. On the "Conversation" tab, scroll to the review you want to see, then click **View reviewed changes**. ![Screenshot of a review. The "View changes" link is outlined in dark orange.](/assets/images/help/pull_requests/view-full-review-view-changes.png) diff --git a/content/rest/code-scanning/index.md b/content/rest/code-scanning/index.md index e80ddeefbd22..27c259e57984 100644 --- a/content/rest/code-scanning/index.md +++ b/content/rest/code-scanning/index.md @@ -13,6 +13,8 @@ children: - /alert-dismissal-requests - /code-scanning autogenerated: rest +redirect_from: + - /rest/code-scanning/ai-scan --- diff --git a/data/features/actions-cache-mode.yml b/data/features/actions-cache-mode.yml new file mode 100644 index 000000000000..d505972bf131 --- /dev/null +++ b/data/features/actions-cache-mode.yml @@ -0,0 +1,6 @@ +# Documentation for the `cache-mode` workflow key, which controls least-privilege +# cache access for GitHub Actions jobs and reusable workflows. +# This feature is dotcom-only and is not available on GitHub Enterprise Server. +versions: + fpt: '*' + ghec: '*' diff --git a/data/features/org-automatic-registry-access.yml b/data/features/org-automatic-registry-access.yml new file mode 100644 index 000000000000..458473d9b3f0 --- /dev/null +++ b/data/features/org-automatic-registry-access.yml @@ -0,0 +1,6 @@ +# Reference: #22447 +# Automatic Dependabot access to GitHub-hosted registries [GA] +versions: + fpt: '*' + ghec: '*' + ghes: '>=3.23' diff --git a/data/features/spark.yml b/data/features/spark.yml deleted file mode 100644 index f6715c0d95ba..000000000000 --- a/data/features/spark.yml +++ /dev/null @@ -1,5 +0,0 @@ -# Reference: #17636 -# Spark (No-code app builder, public preview) -versions: - fpt: '*' - ghec: '*' diff --git a/data/reusables/code-quality/agentic-autofix-preview-note.md b/data/reusables/code-quality/agentic-autofix-preview-note.md new file mode 100644 index 000000000000..82110a9f15e5 --- /dev/null +++ b/data/reusables/code-quality/agentic-autofix-preview-note.md @@ -0,0 +1,2 @@ +> [!NOTE] +> Agentic Autofix for {% data variables.product.prodname_code_quality %} backlog findings is currently in {% data variables.release-phases.public_preview %} and subject to change. diff --git a/data/reusables/code-quality/generate-autofix-from-dashboard.md b/data/reusables/code-quality/generate-autofix-from-dashboard.md index 3dbbc61c5618..86a8c3b199c5 100644 --- a/data/reusables/code-quality/generate-autofix-from-dashboard.md +++ b/data/reusables/code-quality/generate-autofix-from-dashboard.md @@ -1,3 +1,2 @@ -1. To the right of an individual finding, click **Generate fix**. -1. Review the diff of the proposed change. If you agree with it, click **Open pull request**. -1. In the "Commit autofix to branch" dialog, select "Open a pull request", then click **Commit change**. +1. To the right of an individual finding, click **Assign to {% data variables.product.prodname_copilot_short %}**. Assigning a finding to {% data variables.product.prodname_copilot_short %} consumes {% data variables.product.prodname_ai_credits_short %}. +1. Review the draft pull request that {% data variables.product.prodname_copilot_short %} opens with a fix for the finding. diff --git a/data/reusables/codeql-cli/download-codeql-cli.md b/data/reusables/codeql-cli/download-codeql-cli.md index f69ac8108132..3d397e51ea56 100644 --- a/data/reusables/codeql-cli/download-codeql-cli.md +++ b/data/reusables/codeql-cli/download-codeql-cli.md @@ -16,6 +16,8 @@ You should download the {% data variables.product.prodname_codeql %} bundle from {% endif %} -You should always use the {% data variables.product.prodname_codeql %} bundle. This ensures compatibility and gives much better performance than a separate download of the {% data variables.product.prodname_codeql_cli %} and checkout of the {% data variables.product.prodname_codeql %} queries. If you will only be running the CLI on one specific platform, download the appropriate `codeql-bundle-PLATFORM.tar.zst` file. Alternatively, you can download `codeql-bundle.tar.zst`, which contains the CLI for all supported platforms. +You should always use the {% data variables.product.prodname_codeql %} bundle. This ensures compatibility and gives much better performance than a separate download of the {% data variables.product.prodname_codeql_cli %} and checkout of the {% data variables.product.prodname_codeql %} queries. Download the `codeql-bundle-PLATFORM.tar.zst` file for the platform where you will run the CLI. Replace `PLATFORM` with `linux64` for Linux x64, `linux-arm64` for Linux ARM64, `osx64` for macOS, or `win64` for Windows. + +The all-platforms bundle (`codeql-bundle.tar.zst` and `codeql-bundle.tar.gz`) is closing down and will stop being published in a future release. Download the per-platform `codeql-bundle-PLATFORM.tar.zst` file instead. In {% data variables.product.prodname_codeql_cli %} 2.27.0 and later, running the CLI from an all-platforms distribution produces a warning. There are also `tar.gz` variants of the bundle, which are identical to the `tar.zst` variants except compressed using the less efficient gzip algorithm. The only reason to download the `tar.gz` variants is if you are using older decompression tools that do not support the Zstandard compression algorithm. diff --git a/data/reusables/copilot/copilot-cli/cli-example-plugin-file.md b/data/reusables/copilot/copilot-cli/cli-example-plugin-file.md index 0c2d12867506..8a47413cbfc7 100644 --- a/data/reusables/copilot/copilot-cli/cli-example-plugin-file.md +++ b/data/reusables/copilot/copilot-cli/cli-example-plugin-file.md @@ -1,5 +1,6 @@ ```json copy { + "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json", "name": "my-dev-tools", "description": "React development utilities", "version": "1.2.0", @@ -8,10 +9,6 @@ "email": "jane@example.com" }, "license": "MIT", - "keywords": ["react", "frontend"], - "agents": "agents/", - "skills": ["skills/", "extra-skills/"], - "hooks": "hooks.json", - "mcpServers": ".mcp.json" + "keywords": ["react", "frontend"] } ``` diff --git a/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md b/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md index 99abd0563331..be60376f1472 100644 --- a/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md +++ b/data/reusables/copilot/copilot-cloud-agent-non-auto-models.md @@ -12,5 +12,4 @@ * {% data variables.copilot.copilot_gpt_6_astra %} * {% data variables.copilot.copilot_grok_45 %} * {% data variables.copilot.copilot_grok_46 %} -* {% data variables.copilot.copilot_mai_code_1_flash %} * {% data variables.copilot.copilot_mai_code_1_1_flash %} diff --git a/data/reusables/copilot/model-compliance/us-models.md b/data/reusables/copilot/model-compliance/us-models.md index 504dd1e8a26b..2e77f292e2b0 100644 --- a/data/reusables/copilot/model-compliance/us-models.md +++ b/data/reusables/copilot/model-compliance/us-models.md @@ -9,4 +9,3 @@ * Claude Sonnet 5 * Claude Opus 4.8 * Claude Opus 5 -* MAI-Code-1-Flash diff --git a/data/reusables/copilot/plans/organization-plans-paused.md b/data/reusables/copilot/plans/organization-plans-paused.md deleted file mode 100644 index 1561e3f17ddc..000000000000 --- a/data/reusables/copilot/plans/organization-plans-paused.md +++ /dev/null @@ -1,7 +0,0 @@ - - -On April 22, 2026, new self-serve purchases of {% data variables.copilot.copilot_business_short %} and {% data variables.copilot.copilot_enterprise_short %} were temporarily paused. - -Self-serve sign-ups **are reopening soon** for customers paying by credit card or PayPal. You might be charged prorated seat costs at sign-up. Additional usage beyond your included amount requires payment as you go. Self-serve trials remain paused. - - diff --git a/data/reusables/copilot/policy/suggestions-code-enterprise-default.md b/data/reusables/copilot/policy/suggestions-code-enterprise-default.md index 381aa5d2dae4..7c6bca5e1bcc 100644 --- a/data/reusables/copilot/policy/suggestions-code-enterprise-default.md +++ b/data/reusables/copilot/policy/suggestions-code-enterprise-default.md @@ -1 +1 @@ -**Suggestions matching public code** is set to **Blocked** by default for {% data variables.copilot.copilot_business_short %} users. You can change this setting in the **Privacy** section of the {% data variables.product.prodname_copilot_short %} policy page. \ No newline at end of file +**Suggestions matching public code** is set to **Allowed** by default for {% data variables.copilot.copilot_business_short %} users. You can change this setting in the **Privacy** section of the {% data variables.product.prodname_copilot_short %} policy page. \ No newline at end of file diff --git a/data/reusables/copilot/spark-deprecation.md b/data/reusables/copilot/spark-deprecation.md deleted file mode 100644 index 746e8bc208cd..000000000000 --- a/data/reusables/copilot/spark-deprecation.md +++ /dev/null @@ -1 +0,0 @@ -Beginning August 4, 2026, {% data variables.product.prodname_spark %} will no longer accept new users or allow the creation of new apps. Existing users can continue to access and use apps they have already created. Open Spark workbench for your app, select "..." and "Create repository" to save your app code before August 31, 2026. \ No newline at end of file diff --git a/data/reusables/elm/ghe-pat-description.md b/data/reusables/elm/ghe-pat-description.md deleted file mode 100644 index 2d20f0ca17ab..000000000000 --- a/data/reusables/elm/ghe-pat-description.md +++ /dev/null @@ -1 +0,0 @@ -The {% data variables.product.pat_v1 %} for {% data variables.enterprise.data_residency_site %} diff --git a/data/reusables/elm/hmac-key-value.md b/data/reusables/elm/hmac-key-value.md deleted file mode 100644 index 976ff0198dfd..000000000000 --- a/data/reusables/elm/hmac-key-value.md +++ /dev/null @@ -1 +0,0 @@ -$(ghe-config secrets.elm-exporter.elm-exporter-hmac-keys) \ No newline at end of file diff --git a/data/reusables/elm/localhost-value.md b/data/reusables/elm/localhost-value.md deleted file mode 100644 index f342748276e3..000000000000 --- a/data/reusables/elm/localhost-value.md +++ /dev/null @@ -1 +0,0 @@ -http://localhost:1738 \ No newline at end of file diff --git a/data/reusables/enterprise-accounts/enterprise-apps-capabilities.md b/data/reusables/enterprise-accounts/enterprise-apps-capabilities.md index 92167705bd5f..8fa813f053ac 100644 --- a/data/reusables/enterprise-accounts/enterprise-apps-capabilities.md +++ b/data/reusables/enterprise-accounts/enterprise-apps-capabilities.md @@ -7,6 +7,9 @@ Enterprise-installed {% data variables.product.prodname_github_apps %} cannot ca {%- ifversion enterprise-billing-github-app %} * Manage enterprise billing, including budgets, cost centers, and usage reports. For more information, see [AUTOTITLE](/rest/billing). {%- endif %} +{%- ifversion ghec %} +* Authorize {% data variables.product.pat_v1_plural %} and verified, user-owned SSH authentication keys for SSO in selected organizations. See [AUTOTITLE](/authentication/authenticating-with-single-sign-on/authorizing-credentials-for-single-sign-on-with-a-github-app). +{%- endif %} * Call the enterprise SCIM APIs Check the [changelog](https://github.blog/changelog/) for updates on new APIs and permissions for {% data variables.product.prodname_github_apps %}. diff --git a/data/tables/copilot/annual-subscriber-model-multipliers.yml b/data/tables/copilot/annual-subscriber-model-multipliers.yml index fe26065e9c68..1476210f6ded 100644 --- a/data/tables/copilot/annual-subscriber-model-multipliers.yml +++ b/data/tables/copilot/annual-subscriber-model-multipliers.yml @@ -56,8 +56,5 @@ - model: 'GPT-5 mini' new_multiplier: '0.33' -- model: 'MAI-Code-1-Flash' - new_multiplier: '0.33' - - model: 'MAI-Code-1.1-Flash' new_multiplier: '0.25' diff --git a/data/tables/copilot/model-comparison.yml b/data/tables/copilot/model-comparison.yml index 92d71a7cc499..7f4b338d44cd 100644 --- a/data/tables/copilot/model-comparison.yml +++ b/data/tables/copilot/model-comparison.yml @@ -121,11 +121,6 @@ further_reading: '[Gemini 3.8 Flash model card](https://storage.googleapis.com/deepmind-media/Model-Cards/Gemini-3-8-Flash-Model-Card.pdf)' # Microsoft -- name: MAI-Code-1-Flash - task_area: General-purpose coding and writing - excels_at: Fast, accurate code completions and explanations - further_reading: '[MAI-Code-1-Flash model card](https://aka.ms/mai-code-1-flash-modelcard)' - - name: MAI-Code-1.1-Flash task_area: General-purpose coding and writing, image understanding excels_at: Fast code completions and explanations, instruction following, tool use diff --git a/data/tables/copilot/model-deprecation-history.yml b/data/tables/copilot/model-deprecation-history.yml index a809999b2488..58f7a7cf5ffb 100644 --- a/data/tables/copilot/model-deprecation-history.yml +++ b/data/tables/copilot/model-deprecation-history.yml @@ -37,7 +37,7 @@ - name: 'Raptor mini' retirement_date: '2026-09-01' - suggested_alternative: 'MAI-Code-1-Flash' + suggested_alternative: 'MAI-Code-1.1-Flash' - name: 'Gemini 2.5 Pro' retirement_date: '2026-07-31' diff --git a/data/tables/copilot/model-release-status.yml b/data/tables/copilot/model-release-status.yml index e3aed8a2ca9a..30ef6d240cea 100644 --- a/data/tables/copilot/model-release-status.yml +++ b/data/tables/copilot/model-release-status.yml @@ -112,10 +112,6 @@ release_status: 'GA' # Microsoft models -- name: 'MAI-Code-1-Flash' - provider: 'Microsoft' - release_status: 'GA' - - name: 'MAI-Code-1.1-Flash' provider: 'Microsoft' release_status: 'GA' diff --git a/data/tables/copilot/model-supported-clients.yml b/data/tables/copilot/model-supported-clients.yml index 51d50ccc9855..555c83005dd3 100644 --- a/data/tables/copilot/model-supported-clients.yml +++ b/data/tables/copilot/model-supported-clients.yml @@ -131,15 +131,6 @@ xcode: true jetbrains: true -- name: MAI-Code-1-Flash - dotcom: true - cli: true - vscode: true - vs: true - eclipse: true - xcode: true - jetbrains: true - - name: MAI-Code-1.1-Flash dotcom: true cli: true diff --git a/data/tables/copilot/model-supported-plans.yml b/data/tables/copilot/model-supported-plans.yml index b1560f4c9cf8..663b9264fb24 100644 --- a/data/tables/copilot/model-supported-plans.yml +++ b/data/tables/copilot/model-supported-plans.yml @@ -201,13 +201,6 @@ business: true enterprise: true -- name: MAI-Code-1-Flash - pro: true - pro_plus: true - max: true - business: true - enterprise: true - - name: MAI-Code-1.1-Flash pro: true pro_plus: true diff --git a/data/tables/copilot/models-and-pricing.yml b/data/tables/copilot/models-and-pricing.yml index 054b1fe87753..b5c04e7085e5 100644 --- a/data/tables/copilot/models-and-pricing.yml +++ b/data/tables/copilot/models-and-pricing.yml @@ -370,14 +370,6 @@ output: $12.00 # Microsoft -- model: 'MAI-Code-1-Flash' - provider: microsoft - release_status: GA - category: Lightweight - input: $0.75 - cached_input: $0.075 - output: $4.50 - - model: 'MAI-Code-1.1-Flash' provider: microsoft release_status: GA diff --git a/data/ui.yml b/data/ui.yml index 7b4565bf4036..812d976a5b0d 100644 --- a/data/ui.yml +++ b/data/ui.yml @@ -93,7 +93,10 @@ search_results: n_results: '{n} results' search_validation_error: Validation error with search query filter: Filter - clear_filter: Clear + clear_all_filters: Clear all + show_filters: Show filters + hide_filters: Hide filters + filter_search_results: Filter search results homepage: explore_by_product: Explore by product @@ -131,7 +134,7 @@ support: ask_community: Ask the GitHub community survey: - able_to_find: Did you find what you needed? + able_to_find: Was this Doc helpful? yes: Yes no: No cancel: Cancel @@ -147,8 +150,8 @@ survey: server_error: Unable to process comment at the moment. Please try again. contribution_cta: - title: Help us make these docs great! - body: All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request. + title: Help us make GitHub Docs great! + body: All Docs are open source. See something that's wrong or unclear? Submit a pull request. button: Make a contribution to_guidelines: Learn how to contribute @@ -314,6 +317,7 @@ webhooks: footer: support_heading: Help and support legal_heading: Legal + back_to_top: Back to top imprint: Imprint terms: Terms privacy: Privacy diff --git a/data/variables/copilot.yml b/data/variables/copilot.yml index d4c9ea0d09de..680885a1ca79 100644 --- a/data/variables/copilot.yml +++ b/data/variables/copilot.yml @@ -243,7 +243,6 @@ copilot_grok_46: 'Grok 4.6' # Qwen: copilot_qwen_25: 'Qwen2.5' # Microsoft: -copilot_mai_code_1_flash: 'MAI-Code-1-Flash' copilot_mai_code_1_1_flash: 'MAI-Code-1.1-Flash' # Microsoft fine-tuned: copilot_raptor_mini: 'Raptor mini' diff --git a/package-lock.json b/package-lock.json index ffd4b8c84745..e2e0f203f109 100644 --- a/package-lock.json +++ b/package-lock.json @@ -30,7 +30,7 @@ "@primer/octicons-react": "^19.22.0", "@primer/primitives": "^11.3.1", "@primer/react": "38.19.0", - "@primer/react-brand": "^0.70.0", + "@primer/react-brand": "^0.74.0", "accept-language-parser": "^1.5.0", "ajv": "^8.18.0", "ajv-errors": "^3.0.0", @@ -81,7 +81,7 @@ "mdast-util-to-markdown": "2.1.2", "mdast-util-to-string": "^4.0.0", "micromark-extension-gfm": "^3.0.0", - "next": "^16.2.6", + "next": "^16.3.3", "ora": "^9.3.0", "parse5": "8.0.1", "quick-lru": "7.0.1", @@ -100,7 +100,7 @@ "remark-remove-comments": "^1.1.1", "remark-stringify": "^11.0.0", "semver": "^7.7.4", - "sharp": "0.35.3", + "sharp": "0.35.4", "slash": "^5.1.0", "strip-ansi": "7.1.0", "swr": "^2.4.0", @@ -1171,9 +1171,9 @@ } }, "node_modules/@eslint/eslintrc/node_modules/js-yaml": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", - "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz", + "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==", "dev": true, "funding": [ { @@ -1401,9 +1401,9 @@ } }, "node_modules/@gr2m/gray-matter/node_modules/js-yaml": { - "version": "4.3.1", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz", - "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==", + "version": "4.3.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.2.tgz", + "integrity": "sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==", "funding": [ { "type": "github", @@ -1687,9 +1687,9 @@ } }, "node_modules/@img/sharp-darwin-arm64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.3.tgz", - "integrity": "sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.4.tgz", + "integrity": "sha512-Uhfl4V4lhP2nbUVF9+hyH1+luj86f1gUFeo8ALYxFoULoU+G87D43BfeMP8XHsk9boxAnCY/bf2EHwhA7MuGsA==", "cpu": [ "arm64" ], @@ -1705,13 +1705,13 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-darwin-arm64": "1.3.2" + "@img/sharp-libvips-darwin-arm64": "1.3.3" } }, "node_modules/@img/sharp-darwin-x64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.3.tgz", - "integrity": "sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.4.tgz", + "integrity": "sha512-hWniXY3bG5qKpkKrAwPe4y+VTPmf086YQAnkxWh7uA1YrlRouWGa0M0Mxj3ZjnXFkv7/TD1bTy9lGUK26vRvWw==", "cpu": [ "x64" ], @@ -1727,20 +1727,20 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-darwin-x64": "1.3.2" + "@img/sharp-libvips-darwin-x64": "1.3.3" } }, "node_modules/@img/sharp-freebsd-wasm32": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.3.tgz", - "integrity": "sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.4.tgz", + "integrity": "sha512-lIsKw/BU+kjB4eZjxrYrZmwOJYi3Ajrv66iAlBmUPyKc3HpnloevB1g3wxGD9P/5BbQ1brBGl65VRRrCvQDEqA==", "license": "Apache-2.0", "optional": true, "os": [ "freebsd" ], "dependencies": { - "@img/sharp-wasm32": "0.35.3" + "@img/sharp-wasm32": "0.35.4" }, "engines": { "node": ">=20.9.0" @@ -1750,9 +1750,9 @@ } }, "node_modules/@img/sharp-libvips-darwin-arm64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.2.tgz", - "integrity": "sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.3.tgz", + "integrity": "sha512-suTBPTDGrI9WodccaDdwZItTSaBYASlBk1NSfElSHrUfzu3szG6lvIF58+WiFvnfzuK8ZBFS5zE00PxqxnRiPg==", "cpu": [ "arm64" ], @@ -1766,9 +1766,9 @@ } }, "node_modules/@img/sharp-libvips-darwin-x64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.2.tgz", - "integrity": "sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.3.tgz", + "integrity": "sha512-FVJZ5mITMobmXIz/hPDTw0EintTW5H3WfrxwLqEqjiIihlu+hVRyGrFQ60xl0Lxn7Bt3zdpevPaQi0HEzqz9fw==", "cpu": [ "x64" ], @@ -1782,9 +1782,9 @@ } }, "node_modules/@img/sharp-libvips-linux-arm": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.2.tgz", - "integrity": "sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.3.tgz", + "integrity": "sha512-3rbU4vqXXc3hY/OiXdl52xZvT0F1yEngWfvqudtPJg/KkyiaQw2DRsFrNzpmLvfavbwOq3qXn36GP8obHRULQA==", "cpu": [ "arm" ], @@ -1801,9 +1801,9 @@ } }, "node_modules/@img/sharp-libvips-linux-arm64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.2.tgz", - "integrity": "sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.3.tgz", + "integrity": "sha512-0DaL0A6Xu6sQSQFwe4iVCrKWU2cCTItnRsYsCdxAMm9NF6twAA9BKnoqy4hqz4+azQ0JHuA26qiUKsf1XJ/v5A==", "cpu": [ "arm64" ], @@ -1819,10 +1819,48 @@ "url": "https://opencollective.com/libvips" } }, + "node_modules/@img/sharp-libvips-linux-ppc64": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.3.tgz", + "integrity": "sha512-cdn1OvUBwsXhbC0zSzJnNzf5MZ/mTrobawDvNXBTxe8VtqKAm0sRuEY2Evzovb/w9JMk4TvRxqt1mekSuJz64w==", + "cpu": [ + "ppc64" + ], + "libc": [ + "glibc" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-libvips-linux-riscv64": { + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.3.tgz", + "integrity": "sha512-HjPVx7yKz+0lqdhDlTw1tt90wamBoxhiXpvl1XZpJLiHH4RCJ5yDTqH+VlYPv2fwFs89JFw4c1IexYOcQUi4IQ==", + "cpu": [ + "riscv64" + ], + "libc": [ + "glibc" + ], + "license": "LGPL-3.0-or-later", + "optional": true, + "os": [ + "linux" + ], + "funding": { + "url": "https://opencollective.com/libvips" + } + }, "node_modules/@img/sharp-libvips-linux-s390x": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.2.tgz", - "integrity": "sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.3.tgz", + "integrity": "sha512-neWLh+3yCNThxnfy3c4BbVBeGgt9aftno+XbT56iK28RgeDs3UOFWviLWlUu0bArYVYJaFDK+RRohbicUNCm8Q==", "cpu": [ "s390x" ], @@ -1839,9 +1877,9 @@ } }, "node_modules/@img/sharp-libvips-linux-x64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.2.tgz", - "integrity": "sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.3.tgz", + "integrity": "sha512-4vKmvAst9nrowcqquKFAyZJUDolUaIp8uRiN0mWFguJ1IplC9/pitXtlnnlU4aa/eJw3J7i67V+pwUL+wZGdsA==", "cpu": [ "x64" ], @@ -1858,9 +1896,9 @@ } }, "node_modules/@img/sharp-libvips-linuxmusl-arm64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.2.tgz", - "integrity": "sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.3.tgz", + "integrity": "sha512-Y9kQaLMuNoB0bPYOOdcZMaseNrFpPodIWWMrx+CZyydf2xn68j9WYc6sWWRrDwNkzCQjKYfc68L7jKjGlHMibw==", "cpu": [ "arm64" ], @@ -1877,9 +1915,9 @@ } }, "node_modules/@img/sharp-libvips-linuxmusl-x64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.2.tgz", - "integrity": "sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==", + "version": "1.3.3", + "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.3.tgz", + "integrity": "sha512-fj8Mv0HHfD1Rr+4I68+3agJynxDWtBFgicTbSOb9Bke6pIwzGcJ+RX/yHjmiEGFMCavY/dxvem7MyNaJF+wDiw==", "cpu": [ "x64" ], @@ -1896,9 +1934,9 @@ } }, "node_modules/@img/sharp-linux-arm": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.3.tgz", - "integrity": "sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.4.tgz", + "integrity": "sha512-7OAS8gI0EReKGVN2HssHlM6umJgxF5VI3xN0p9FA91p/YO+ou5hiNghLdZ5BEHztwaaK5+bLKRf8x/o2L2nk9A==", "cpu": [ "arm" ], @@ -1917,13 +1955,13 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-linux-arm": "1.3.2" + "@img/sharp-libvips-linux-arm": "1.3.3" } }, "node_modules/@img/sharp-linux-arm64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.3.tgz", - "integrity": "sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.4.tgz", + "integrity": "sha512-De4jpEnAU8Hd5oT0j1G3uL4ZvTuipVMn7YC6vPaJhy6/7EwEae0SVAoBrUMYQbkLGDm85taVWwuPc1a44LTzCQ==", "cpu": [ "arm64" ], @@ -1942,13 +1980,63 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-linux-arm64": "1.3.2" + "@img/sharp-libvips-linux-arm64": "1.3.3" + } + }, + "node_modules/@img/sharp-linux-ppc64": { + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.4.tgz", + "integrity": "sha512-2oYZJeIl4kCcMGk4ouZVjnkCtFrpQFlNEtJ6GbxzhHQchwH0NH/qEb9ykmOl29dqwMq+JhFdZn+1ak2FKhI9fQ==", + "cpu": [ + "ppc64" + ], + "libc": [ + "glibc" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=20.9.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linux-ppc64": "1.3.3" + } + }, + "node_modules/@img/sharp-linux-riscv64": { + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.4.tgz", + "integrity": "sha512-cPbNChoRURAWdebDIHSenxRpgEdy7JkPydSnUxRm9VvKD7m0/xVaR/8Fzlu81pk5nHEvHH87UZUA7cTtwnbJSA==", + "cpu": [ + "riscv64" + ], + "libc": [ + "glibc" + ], + "license": "Apache-2.0", + "optional": true, + "os": [ + "linux" + ], + "engines": { + "node": ">=20.9.0" + }, + "funding": { + "url": "https://opencollective.com/libvips" + }, + "optionalDependencies": { + "@img/sharp-libvips-linux-riscv64": "1.3.3" } }, "node_modules/@img/sharp-linux-s390x": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.3.tgz", - "integrity": "sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.4.tgz", + "integrity": "sha512-RY0JFY8Fd6RonCBtHz+DvadaPkXDSI1AUn6yWL9TipqkZ1vY8w8evqdgyDFnkm4/K1ve1TvZiaePP5oSd4+WVQ==", "cpu": [ "s390x" ], @@ -1967,13 +2055,13 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-linux-s390x": "1.3.2" + "@img/sharp-libvips-linux-s390x": "1.3.3" } }, "node_modules/@img/sharp-linux-x64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.3.tgz", - "integrity": "sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.4.tgz", + "integrity": "sha512-9qvvEAuk8k89TfWUoX2htWjbAMX8p+NxCppjpcg5k6xMsjhBQPTsoIh36h9Qde4WRuGpJeYnOjdosDn/cnv+OA==", "cpu": [ "x64" ], @@ -1992,13 +2080,13 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-linux-x64": "1.3.2" + "@img/sharp-libvips-linux-x64": "1.3.3" } }, "node_modules/@img/sharp-linuxmusl-arm64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.3.tgz", - "integrity": "sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.4.tgz", + "integrity": "sha512-KB5jxpfWQTr0nc3xdHtWChdbifHrBGsd2SM62Eyxrl8afikm+f5qGBU75SJIZBT/S1MC8XyacdlXBMSWq6OURA==", "cpu": [ "arm64" ], @@ -2017,13 +2105,13 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-linuxmusl-arm64": "1.3.2" + "@img/sharp-libvips-linuxmusl-arm64": "1.3.3" } }, "node_modules/@img/sharp-linuxmusl-x64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.3.tgz", - "integrity": "sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.4.tgz", + "integrity": "sha512-f+eZJZIQNEEd26RPSW+76chwOf1XtA2Y/O+5ocVyLliHkeih3e+jhLVBdNTd2rS3IbNXK8+ug93Vf5ZXtF5Lxg==", "cpu": [ "x64" ], @@ -2042,17 +2130,17 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-libvips-linuxmusl-x64": "1.3.2" + "@img/sharp-libvips-linuxmusl-x64": "1.3.3" } }, "node_modules/@img/sharp-wasm32": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.3.tgz", - "integrity": "sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.4.tgz", + "integrity": "sha512-zQnl4Kwp7Q6NHsENtU2T/00Zi+w3AQNwz3+UaTyVBy2FpXrzXzGjndpK61onhZjRtRpQXxCTeqw19bVyXOh7jA==", "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT", "optional": true, "dependencies": { - "@emnapi/runtime": "^1.11.1" + "@emnapi/runtime": "^1.11.3" }, "engines": { "node": ">=20.9.0" @@ -2062,17 +2150,36 @@ } }, "node_modules/@img/sharp-webcontainers-wasm32": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.3.tgz", - "integrity": "sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.4.tgz", + "integrity": "sha512-ESfNkywmCfPNyaZjxooddJQiQ+l/nTpGEOGthxiLnIHXC/CmcBixnfwUleX9mCz9ovrUUvKMap/pm8RYbzfwaA==", "cpu": [ "wasm32" ], "license": "Apache-2.0", "optional": true, "dependencies": { - "@img/sharp-wasm32": "0.35.3" + "@img/sharp-wasm32": "0.35.4" + }, + "engines": { + "node": ">=20.9.0" }, + "funding": { + "url": "https://opencollective.com/libvips" + } + }, + "node_modules/@img/sharp-win32-arm64": { + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.4.tgz", + "integrity": "sha512-iNdlBX9gLVvqe2I3uIJSIKTq6wckP/DYxZtcqxm09x5Gi24DnFBmPAWZmr60ZyYMG0xlzo6goG3670ar+RXvRw==", + "cpu": [ + "arm64" + ], + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "optional": true, + "os": [ + "win32" + ], "engines": { "node": ">=20.9.0" }, @@ -2081,9 +2188,9 @@ } }, "node_modules/@img/sharp-win32-ia32": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.3.tgz", - "integrity": "sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.4.tgz", + "integrity": "sha512-kqRsbaa5CS6KHlpxnN7WhE6vAAugXyZButpRdvDWetlv6Qv4N9WTcrWzF7tXfB9T7MsoadqdI8hmwLq6UlLvtw==", "cpu": [ "ia32" ], @@ -2100,9 +2207,9 @@ } }, "node_modules/@img/sharp-win32-x64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.3.tgz", - "integrity": "sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.4.tgz", + "integrity": "sha512-XtmnYhBcrORsJ4XJngyzr/EWP0hRZLAZRFaApdKuviyqF78+ylxh2y06ZmtULAMOnObJ3ucpN0AcwSWnMowTRg==", "cpu": [ "x64" ], @@ -2178,15 +2285,15 @@ } }, "node_modules/@next/env": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/env/-/env-16.2.11.tgz", - "integrity": "sha512-0do5A3BJ2gxWr0ZCMcD6BhW+e595jyxdTl3rXTS6lOtD8ektMiW6CO+EPwt1Eca1DBnm90r/7GdiKWBKxH++DA==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/env/-/env-16.3.3.tgz", + "integrity": "sha512-U2eYQRwXj+dsqxV79zFqExDdatnNY/ZWc2nsJU1p/OgT7fd3dXwlF6OjYaFQCfMoeTA19PWq+wVmYgimVA+V+g==", "license": "MIT" }, "node_modules/@next/swc-darwin-arm64": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.2.11.tgz", - "integrity": "sha512-wryL4pjKmDwGv2ox6+GZDFxvmtSRLqApBR8kL1j4+vhB7Z5vJC/zAnXpiR9Xkfzl0AS8WLMnsuGV/UKI67/rrw==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-16.3.3.tgz", + "integrity": "sha512-8Hiv32QJPwdV6KYJ8meR9SBA061tQqnIKTJDocvOXlEQqib0xMFpzArosuffFUUc0sslbh7QQ8a3Yey1QV8EIw==", "cpu": [ "arm64" ], @@ -2200,9 +2307,9 @@ } }, "node_modules/@next/swc-darwin-x64": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.2.11.tgz", - "integrity": "sha512-aZl2j4f/fLyjQvOhv0Oe9UaMAQHolYpKhctsoYzplSumKJKPUmgjcf6545aBtysLTcu994TREd0+pSgNE4ohmg==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-16.3.3.tgz", + "integrity": "sha512-A1lgKgwVchRYmSe467zdwhxT9040dd8lH+o65sL5Jet8fjB4kegw/rDyPIpYVRb6jAqwXFOJpjIXJLxQKLiE3A==", "cpu": [ "x64" ], @@ -2216,9 +2323,9 @@ } }, "node_modules/@next/swc-linux-arm64-gnu": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.2.11.tgz", - "integrity": "sha512-5jEriyEnH/LWFy27L2ZG0XaLlyEJIjhsImEsiS9P563PKEVp2BVups/xfOucIrsvVntp11oNcZwjHvaDPYVB5g==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-16.3.3.tgz", + "integrity": "sha512-bf0FIssMFueU2dm7vQEWWxk0c8UjKTdW0yzuh0sQsD8pf1+KCLDdaqhYZNMYGmXwEOiHAUzgBKudovIlcvvBjg==", "cpu": [ "arm64" ], @@ -2235,9 +2342,9 @@ } }, "node_modules/@next/swc-linux-arm64-musl": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.2.11.tgz", - "integrity": "sha512-eIjcpx2fnnFSSkZDbTxy74KnokUXDjfoLClpWelfgHLf621aTqswhwXQ7GkD5K5rplrS6LZ/Bj+mVuvzluBOEg==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-16.3.3.tgz", + "integrity": "sha512-W7viwCk9JY/cAkdz/A273rd5bb3RgT/IHwR7Upv90tunjBWNtAAhGhoecHh+teRNRSinuAFmE+l7fwZ4YKkrXg==", "cpu": [ "arm64" ], @@ -2254,9 +2361,9 @@ } }, "node_modules/@next/swc-linux-x64-gnu": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.2.11.tgz", - "integrity": "sha512-8WgzpaWMs46qJT9kiV47cje86L0x/Mu9t8/Gwj+pnbgW3rETVfCnaScPjlYUwNScpOozdcIMHWmAvuZJUonR2w==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-16.3.3.tgz", + "integrity": "sha512-0W46zw1N3ODpI6n0GeivHvvob1pooozgZVqy65k0mh4/7vr+FbY9+WpHzNVXjHipJf/A3FDheBG19H1s5A25rA==", "cpu": [ "x64" ], @@ -2273,9 +2380,9 @@ } }, "node_modules/@next/swc-linux-x64-musl": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.2.11.tgz", - "integrity": "sha512-I3UgPds7G4ZYnTb/H+5GBGuUT2DhAk6j0mL6A4s63RjFs74wB2hOWP0vaxsK+3NJraExt3eYEPQ/UtT0x/64Nw==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-16.3.3.tgz", + "integrity": "sha512-H4mBso8ZTMBPtdT0PN0pBx2ayTvQuTuvS6qT13d77yVFJXAPCxkyIhLTmdMaGTJs0krQYI/qpzdHijCeihXhbg==", "cpu": [ "x64" ], @@ -2292,9 +2399,9 @@ } }, "node_modules/@next/swc-win32-arm64-msvc": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.2.11.tgz", - "integrity": "sha512-n89CjtcThnjrwgJMAiI5xbqwLY51zvwC9tSlArmVndAJLYVl9T9UAdlkXTmZvE++idoXe8KdglQlhNRdUp1c6g==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-16.3.3.tgz", + "integrity": "sha512-cTMUJpcEGmeywofCUfhR+rSsoE33+rVPnPEYNTNdLNlsOeEg/vktOsKUSTb28vUGqD2jkm4Zaskcwn7OCI6FQg==", "cpu": [ "arm64" ], @@ -2308,9 +2415,9 @@ } }, "node_modules/@next/swc-win32-x64-msvc": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.2.11.tgz", - "integrity": "sha512-md8CLNggS1Dx9pUgApzps5uAf+N8GN9xywzmNx9vHAWo94HtBwCCqkSnhIrdfQe83Dhz8Lfo/20Nb1Zxal092w==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-16.3.3.tgz", + "integrity": "sha512-2VR4cTBzHXaBjnGsuH6GyJjENzQOmHeAh11uY1iUhjm3j5dEUrVJuUj+VL78jaGi/Dik8xS76zEj18BsFhlVZQ==", "cpu": [ "x64" ], @@ -3786,9 +3893,9 @@ } }, "node_modules/@primer/react-brand": { - "version": "0.70.0", - "resolved": "https://registry.npmjs.org/@primer/react-brand/-/react-brand-0.70.0.tgz", - "integrity": "sha512-6La/hIIbNp8OA3ZxUTzxRJmpr8Imr5NdMiSVjWJTGyEtIuEJ9d4VA9OL0qQkg5cdeq+GTr6qZuTHQQh8cAhG8g==", + "version": "0.74.0", + "resolved": "https://registry.npmjs.org/@primer/react-brand/-/react-brand-0.74.0.tgz", + "integrity": "sha512-bOgO48EBP7EYRE4/JSqrd33jj4islNBgCUNTs+DZqwCjsxLxlnzq8ezoeEQP2Pr1fpZcke7ImtPzU7h3VQuXLQ==", "license": "MIT", "dependencies": { "@oddbird/popover-polyfill": "0.5.2", @@ -4283,9 +4390,9 @@ "license": "MIT" }, "node_modules/@swc/helpers": { - "version": "0.5.15", - "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.15.tgz", - "integrity": "sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==", + "version": "0.5.23", + "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.23.tgz", + "integrity": "sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==", "license": "Apache-2.0", "dependencies": { "tslib": "^2.8.0" @@ -8498,9 +8605,9 @@ "dev": true }, "node_modules/fast-uri": { - "version": "3.1.5", - "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.5.tgz", - "integrity": "sha512-gHwA1O9LDIcKunMKhObS/HimwtehO1nPUECKAu5TpKgaO19fcWEl4bliWe1jWxVFvIXztJjjQ4L8XQ1EU9f7Jw==", + "version": "3.1.7", + "resolved": "https://registry.npmjs.org/fast-uri/-/fast-uri-3.1.7.tgz", + "integrity": "sha512-dOvZVzjdZdz7phd9v6jCbwxrBW3fK6n8Rc0CtdmM4bumzMnxywBYhuph6J819RRw/ku+rLbelwfMunktuzVVHg==", "funding": [ { "type": "github", @@ -10423,9 +10530,9 @@ } }, "node_modules/js-yaml": { - "version": "5.2.3", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.3.tgz", - "integrity": "sha512-n+mUVyUX5bVv7G/G2zyIHOhdxfuU1dY2NOFzTQUWiMUbFss8b57NFlgCCaggU78wSw5KVS9cllzeLyzyR+n5nw==", + "version": "5.4.1", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz", + "integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==", "funding": [ { "type": "github", @@ -12311,16 +12418,16 @@ } }, "node_modules/next": { - "version": "16.2.11", - "resolved": "https://registry.npmjs.org/next/-/next-16.2.11.tgz", - "integrity": "sha512-B339zaqbyK8cmxhoAvLrcwoabwCP1wz21zSzfqxqXAemTu2BXnH7tQnfcglKv1vnMUIDBc+Hth7XODQriTZiRQ==", + "version": "16.3.3", + "resolved": "https://registry.npmjs.org/next/-/next-16.3.3.tgz", + "integrity": "sha512-tuRTx1nQ/yVw83cwJBo9F+njGUgMn3UHQycreWHB8XsStvvAh1AthbI8/4IpKnFaF58F+iSiHejYOlMQ/eq83g==", "license": "MIT", "dependencies": { - "@next/env": "16.2.11", - "@swc/helpers": "0.5.15", + "@next/env": "16.3.3", + "@swc/helpers": "0.5.23", "baseline-browser-mapping": "^2.9.19", "caniuse-lite": "^1.0.30001579", - "postcss": "8.4.31", + "postcss": "8.5.23", "styled-jsx": "5.1.6" }, "bin": { @@ -12330,15 +12437,15 @@ "node": ">=20.9.0" }, "optionalDependencies": { - "@next/swc-darwin-arm64": "16.2.11", - "@next/swc-darwin-x64": "16.2.11", - "@next/swc-linux-arm64-gnu": "16.2.11", - "@next/swc-linux-arm64-musl": "16.2.11", - "@next/swc-linux-x64-gnu": "16.2.11", - "@next/swc-linux-x64-musl": "16.2.11", - "@next/swc-win32-arm64-msvc": "16.2.11", - "@next/swc-win32-x64-msvc": "16.2.11", - "sharp": "^0.34.5" + "@next/swc-darwin-arm64": "16.3.3", + "@next/swc-darwin-x64": "16.3.3", + "@next/swc-linux-arm64-gnu": "16.3.3", + "@next/swc-linux-arm64-musl": "16.3.3", + "@next/swc-linux-x64-gnu": "16.3.3", + "@next/swc-linux-x64-musl": "16.3.3", + "@next/swc-win32-arm64-msvc": "16.3.3", + "@next/swc-win32-x64-msvc": "16.3.3", + "sharp": "^0.35.3" }, "peerDependencies": { "@opentelemetry/api": "^1.1.0", @@ -14214,9 +14321,9 @@ "license": "ISC" }, "node_modules/sharp": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.3.tgz", - "integrity": "sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==", + "version": "0.35.4", + "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.4.tgz", + "integrity": "sha512-n++8XWcj+jCOr2IOl7h8LbKnGBDY4aPbmprMONBNFdn0ImXqpGVv5zliDs0V9HbmbCQLpbuo2ej9rAoOQTvMDA==", "license": "Apache-2.0", "dependencies": { "@img/colour": "^1.1.0", @@ -14230,31 +14337,31 @@ "url": "https://opencollective.com/libvips" }, "optionalDependencies": { - "@img/sharp-darwin-arm64": "0.35.3", - "@img/sharp-darwin-x64": "0.35.3", - "@img/sharp-freebsd-wasm32": "0.35.3", - "@img/sharp-libvips-darwin-arm64": "1.3.2", - "@img/sharp-libvips-darwin-x64": "1.3.2", - "@img/sharp-libvips-linux-arm": "1.3.2", - "@img/sharp-libvips-linux-arm64": "1.3.2", - "@img/sharp-libvips-linux-ppc64": "1.3.2", - "@img/sharp-libvips-linux-riscv64": "1.3.2", - "@img/sharp-libvips-linux-s390x": "1.3.2", - "@img/sharp-libvips-linux-x64": "1.3.2", - "@img/sharp-libvips-linuxmusl-arm64": "1.3.2", - "@img/sharp-libvips-linuxmusl-x64": "1.3.2", - "@img/sharp-linux-arm": "0.35.3", - "@img/sharp-linux-arm64": "0.35.3", - "@img/sharp-linux-ppc64": "0.35.3", - "@img/sharp-linux-riscv64": "0.35.3", - "@img/sharp-linux-s390x": "0.35.3", - "@img/sharp-linux-x64": "0.35.3", - "@img/sharp-linuxmusl-arm64": "0.35.3", - "@img/sharp-linuxmusl-x64": "0.35.3", - "@img/sharp-webcontainers-wasm32": "0.35.3", - "@img/sharp-win32-arm64": "0.35.3", - "@img/sharp-win32-ia32": "0.35.3", - "@img/sharp-win32-x64": "0.35.3" + "@img/sharp-darwin-arm64": "0.35.4", + "@img/sharp-darwin-x64": "0.35.4", + "@img/sharp-freebsd-wasm32": "0.35.4", + "@img/sharp-libvips-darwin-arm64": "1.3.3", + "@img/sharp-libvips-darwin-x64": "1.3.3", + "@img/sharp-libvips-linux-arm": "1.3.3", + "@img/sharp-libvips-linux-arm64": "1.3.3", + "@img/sharp-libvips-linux-ppc64": "1.3.3", + "@img/sharp-libvips-linux-riscv64": "1.3.3", + "@img/sharp-libvips-linux-s390x": "1.3.3", + "@img/sharp-libvips-linux-x64": "1.3.3", + "@img/sharp-libvips-linuxmusl-arm64": "1.3.3", + "@img/sharp-libvips-linuxmusl-x64": "1.3.3", + "@img/sharp-linux-arm": "0.35.4", + "@img/sharp-linux-arm64": "0.35.4", + "@img/sharp-linux-ppc64": "0.35.4", + "@img/sharp-linux-riscv64": "0.35.4", + "@img/sharp-linux-s390x": "0.35.4", + "@img/sharp-linux-x64": "0.35.4", + "@img/sharp-linuxmusl-arm64": "0.35.4", + "@img/sharp-linuxmusl-x64": "0.35.4", + "@img/sharp-webcontainers-wasm32": "0.35.4", + "@img/sharp-win32-arm64": "0.35.4", + "@img/sharp-win32-ia32": "0.35.4", + "@img/sharp-win32-x64": "0.35.4" }, "peerDependenciesMeta": { "@types/node": { @@ -14262,113 +14369,6 @@ } } }, - "node_modules/sharp/node_modules/@img/sharp-libvips-linux-ppc64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.2.tgz", - "integrity": "sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==", - "cpu": [ - "ppc64" - ], - "libc": [ - "glibc" - ], - "license": "LGPL-3.0-or-later", - "optional": true, - "os": [ - "linux" - ], - "funding": { - "url": "https://opencollective.com/libvips" - } - }, - "node_modules/sharp/node_modules/@img/sharp-libvips-linux-riscv64": { - "version": "1.3.2", - "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.2.tgz", - "integrity": "sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==", - "cpu": [ - "riscv64" - ], - "libc": [ - "glibc" - ], - "license": "LGPL-3.0-or-later", - "optional": true, - "os": [ - "linux" - ], - "funding": { - "url": "https://opencollective.com/libvips" - } - }, - "node_modules/sharp/node_modules/@img/sharp-linux-ppc64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.3.tgz", - "integrity": "sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==", - "cpu": [ - "ppc64" - ], - "libc": [ - "glibc" - ], - "license": "Apache-2.0", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=20.9.0" - }, - "funding": { - "url": "https://opencollective.com/libvips" - }, - "optionalDependencies": { - "@img/sharp-libvips-linux-ppc64": "1.3.2" - } - }, - "node_modules/sharp/node_modules/@img/sharp-linux-riscv64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.3.tgz", - "integrity": "sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==", - "cpu": [ - "riscv64" - ], - "libc": [ - "glibc" - ], - "license": "Apache-2.0", - "optional": true, - "os": [ - "linux" - ], - "engines": { - "node": ">=20.9.0" - }, - "funding": { - "url": "https://opencollective.com/libvips" - }, - "optionalDependencies": { - "@img/sharp-libvips-linux-riscv64": "1.3.2" - } - }, - "node_modules/sharp/node_modules/@img/sharp-win32-arm64": { - "version": "0.35.3", - "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.3.tgz", - "integrity": "sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==", - "cpu": [ - "arm64" - ], - "license": "Apache-2.0 AND LGPL-3.0-or-later", - "optional": true, - "os": [ - "win32" - ], - "engines": { - "node": ">=20.9.0" - }, - "funding": { - "url": "https://opencollective.com/libvips" - } - }, "node_modules/shebang-command": { "version": "2.0.0", "dev": true, diff --git a/package.json b/package.json index 3fc6618ceceb..ec28fe159b59 100644 --- a/package.json +++ b/package.json @@ -193,7 +193,7 @@ "@primer/octicons-react": "^19.22.0", "@primer/primitives": "^11.3.1", "@primer/react": "38.19.0", - "@primer/react-brand": "^0.70.0", + "@primer/react-brand": "^0.74.0", "accept-language-parser": "^1.5.0", "ajv": "^8.18.0", "ajv-errors": "^3.0.0", @@ -244,7 +244,7 @@ "mdast-util-to-markdown": "2.1.2", "mdast-util-to-string": "^4.0.0", "micromark-extension-gfm": "^3.0.0", - "next": "^16.2.6", + "next": "^16.3.3", "ora": "^9.3.0", "parse5": "8.0.1", "quick-lru": "7.0.1", @@ -263,7 +263,7 @@ "remark-remove-comments": "^1.1.1", "remark-stringify": "^11.0.0", "semver": "^7.7.4", - "sharp": "0.35.3", + "sharp": "0.35.4", "slash": "^5.1.0", "strip-ansi": "7.1.0", "swr": "^2.4.0", @@ -369,7 +369,7 @@ "brace-expansion": "^5.0.8" }, "sharp": "$sharp", - "fast-uri": "^3.1.5" + "fast-uri": "^3.1.7" }, "optionalDependencies": { "esm": "^3.2.25" diff --git a/src/audit-logs/data/fpt/organization.json b/src/audit-logs/data/fpt/organization.json index fad1c30d62e3..f60139009b56 100644 --- a/src/audit-logs/data/fpt/organization.json +++ b/src/audit-logs/data/fpt/organization.json @@ -425,6 +425,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -595,6 +596,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -629,6 +631,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -733,6 +736,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -1860,6 +1864,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -2146,6 +2151,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2296,6 +2302,38 @@ "previous_value" ] }, + { + "action": "copilot.code_review_organization_settings_updated", + "description": "Copilot code review settings were updated for an organization.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type" + ] + }, { "action": "copilot.code_review_repository_settings_updated", "description": "Copilot code review settings were updated for a repository.", @@ -2361,6 +2399,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -3275,6 +3314,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -3313,10 +3353,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3354,6 +3396,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3387,6 +3430,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3889,6 +3933,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4565,6 +4610,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4601,6 +4647,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4635,6 +4682,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -5315,6 +5363,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5536,7 +5587,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -5620,6 +5672,43 @@ ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, + { + "action": "integration.update", + "description": "A GitHub App was updated.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "application_client_id", + "created_at", + "integration", + "name", + "oauth_application_id", + "operation_type" + ] + }, { "action": "ip_allow_list.disable", "description": "An IP allow list was disabled.", @@ -6992,7 +7081,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -7165,6 +7255,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -8013,6 +8104,41 @@ ], "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" }, + { + "action": "oauth_application.update_token_expiration", + "description": "The token expiration setting for an OAuth application was updated.", + "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "oauth_application", + "oauth_application_id", + "operation_type" + ], + "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" + }, { "action": "org.accept_business_invitation", "description": "An invitation sent to an organization to join an enterprise was accepted.", @@ -8075,6 +8201,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -8218,7 +8345,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8888,6 +9016,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -8920,6 +9049,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9484,6 +9614,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9517,8 +9648,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9549,6 +9682,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9616,9 +9750,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -9649,6 +9785,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9717,6 +9854,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10177,6 +10315,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10353,6 +10492,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -10386,6 +10526,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -10513,10 +10654,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -12269,7 +12412,8 @@ "user_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "topic" ] }, { @@ -12333,6 +12477,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12368,10 +12513,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -12402,8 +12549,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12532,8 +12681,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12870,7 +13021,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12905,7 +13057,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13393,6 +13546,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13428,10 +13582,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -13499,6 +13655,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13607,6 +13764,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13682,7 +13840,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -13749,6 +13908,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13784,6 +13944,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -14697,7 +14858,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14730,7 +14891,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14762,7 +14923,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14795,7 +14956,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -15054,7 +15215,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -16182,6 +16344,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -17082,10 +17245,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -17123,7 +17288,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -18251,6 +18417,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18930,6 +19097,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19405,8 +19573,8 @@ ] }, { - "action": "repo.code_scanning_ai_findings_disabled", - "description": "AI-powered findings for code scanning were disabled for a repository.", + "action": "repo.code_quality_disabled", + "description": "Code Quality was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19433,13 +19601,16 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "topic", + "user_programmatic_access_name" ] }, { - "action": "repo.code_scanning_ai_findings_enabled", - "description": "AI-powered findings for code scanning were enabled for a repository.", + "action": "repo.code_quality_enabled", + "description": "Code Quality was enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19464,16 +19635,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { - "action": "repo.code_scanning_analysis_deleted", - "description": "Code scanning analysis for a repository was deleted.", - "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository", + "action": "repo.code_quality_updated", + "description": "Code Quality was updated for a repository.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -19499,19 +19673,16 @@ "user_agent", "actor_is_agent", "actor_is_bot", - "category", "created_at", "oauth_application_id", "operation_type", "public_repo", - "tool", "user_programmatic_access_name" - ], - "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository" + ] }, { - "action": "repo.code_scanning_autofix_disabled", - "description": "Autofix for code scanning alerts was disabled for a repository.", + "action": "repo.code_scanning_ai_findings_disabled", + "description": "AI-powered findings for code scanning were disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19538,13 +19709,14 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] }, { - "action": "repo.code_scanning_autofix_enabled", - "description": "Autofix for code scanning alerts was enabled for a repository.", + "action": "repo.code_scanning_ai_findings_enabled", + "description": "AI-powered findings for code scanning were enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19571,14 +19743,15 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] }, { - "action": "repo.code_scanning_autofix_third_party_tools_disabled", - "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.", - "docs_reference_links": "N/A", + "action": "repo.code_scanning_analysis_deleted", + "description": "Code scanning analysis for a repository was deleted.", + "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository", "fields": [ "@timestamp", "_document_id", @@ -19602,15 +19775,21 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", + "category", "created_at", + "oauth_application_id", "operation_type", - "public_repo" - ] + "public_repo", + "tool", + "user_programmatic_access_name" + ], + "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository" }, { - "action": "repo.code_scanning_autofix_third_party_tools_enabled", - "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.", + "action": "repo.code_scanning_autofix_disabled", + "description": "Autofix for code scanning alerts was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19642,9 +19821,9 @@ ] }, { - "action": "repo.code_scanning_configuration_for_branch_deleted", - "description": "A code scanning configuration for a branch of a repository was deleted.", - "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch", + "action": "repo.code_scanning_autofix_enabled", + "description": "Autofix for code scanning alerts was enabled for a repository.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -19669,17 +19848,116 @@ "user_id", "user_agent", "actor_is_bot", - "branch", - "category", "created_at", "operation_type", - "public_repo", - "tool" - ], - "docs_reference_titles": "Resolving code scanning alerts" + "public_repo" + ] }, { - "action": "repo.code_scanning_delegated_alert_dismissal_disabled", + "action": "repo.code_scanning_autofix_third_party_tools_disabled", + "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_autofix_third_party_tools_enabled", + "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_configuration_for_branch_deleted", + "description": "A code scanning configuration for a branch of a repository was deleted.", + "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "branch", + "category", + "created_at", + "operation_type", + "public_repo", + "tool" + ], + "docs_reference_titles": "Resolving code scanning alerts" + }, + { + "action": "repo.code_scanning_delegated_alert_dismissal_disabled", "description": "Prevention of direct alert dismissal for code scanning was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ @@ -21376,6 +21654,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -21419,6 +21698,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -21570,6 +21850,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -21651,7 +21932,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -22149,6 +22431,42 @@ ], "docs_reference_titles": "Repository security advisories" }, + { + "action": "repository_advisory.create_confidential_comment", + "description": "Someone created a confidential comment on a repository security advisory.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo", + "repository_advisory", + "repository_advisory_comment_id", + "repository_advisory_id" + ] + }, { "action": "repository_advisory.cve_request", "description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.", @@ -22321,6 +22639,43 @@ "user_programmatic_access_name" ] }, + { + "action": "repository_advisory.read_confidential_comments", + "description": "Confidential comments on a repository security advisory were read by someone.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "confidential_comment_count", + "created_at", + "operation_type", + "public_repo", + "repository_advisory", + "repository_advisory_id", + "surface" + ] + }, { "action": "repository_advisory.reopen", "description": "Someone reopened as draft security advisory.", @@ -22353,7 +22708,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -23214,6 +23570,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -23541,7 +23898,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23574,8 +23932,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23712,7 +24072,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -24123,7 +24484,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24945,6 +25307,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -25132,6 +25495,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25169,6 +25533,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25278,6 +25643,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -25395,7 +25761,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -25442,9 +25809,9 @@ "docs_reference_titles": "Managing custom repository roles for an organization" }, { - "action": "secret_scanning_alert.assign", - "description": "A user was assigned to a secret scanning alert.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.add_port", + "description": "A forwarded port was added to a sandbox.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25469,18 +25836,14 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.create", - "description": "GitHub detected a secret and created a secret scanning alert.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.create", + "description": "A sandbox was created.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25505,18 +25868,14 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.delete", - "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.delete", + "description": "A sandbox was deleted.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25541,19 +25900,14 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "reason", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.public_leak", - "description": "A secret scanning alert was leaked in a public repo.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.generate_token", + "description": "A token was generated for a sandbox.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25578,17 +25932,13 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.reopen", - "description": "A secret scanning alert was reopened.", + "action": "sandbox.remove_port", + "description": "A forwarded port was removed from a sandbox.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25613,17 +25963,330 @@ "user", "user_id", "user_agent", - "actor_is_agent", - "actor_is_bot", "created_at", - "multi_repo", - "number", - "oauth_application_id", "operation_type", - "publicly_leaked", - "public_repo", - "resolution", - "secret_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.resume", + "description": "A sandbox was resumed.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.stop", + "description": "A sandbox was stopped.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "secret_scanning_alert.assign", + "description": "A user was assigned to a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.create", + "description": "GitHub detected a secret and created a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.delete", + "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "reason", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.metadata_create", + "description": "Metadata was added to a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.metadata_remove", + "description": "Metadata was removed from a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.public_leak", + "description": "A secret scanning alert was leaked in a public repo.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.reopen", + "description": "A secret scanning alert was reopened.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "multi_repo", + "number", + "oauth_application_id", + "operation_type", + "publicly_leaked", + "public_repo", + "resolution", + "secret_type", "secret_type_display_name", "user_programmatic_access_name" ] @@ -26369,6 +27032,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -29199,6 +29863,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -29206,6 +29871,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], @@ -29255,6 +29921,71 @@ ], "docs_reference_titles": "Understanding GitHub Actions" }, + { + "action": "workflows.debugger_session_completed", + "description": "An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "completed_at", + "created_at", + "operation_type", + "started_at" + ] + }, + { + "action": "workflows.debugger_session_started", + "description": "An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "started_at" + ] + }, { "action": "workflows.delete_workflow_run", "description": "A workflow run was deleted.", diff --git a/src/audit-logs/data/fpt/user.json b/src/audit-logs/data/fpt/user.json index c4b66f719bf9..a35f7517e21c 100644 --- a/src/audit-logs/data/fpt/user.json +++ b/src/audit-logs/data/fpt/user.json @@ -307,6 +307,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -718,6 +719,40 @@ "operation_type" ] }, + { + "action": "business.add_member", + "description": "A member was added to an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "operation_type" + ] + }, { "action": "business.add_support_entitlee", "description": "A support entitlement was added to a member of an enterprise.", @@ -1069,6 +1104,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1138,6 +1174,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -1210,6 +1247,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1243,6 +1281,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -1316,7 +1355,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1758,6 +1798,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1904,6 +1945,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2019,6 +2061,38 @@ "seat_assignment" ] }, + { + "action": "copilot.code_review_organization_settings_updated", + "description": "Copilot code review settings were updated for an organization.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type" + ] + }, { "action": "copilot.code_review_repository_settings_updated", "description": "Copilot code review settings were updated for a repository.", @@ -2505,6 +2579,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -2543,10 +2618,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -2584,6 +2661,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3550,6 +3628,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3586,6 +3665,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3620,6 +3700,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3692,6 +3773,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -4297,6 +4379,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4518,7 +4603,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -4602,6 +4688,43 @@ ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, + { + "action": "integration.update", + "description": "A GitHub App was updated.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "application_client_id", + "created_at", + "integration", + "name", + "oauth_application_id", + "operation_type" + ] + }, { "action": "issue_dependencies.blocked_by_add", "description": "An issue was marked as blocked by another issue.", @@ -6178,6 +6301,41 @@ ], "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" }, + { + "action": "oauth_application.update_token_expiration", + "description": "The token expiration setting for an OAuth application was updated.", + "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "oauth_application", + "oauth_application_id", + "operation_type" + ], + "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" + }, { "action": "oauth_authorization.create", "description": "An authorization for an OAuth application was created.", @@ -6284,8 +6442,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -6706,6 +6866,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6741,10 +6902,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -6812,6 +6975,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6888,6 +7052,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -6963,7 +7128,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -7558,6 +7724,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -8592,10 +8759,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -8633,7 +8802,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -8827,6 +8997,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -10569,6 +10740,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10612,6 +10784,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -10763,6 +10936,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -10844,7 +11018,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -11727,7 +11902,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11758,7 +11934,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11789,7 +11966,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11820,7 +11998,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11851,7 +12030,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11882,7 +12062,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11913,7 +12094,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -13132,6 +13314,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -13932,6 +14115,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -14105,6 +14289,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -14270,7 +14455,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14297,12 +14482,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14328,12 +14514,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14359,6 +14546,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -14430,7 +14618,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14457,12 +14645,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14488,13 +14677,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14520,6 +14710,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -15472,6 +15663,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghec/enterprise.json b/src/audit-logs/data/ghec/enterprise.json index 4a0d5deadb70..b23efaa6d4e8 100644 --- a/src/audit-logs/data/ghec/enterprise.json +++ b/src/audit-logs/data/ghec/enterprise.json @@ -469,13 +469,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -626,6 +629,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -796,6 +800,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -830,6 +835,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -934,6 +940,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -1244,6 +1251,40 @@ "two_factor_method" ] }, + { + "action": "business.add_member", + "description": "A member was added to an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "operation_type" + ] + }, { "action": "business.add_organization", "description": "An organization was added to an enterprise.", @@ -1854,6 +1895,7 @@ "email", "invitation_id", "name", + "oauth_application_id", "operation_type" ] }, @@ -2907,41 +2949,8 @@ ] }, { - "action": "business.enable_oidc", - "description": "OIDC single sign-on was enabled for an enterprise.", - "docs_reference_links": "/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_bot", - "created_at", - "operation_type" - ], - "docs_reference_titles": "Configuring OIDC for Enterprise Managed Users" - }, - { - "action": "business.enable_open_scim", - "description": "SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.", + "action": "business.enable_app_delegated_credential_authorizations", + "description": "App-delegated credential authorizations were enabled for an enterprise.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -2972,44 +2981,9 @@ ] }, { - "action": "business.enable_saml", - "description": "SAML single sign-on was enabled for an enterprise.", - "docs_reference_links": "N/A", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_bot", - "created_at", - "issuer", - "name", - "operation_type", - "sso_url" - ] - }, - { - "action": "business.enable_source_ip_disclosure", - "description": "Display of IP addresses within audit log events for the enterprise was enabled.", - "docs_reference_links": "/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise", + "action": "business.enable_oidc", + "description": "OIDC single sign-on was enabled for an enterprise.", + "docs_reference_links": "/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users", "fields": [ "@timestamp", "_document_id", @@ -3037,77 +3011,11 @@ "created_at", "operation_type" ], - "docs_reference_titles": "Displaying IP addresses in the audit log for your enterprise" - }, - { - "action": "business.enable_two_factor_requirement", - "description": "The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.", - "docs_reference_links": "N/A", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_bot", - "created_at", - "name", - "oauth_application_id", - "operation_type" - ] - }, - { - "action": "business.enterprise_server_license_download", - "description": "A GitHub Enterprise Server license was downloaded.", - "docs_reference_links": "N/A", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_bot", - "created_at", - "operation_type" - ] + "docs_reference_titles": "Configuring OIDC for Enterprise Managed Users" }, { - "action": "business.enterprise_teams_limit_reached", - "description": "An enterprise has reached its enterprise teams limit.", + "action": "business.enable_open_scim", + "description": "SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3133,16 +3041,13 @@ "user_id", "user_agent", "actor_is_bot", - "count", "created_at", - "limit", - "name", "operation_type" ] }, { - "action": "business.enterprise_teams_limit_warning", - "description": "An enterprise is approaching its enterprise teams limit.", + "action": "business.enable_saml", + "description": "SAML single sign-on was enabled for an enterprise.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3168,17 +3073,17 @@ "user_id", "user_agent", "actor_is_bot", - "count", "created_at", - "limit", + "issuer", "name", - "operation_type" + "operation_type", + "sso_url" ] }, { - "action": "business.expire_trial", - "description": "The trial of GitHub Enterprise Cloud expired.", - "docs_reference_links": "/admin/overview/setting-up-a-trial-of-github-enterprise-cloud", + "action": "business.enable_source_ip_disclosure", + "description": "Display of IP addresses within audit log events for the enterprise was enabled.", + "docs_reference_links": "/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise", "fields": [ "@timestamp", "_document_id", @@ -3204,14 +3109,13 @@ "user_agent", "actor_is_bot", "created_at", - "name", "operation_type" ], - "docs_reference_titles": "Setting up a trial of GitHub Enterprise Cloud" + "docs_reference_titles": "Displaying IP addresses in the audit log for your enterprise" }, { - "action": "business.github_models_billing_disabled", - "description": "GitHub Models billing was disabled for the business.", + "action": "business.enable_two_factor_requirement", + "description": "The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3239,12 +3143,13 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ] }, { - "action": "business.github_models_billing_enabled", - "description": "GitHub Models billing was enabled for the business.", + "action": "business.enterprise_server_license_download", + "description": "A GitHub Enterprise Server license was downloaded.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3271,48 +3176,12 @@ "user_agent", "actor_is_bot", "created_at", - "name", "operation_type" ] }, { - "action": "business.import_license_usage", - "description": "License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.", - "docs_reference_links": "/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_agent", - "actor_is_bot", - "created_at", - "name", - "operation_type" - ], - "docs_reference_titles": "Syncing license usage from GitHub Enterprise Server to Cloud" - }, - { - "action": "business.invite_admin", - "description": "An invitation for someone to be an enterprise owner of an enterprise was sent.", + "action": "business.enterprise_teams_limit_reached", + "description": "An enterprise has reached its enterprise teams limit.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3337,19 +3206,17 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", + "count", "created_at", - "email", - "invitation_id", + "limit", "name", - "oauth_application_id", "operation_type" ] }, { - "action": "business.invite_billing_manager", - "description": "An invitation for someone to be a billing manager of an enterprise was sent.", + "action": "business.enterprise_teams_limit_warning", + "description": "An enterprise is approaching its enterprise teams limit.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3374,20 +3241,18 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", + "count", "created_at", - "email", - "invitation_id", + "limit", "name", - "oauth_application_id", "operation_type" ] }, { - "action": "business.invite_unaffiliated_member", - "description": "An invitation for someone to join an enterprise was sent.", - "docs_reference_links": "N/A", + "action": "business.expire_trial", + "description": "The trial of GitHub Enterprise Cloud expired.", + "docs_reference_links": "/admin/overview/setting-up-a-trial-of-github-enterprise-cloud", "fields": [ "@timestamp", "_document_id", @@ -3411,19 +3276,16 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", "created_at", - "email", - "invitation_id", "name", - "oauth_application_id", "operation_type" - ] + ], + "docs_reference_titles": "Setting up a trial of GitHub Enterprise Cloud" }, { - "action": "business.members_can_update_protected_branches.clear", - "description": "An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.", + "action": "business.github_models_billing_disabled", + "description": "GitHub Models billing was disabled for the business.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3455,8 +3317,8 @@ ] }, { - "action": "business.members_can_update_protected_branches.disable", - "description": "The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.", + "action": "business.github_models_billing_enabled", + "description": "GitHub Models billing was enabled for the business.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3484,14 +3346,13 @@ "actor_is_bot", "created_at", "name", - "oauth_application_id", "operation_type" ] }, { - "action": "business.members_can_update_protected_branches.enable", - "description": "The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.", - "docs_reference_links": "N/A", + "action": "business.import_license_usage", + "description": "License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.", + "docs_reference_links": "/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage", "fields": [ "@timestamp", "_document_id", @@ -3515,14 +3376,17 @@ "user", "user_id", "user_agent", + "actor_is_agent", + "actor_is_bot", "created_at", "name", "operation_type" - ] + ], + "docs_reference_titles": "Syncing license usage from GitHub Enterprise Server to Cloud" }, { - "action": "business.members_limit_reached", - "description": "An enterprise has reached its members limit.", + "action": "business.invite_admin", + "description": "An invitation for someone to be an enterprise owner of an enterprise was sent.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3547,17 +3411,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", - "count", "created_at", - "limit", + "email", + "invitation_id", "name", + "oauth_application_id", "operation_type" ] }, { - "action": "business.organizations_limit_reached", - "description": "An enterprise has reached its organizations limit.", + "action": "business.invite_billing_manager", + "description": "An invitation for someone to be a billing manager of an enterprise was sent.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3582,17 +3448,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", - "count", "created_at", - "limit", + "email", + "invitation_id", "name", + "oauth_application_id", "operation_type" ] }, { - "action": "business.organizations_limit_warning", - "description": "An enterprise is approaching its organizations limit.", + "action": "business.invite_unaffiliated_member", + "description": "An invitation for someone to join an enterprise was sent.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3617,17 +3485,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", - "count", "created_at", - "limit", + "email", + "invitation_id", "name", + "oauth_application_id", "operation_type" ] }, { - "action": "business.proxy_security_header_disabled", - "description": "The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.", + "action": "business.members_can_update_protected_branches.clear", + "description": "An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3654,12 +3524,13 @@ "user_agent", "actor_is_bot", "created_at", + "name", "operation_type" ] }, { - "action": "business.proxy_security_header_enabled", - "description": "The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.", + "action": "business.members_can_update_protected_branches.disable", + "description": "The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3686,12 +3557,14 @@ "user_agent", "actor_is_bot", "created_at", + "name", + "oauth_application_id", "operation_type" ] }, { - "action": "business.proxy_security_header_unsatisfied", - "description": "A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.", + "action": "business.members_can_update_protected_branches.enable", + "description": "The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -3719,14 +3592,13 @@ "actor_is_bot", "created_at", "name", - "oauth_application_id", "operation_type" ] }, { - "action": "business.recovery_code_failed", - "description": "An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.", - "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable", + "action": "business.members_limit_reached", + "description": "An enterprise has reached its members limit.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3751,17 +3623,17 @@ "user_id", "user_agent", "actor_is_bot", + "count", "created_at", + "limit", "name", - "operation_type", - "reason" - ], - "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable" + "operation_type" + ] }, { - "action": "business.recovery_code_used", - "description": "An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.", - "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable", + "action": "business.members_limit_warning", + "description": "An enterprise is approaching its members limit.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3786,16 +3658,17 @@ "user_id", "user_agent", "actor_is_bot", + "count", "created_at", + "limit", "name", "operation_type" - ], - "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable" + ] }, { - "action": "business.recovery_codes_downloaded", - "description": "An enterprise owner downloaded the enterprise's SSO recovery codes.", - "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", + "action": "business.organizations_limit_reached", + "description": "An enterprise has reached its organizations limit.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3820,16 +3693,17 @@ "user_id", "user_agent", "actor_is_bot", + "count", "created_at", + "limit", "name", "operation_type" - ], - "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" + ] }, { - "action": "business.recovery_codes_generated", - "description": "An enterprise owner generated the enterprise's SSO recovery codes.", - "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", + "action": "business.organizations_limit_warning", + "description": "An enterprise is approaching its organizations limit.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3854,16 +3728,17 @@ "user_id", "user_agent", "actor_is_bot", + "count", "created_at", + "limit", "name", "operation_type" - ], - "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" + ] }, { - "action": "business.recovery_codes_printed", - "description": "An enterprise owner printed the enterprise's SSO recovery codes.", - "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", + "action": "business.proxy_security_header_disabled", + "description": "The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3889,15 +3764,13 @@ "user_agent", "actor_is_bot", "created_at", - "name", "operation_type" - ], - "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" + ] }, { - "action": "business.recovery_codes_viewed", - "description": "An enterprise owner viewed the enterprise's SSO recovery codes.", - "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", + "action": "business.proxy_security_header_enabled", + "description": "The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3923,15 +3796,13 @@ "user_agent", "actor_is_bot", "created_at", - "name", "operation_type" - ], - "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" + ] }, { - "action": "business.remove_admin", - "description": "An enterprise owner was removed from an enterprise.", - "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise", + "action": "business.proxy_security_header_unsatisfied", + "description": "A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -3955,19 +3826,52 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", "created_at", "name", "oauth_application_id", "operation_type" + ] + }, + { + "action": "business.recovery_code_failed", + "description": "An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.", + "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "name", + "operation_type", + "reason" ], - "docs_reference_titles": "Inviting people to manage your enterprise" + "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable" }, { - "action": "business.remove_billing_manager", - "description": "A billing manager was removed from an enterprise.", - "docs_reference_links": "N/A", + "action": "business.recovery_code_used", + "description": "An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.", + "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable", "fields": [ "@timestamp", "_document_id", @@ -3991,18 +3895,17 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", "created_at", "name", - "oauth_application_id", "operation_type" - ] + ], + "docs_reference_titles": "Accessing your enterprise account if your identity provider is unavailable" }, { - "action": "business.remove_disallowed_two_factor_method", - "description": "Removed a two-factor authentication method restriction for an enterprise.", - "docs_reference_links": "N/A", + "action": "business.recovery_codes_downloaded", + "description": "An enterprise owner downloaded the enterprise's SSO recovery codes.", + "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", "fields": [ "@timestamp", "_document_id", @@ -4029,14 +3932,14 @@ "actor_is_bot", "created_at", "name", - "operation_type", - "two_factor_method" - ] + "operation_type" + ], + "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" }, { - "action": "business.remove_member", - "description": "A member was removed from an enterprise.", - "docs_reference_links": "N/A", + "action": "business.recovery_codes_generated", + "description": "An enterprise owner generated the enterprise's SSO recovery codes.", + "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", "fields": [ "@timestamp", "_document_id", @@ -4060,19 +3963,17 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", "created_at", "name", - "oauth_application_id", - "operation_type", - "user_programmatic_access_name" - ] + "operation_type" + ], + "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" }, { - "action": "business.remove_organization", - "description": "An organization was removed from an enterprise.", - "docs_reference_links": "N/A", + "action": "business.recovery_codes_printed", + "description": "An enterprise owner printed the enterprise's SSO recovery codes.", + "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", "fields": [ "@timestamp", "_document_id", @@ -4096,18 +3997,228 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", "created_at", "name", - "oauth_application_id", "operation_type" - ] + ], + "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" }, { - "action": "business.remove_support_entitlee", - "description": "A support entitlement was removed from a member of an enterprise.", - "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise", + "action": "business.recovery_codes_viewed", + "description": "An enterprise owner viewed the enterprise's SSO recovery codes.", + "docs_reference_links": "/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "name", + "operation_type" + ], + "docs_reference_titles": "Downloading your enterprise account's single sign-on recovery codes" + }, + { + "action": "business.remove_admin", + "description": "An enterprise owner was removed from an enterprise.", + "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "oauth_application_id", + "operation_type" + ], + "docs_reference_titles": "Inviting people to manage your enterprise" + }, + { + "action": "business.remove_billing_manager", + "description": "A billing manager was removed from an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "oauth_application_id", + "operation_type" + ] + }, + { + "action": "business.remove_disallowed_two_factor_method", + "description": "Removed a two-factor authentication method restriction for an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "name", + "operation_type", + "two_factor_method" + ] + }, + { + "action": "business.remove_member", + "description": "A member was removed from an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "oauth_application_id", + "operation_type", + "user_programmatic_access_name" + ] + }, + { + "action": "business.remove_organization", + "description": "An organization was removed from an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "oauth_application_id", + "operation_type", + "user_programmatic_access_name" + ] + }, + { + "action": "business.remove_support_entitlee", + "description": "A support entitlement was removed from a member of an enterprise.", + "docs_reference_links": "/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise", "fields": [ "@timestamp", "_document_id", @@ -4658,6 +4769,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -4691,6 +4803,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -5019,6 +5132,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -5052,6 +5166,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -5363,6 +5478,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -5432,6 +5548,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -5504,6 +5621,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -5537,6 +5655,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -5610,7 +5729,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -6002,6 +6122,7 @@ "created_at", "name", "new_repo_runners_policy", + "oauth_application_id", "old_repo_runners_policy", "operation_type" ] @@ -7067,6 +7188,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -7419,6 +7541,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -7632,6 +7755,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -8333,6 +8457,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -8371,10 +8496,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -8412,6 +8539,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -8445,6 +8573,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8947,6 +9076,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -9134,6 +9264,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -9338,6 +9469,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "enterprise_role_id", @@ -10783,6 +10915,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -10826,6 +10959,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -11263,6 +11397,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -11299,6 +11434,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11333,6 +11469,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -12013,6 +12150,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -12234,7 +12374,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -12319,8 +12460,8 @@ "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, { - "action": "ip_allow_list.disable", - "description": "An IP allow list was disabled.", + "action": "integration.update", + "description": "A GitHub App was updated.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12345,15 +12486,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", + "application_client_id", "created_at", + "integration", + "name", "oauth_application_id", "operation_type" ] }, { - "action": "ip_allow_list.disable_for_installed_apps", - "description": "An IP allow list was disabled for installed GitHub Apps.", + "action": "ip_allow_list.disable", + "description": "An IP allow list was disabled.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12385,8 +12530,8 @@ ] }, { - "action": "ip_allow_list.disable_idp_ip_allowlist_for_web", - "description": "Identity Provider based IP allow list for web interactions was disabled.", + "action": "ip_allow_list.disable_for_installed_apps", + "description": "An IP allow list was disabled for installed GitHub Apps.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12413,12 +12558,45 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, { - "action": "ip_allow_list.disable_skip_idp_ip_allowlist_app_access", - "description": "N/A", + "action": "ip_allow_list.disable_idp_ip_allowlist_for_web", + "description": "Identity Provider based IP allow list for web interactions was disabled.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type" + ] + }, + { + "action": "ip_allow_list.disable_skip_idp_ip_allowlist_app_access", + "description": "N/A", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13803,6 +13981,78 @@ ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, + { + "action": "members_can_create_private_pages.disable", + "description": "The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.", + "docs_reference_links": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "oauth_application_id", + "operation_type", + "user_programmatic_access_name" + ], + "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" + }, + { + "action": "members_can_create_private_pages.enable", + "description": "The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.", + "docs_reference_links": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "oauth_application_id", + "operation_type", + "user_programmatic_access_name" + ], + "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" + }, { "action": "members_can_create_public_pages.disable", "description": "The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.", @@ -13972,6 +14222,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -14820,6 +15071,41 @@ ], "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" }, + { + "action": "oauth_application.update_token_expiration", + "description": "The token expiration setting for an OAuth application was updated.", + "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "oauth_application", + "oauth_application_id", + "operation_type" + ], + "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" + }, { "action": "org.accept_business_invitation", "description": "An invitation sent to an organization to join an enterprise was accepted.", @@ -14882,6 +15168,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -14992,7 +15279,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -15501,6 +15789,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -15533,6 +15822,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -16032,6 +16322,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -16065,8 +16356,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -16097,6 +16390,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -16164,9 +16458,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -16197,6 +16493,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -16265,6 +16562,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -16798,6 +17096,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -16925,10 +17224,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -18549,6 +18850,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -18584,10 +18886,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -18618,8 +18922,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -18748,8 +19054,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -19086,7 +19394,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -19121,7 +19430,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -19465,6 +19775,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -19500,10 +19811,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -19571,6 +19884,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -19679,6 +19993,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -19754,7 +20069,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -19821,6 +20137,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -19856,6 +20173,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -20406,6 +20724,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "allowed_values", "created_at", @@ -20790,7 +21109,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -20823,7 +21142,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -20855,7 +21174,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -20888,7 +21207,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -21147,7 +21466,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -22339,6 +22659,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -23239,10 +23560,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -23280,7 +23603,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -24332,6 +24656,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -25011,6 +25336,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -25486,8 +25812,8 @@ ] }, { - "action": "repo.code_scanning_ai_findings_disabled", - "description": "AI-powered findings for code scanning were disabled for a repository.", + "action": "repo.code_quality_disabled", + "description": "Code Quality was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25514,13 +25840,16 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "topic", + "user_programmatic_access_name" ] }, { - "action": "repo.code_scanning_ai_findings_enabled", - "description": "AI-powered findings for code scanning were enabled for a repository.", + "action": "repo.code_quality_enabled", + "description": "Code Quality was enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25545,16 +25874,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { - "action": "repo.code_scanning_analysis_deleted", - "description": "Code scanning analysis for a repository was deleted.", - "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository", + "action": "repo.code_quality_updated", + "description": "Code Quality was updated for a repository.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25580,19 +25912,16 @@ "user_agent", "actor_is_agent", "actor_is_bot", - "category", "created_at", "oauth_application_id", "operation_type", "public_repo", - "tool", "user_programmatic_access_name" - ], - "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository" + ] }, { - "action": "repo.code_scanning_autofix_disabled", - "description": "Autofix for code scanning alerts was disabled for a repository.", + "action": "repo.code_scanning_ai_findings_disabled", + "description": "AI-powered findings for code scanning were disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25619,13 +25948,14 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] }, { - "action": "repo.code_scanning_autofix_enabled", - "description": "Autofix for code scanning alerts was enabled for a repository.", + "action": "repo.code_scanning_ai_findings_enabled", + "description": "AI-powered findings for code scanning were enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25652,14 +25982,15 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] }, { - "action": "repo.code_scanning_autofix_third_party_tools_disabled", - "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.", - "docs_reference_links": "N/A", + "action": "repo.code_scanning_analysis_deleted", + "description": "Code scanning analysis for a repository was deleted.", + "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository", "fields": [ "@timestamp", "_document_id", @@ -25683,15 +26014,21 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", + "category", "created_at", + "oauth_application_id", "operation_type", - "public_repo" - ] + "public_repo", + "tool", + "user_programmatic_access_name" + ], + "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository" }, { - "action": "repo.code_scanning_autofix_third_party_tools_enabled", - "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.", + "action": "repo.code_scanning_autofix_disabled", + "description": "Autofix for code scanning alerts was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25723,9 +26060,108 @@ ] }, { - "action": "repo.code_scanning_configuration_for_branch_deleted", - "description": "A code scanning configuration for a branch of a repository was deleted.", - "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch", + "action": "repo.code_scanning_autofix_enabled", + "description": "Autofix for code scanning alerts was enabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_autofix_third_party_tools_disabled", + "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_autofix_third_party_tools_enabled", + "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_configuration_for_branch_deleted", + "description": "A code scanning configuration for a branch of a repository was deleted.", + "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch", "fields": [ "@timestamp", "_document_id", @@ -27457,6 +27893,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -27500,6 +27937,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -27651,6 +28089,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -27732,7 +28171,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -28266,8 +28706,8 @@ "docs_reference_titles": "Repository security advisories" }, { - "action": "repository_advisory.cve_request", - "description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.", + "action": "repository_advisory.create_confidential_comment", + "description": "Someone created a confidential comment on a repository security advisory.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28292,18 +28732,18 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", "created_at", - "oauth_application_id", "operation_type", "public_repo", - "user_programmatic_access_name" + "repository_advisory", + "repository_advisory_comment_id", + "repository_advisory_id" ] }, { - "action": "repository_advisory.github_broadcast", - "description": "GitHub made a security advisory public in the GitHub Advisory Database.", + "action": "repository_advisory.cve_request", + "description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28328,14 +28768,18 @@ "user", "user_id", "user_agent", + "actor_is_agent", + "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { - "action": "repository_advisory.github_withdraw", - "description": "GitHub withdrew a security advisory that was published in error.", + "action": "repository_advisory.github_broadcast", + "description": "GitHub made a security advisory public in the GitHub Advisory Database.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28366,8 +28810,8 @@ ] }, { - "action": "repository_advisory.open", - "description": "Someone opened a draft security advisory.", + "action": "repository_advisory.github_withdraw", + "description": "GitHub withdrew a security advisory that was published in error.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28392,18 +28836,14 @@ "user", "user_id", "user_agent", - "actor_is_agent", - "actor_is_bot", "created_at", - "oauth_application_id", "operation_type", - "public_repo", - "user_programmatic_access_name" + "public_repo" ] }, { - "action": "repository_advisory.publish", - "description": "Someone published a security advisory.", + "action": "repository_advisory.open", + "description": "Someone opened a draft security advisory.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28438,8 +28878,8 @@ ] }, { - "action": "repository_advisory.reopen", - "description": "Someone reopened as draft security advisory.", + "action": "repository_advisory.publish", + "description": "Someone published a security advisory.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28469,12 +28909,13 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { - "action": "repository_advisory.update", - "description": "Someone edited a draft or published security advisory.", + "action": "repository_advisory.read_confidential_comments", + "description": "Confidential comments on a repository security advisory were read by someone.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28499,85 +28940,19 @@ "user", "user_id", "user_agent", - "actor_is_agent", "actor_is_bot", + "confidential_comment_count", "created_at", - "oauth_application_id", "operation_type", "public_repo", - "title", - "user_programmatic_access_name" + "repository_advisory", + "repository_advisory_id", + "surface" ] }, { - "action": "repository_branch_protection_evaluation.disable", - "description": "Branch protections were disabled for the repository.", - "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_bot", - "created_at", - "operation_type" - ], - "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule" - }, - { - "action": "repository_branch_protection_evaluation.enable", - "description": "Branch protections were enabled for this repository.", - "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule", - "fields": [ - "@timestamp", - "_document_id", - "action", - "actor", - "actor_id", - "business", - "business_id", - "hashed_token", - "org", - "org_id", - "programmatic_access_type", - "repo", - "repo_id", - "repository", - "repository_id", - "request_access_security_header", - "request_id", - "token_id", - "token_scopes", - "user", - "user_id", - "user_agent", - "actor_is_bot", - "created_at", - "operation_type" - ], - "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule" - }, - { - "action": "repository_code_security.disable", - "description": "Code security was disabled for a repository.", + "action": "repository_advisory.reopen", + "description": "Someone reopened as draft security advisory.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28608,13 +28983,12 @@ "oauth_application_id", "operation_type", "public_repo", - "topic", "user_programmatic_access_name" ] }, { - "action": "repository_code_security.enable", - "description": "Code security was enabled for a repository.", + "action": "repository_advisory.update", + "description": "Someone edited a draft or published security advisory.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28645,14 +29019,14 @@ "oauth_application_id", "operation_type", "public_repo", - "topic", + "title", "user_programmatic_access_name" ] }, { - "action": "repository_content_analysis.disable", - "description": "Data use settings were disabled for a private repository.", - "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories", + "action": "repository_branch_protection_evaluation.disable", + "description": "Branch protections were disabled for the repository.", + "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule", "fields": [ "@timestamp", "_document_id", @@ -28676,15 +29050,16 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], - "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories" + "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule" }, { - "action": "repository_content_analysis.enable", - "description": "Data use settings were enabled for a private repository.", - "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories", + "action": "repository_branch_protection_evaluation.enable", + "description": "Branch protections were enabled for this repository.", + "docs_reference_links": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule", "fields": [ "@timestamp", "_document_id", @@ -28708,14 +29083,15 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], - "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories" + "docs_reference_titles": "/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule" }, { - "action": "repository_dependency_graph_autosubmit.disable", - "description": "Automatic dependency submission was disabled for a repository.", + "action": "repository_code_security.disable", + "description": "Code security was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28751,8 +29127,8 @@ ] }, { - "action": "repository_dependency_graph_autosubmit.enable", - "description": "Automatic dependency submission was enabled for a repository.", + "action": "repository_code_security.enable", + "description": "Code security was enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28788,9 +29164,147 @@ ] }, { - "action": "repository_dependency_graph.disable", - "description": "The dependency graph was disabled for a private repository.", - "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories", + "action": "repository_content_analysis.disable", + "description": "Data use settings were disabled for a private repository.", + "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type" + ], + "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories" + }, + { + "action": "repository_content_analysis.enable", + "description": "Data use settings were enabled for a private repository.", + "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type" + ], + "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories" + }, + { + "action": "repository_dependency_graph_autosubmit.disable", + "description": "Automatic dependency submission was disabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "oauth_application_id", + "operation_type", + "public_repo", + "topic", + "user_programmatic_access_name" + ] + }, + { + "action": "repository_dependency_graph_autosubmit.enable", + "description": "Automatic dependency submission was enabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "oauth_application_id", + "operation_type", + "public_repo", + "topic", + "user_programmatic_access_name" + ] + }, + { + "action": "repository_dependency_graph.disable", + "description": "The dependency graph was disabled for a private repository.", + "docs_reference_links": "/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories", "fields": [ "@timestamp", "_document_id", @@ -29254,6 +29768,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -29581,7 +30096,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -29614,8 +30130,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -29752,7 +30270,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -30163,7 +30682,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -30985,6 +31505,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -31172,6 +31693,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -31209,6 +31731,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -31318,6 +31841,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -31435,7 +31959,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -31481,6 +32006,230 @@ ], "docs_reference_titles": "Managing custom repository roles for an organization" }, + { + "action": "sandbox.add_port", + "description": "A forwarded port was added to a sandbox.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.create", + "description": "A sandbox was created.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.delete", + "description": "A sandbox was deleted.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.generate_token", + "description": "A token was generated for a sandbox.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.remove_port", + "description": "A forwarded port was removed from a sandbox.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.resume", + "description": "A sandbox was resumed.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.stop", + "description": "A sandbox was stopped.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, { "action": "secret_scanning_alert.assign", "description": "A user was assigned to a secret scanning alert.", @@ -31590,6 +32339,78 @@ ], "docs_reference_titles": "Manage secret scanning alerts" }, + { + "action": "secret_scanning_alert.metadata_create", + "description": "Metadata was added to a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.metadata_remove", + "description": "Metadata was removed from a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, { "action": "secret_scanning_alert.public_leak", "description": "A secret scanning alert was leaked in a public repo.", @@ -32409,6 +33230,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -35112,6 +35934,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -35119,6 +35942,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], @@ -35168,6 +35992,71 @@ ], "docs_reference_titles": "Understanding GitHub Actions" }, + { + "action": "workflows.debugger_session_completed", + "description": "An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "completed_at", + "created_at", + "operation_type", + "started_at" + ] + }, + { + "action": "workflows.debugger_session_started", + "description": "An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "started_at" + ] + }, { "action": "workflows.delete_workflow_run", "description": "A workflow run was deleted.", diff --git a/src/audit-logs/data/ghec/organization.json b/src/audit-logs/data/ghec/organization.json index fad1c30d62e3..f60139009b56 100644 --- a/src/audit-logs/data/ghec/organization.json +++ b/src/audit-logs/data/ghec/organization.json @@ -425,6 +425,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -595,6 +596,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -629,6 +631,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -733,6 +736,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -1860,6 +1864,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -2146,6 +2151,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2296,6 +2302,38 @@ "previous_value" ] }, + { + "action": "copilot.code_review_organization_settings_updated", + "description": "Copilot code review settings were updated for an organization.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type" + ] + }, { "action": "copilot.code_review_repository_settings_updated", "description": "Copilot code review settings were updated for a repository.", @@ -2361,6 +2399,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -3275,6 +3314,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -3313,10 +3353,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3354,6 +3396,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3387,6 +3430,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3889,6 +3933,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4565,6 +4610,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4601,6 +4647,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4635,6 +4682,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -5315,6 +5363,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5536,7 +5587,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -5620,6 +5672,43 @@ ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, + { + "action": "integration.update", + "description": "A GitHub App was updated.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "application_client_id", + "created_at", + "integration", + "name", + "oauth_application_id", + "operation_type" + ] + }, { "action": "ip_allow_list.disable", "description": "An IP allow list was disabled.", @@ -6992,7 +7081,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -7165,6 +7255,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -8013,6 +8104,41 @@ ], "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" }, + { + "action": "oauth_application.update_token_expiration", + "description": "The token expiration setting for an OAuth application was updated.", + "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "oauth_application", + "oauth_application_id", + "operation_type" + ], + "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" + }, { "action": "org.accept_business_invitation", "description": "An invitation sent to an organization to join an enterprise was accepted.", @@ -8075,6 +8201,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -8218,7 +8345,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8888,6 +9016,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -8920,6 +9049,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9484,6 +9614,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9517,8 +9648,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9549,6 +9682,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9616,9 +9750,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -9649,6 +9785,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9717,6 +9854,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10177,6 +10315,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10353,6 +10492,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -10386,6 +10526,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -10513,10 +10654,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -12269,7 +12412,8 @@ "user_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "topic" ] }, { @@ -12333,6 +12477,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12368,10 +12513,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -12402,8 +12549,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12532,8 +12681,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12870,7 +13021,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12905,7 +13057,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13393,6 +13546,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13428,10 +13582,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -13499,6 +13655,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13607,6 +13764,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13682,7 +13840,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -13749,6 +13908,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13784,6 +13944,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -14697,7 +14858,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14730,7 +14891,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14762,7 +14923,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14795,7 +14956,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -15054,7 +15215,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -16182,6 +16344,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -17082,10 +17245,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -17123,7 +17288,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -18251,6 +18417,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18930,6 +19097,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19405,8 +19573,8 @@ ] }, { - "action": "repo.code_scanning_ai_findings_disabled", - "description": "AI-powered findings for code scanning were disabled for a repository.", + "action": "repo.code_quality_disabled", + "description": "Code Quality was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19433,13 +19601,16 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "topic", + "user_programmatic_access_name" ] }, { - "action": "repo.code_scanning_ai_findings_enabled", - "description": "AI-powered findings for code scanning were enabled for a repository.", + "action": "repo.code_quality_enabled", + "description": "Code Quality was enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19464,16 +19635,19 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { - "action": "repo.code_scanning_analysis_deleted", - "description": "Code scanning analysis for a repository was deleted.", - "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository", + "action": "repo.code_quality_updated", + "description": "Code Quality was updated for a repository.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -19499,19 +19673,16 @@ "user_agent", "actor_is_agent", "actor_is_bot", - "category", "created_at", "oauth_application_id", "operation_type", "public_repo", - "tool", "user_programmatic_access_name" - ], - "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository" + ] }, { - "action": "repo.code_scanning_autofix_disabled", - "description": "Autofix for code scanning alerts was disabled for a repository.", + "action": "repo.code_scanning_ai_findings_disabled", + "description": "AI-powered findings for code scanning were disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19538,13 +19709,14 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] }, { - "action": "repo.code_scanning_autofix_enabled", - "description": "Autofix for code scanning alerts was enabled for a repository.", + "action": "repo.code_scanning_ai_findings_enabled", + "description": "AI-powered findings for code scanning were enabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19571,14 +19743,15 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] }, { - "action": "repo.code_scanning_autofix_third_party_tools_disabled", - "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.", - "docs_reference_links": "N/A", + "action": "repo.code_scanning_analysis_deleted", + "description": "Code scanning analysis for a repository was deleted.", + "docs_reference_links": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository", "fields": [ "@timestamp", "_document_id", @@ -19602,15 +19775,21 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", + "category", "created_at", + "oauth_application_id", "operation_type", - "public_repo" - ] + "public_repo", + "tool", + "user_programmatic_access_name" + ], + "docs_reference_titles": "/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository" }, { - "action": "repo.code_scanning_autofix_third_party_tools_enabled", - "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.", + "action": "repo.code_scanning_autofix_disabled", + "description": "Autofix for code scanning alerts was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -19642,9 +19821,9 @@ ] }, { - "action": "repo.code_scanning_configuration_for_branch_deleted", - "description": "A code scanning configuration for a branch of a repository was deleted.", - "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch", + "action": "repo.code_scanning_autofix_enabled", + "description": "Autofix for code scanning alerts was enabled for a repository.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -19669,17 +19848,116 @@ "user_id", "user_agent", "actor_is_bot", - "branch", - "category", "created_at", "operation_type", - "public_repo", - "tool" - ], - "docs_reference_titles": "Resolving code scanning alerts" + "public_repo" + ] }, { - "action": "repo.code_scanning_delegated_alert_dismissal_disabled", + "action": "repo.code_scanning_autofix_third_party_tools_disabled", + "description": "Autofix for third party tools for code scanning alerts was disabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_autofix_third_party_tools_enabled", + "description": "Autofix for third party tools for code scanning alerts was enabled for a repository.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo" + ] + }, + { + "action": "repo.code_scanning_configuration_for_branch_deleted", + "description": "A code scanning configuration for a branch of a repository was deleted.", + "docs_reference_links": "/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "branch", + "category", + "created_at", + "operation_type", + "public_repo", + "tool" + ], + "docs_reference_titles": "Resolving code scanning alerts" + }, + { + "action": "repo.code_scanning_delegated_alert_dismissal_disabled", "description": "Prevention of direct alert dismissal for code scanning was disabled for a repository.", "docs_reference_links": "N/A", "fields": [ @@ -21376,6 +21654,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -21419,6 +21698,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -21570,6 +21850,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -21651,7 +21932,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -22149,6 +22431,42 @@ ], "docs_reference_titles": "Repository security advisories" }, + { + "action": "repository_advisory.create_confidential_comment", + "description": "Someone created a confidential comment on a repository security advisory.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type", + "public_repo", + "repository_advisory", + "repository_advisory_comment_id", + "repository_advisory_id" + ] + }, { "action": "repository_advisory.cve_request", "description": "Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.", @@ -22321,6 +22639,43 @@ "user_programmatic_access_name" ] }, + { + "action": "repository_advisory.read_confidential_comments", + "description": "Confidential comments on a repository security advisory were read by someone.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "confidential_comment_count", + "created_at", + "operation_type", + "public_repo", + "repository_advisory", + "repository_advisory_id", + "surface" + ] + }, { "action": "repository_advisory.reopen", "description": "Someone reopened as draft security advisory.", @@ -22353,7 +22708,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -23214,6 +23570,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -23541,7 +23898,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23574,8 +23932,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23712,7 +24072,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -24123,7 +24484,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24945,6 +25307,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -25132,6 +25495,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25169,6 +25533,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25278,6 +25643,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -25395,7 +25761,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -25442,9 +25809,9 @@ "docs_reference_titles": "Managing custom repository roles for an organization" }, { - "action": "secret_scanning_alert.assign", - "description": "A user was assigned to a secret scanning alert.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.add_port", + "description": "A forwarded port was added to a sandbox.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25469,18 +25836,14 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.create", - "description": "GitHub detected a secret and created a secret scanning alert.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.create", + "description": "A sandbox was created.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25505,18 +25868,14 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.delete", - "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.delete", + "description": "A sandbox was deleted.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25541,19 +25900,14 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "reason", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.public_leak", - "description": "A secret scanning alert was leaked in a public repo.", - "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "action": "sandbox.generate_token", + "description": "A token was generated for a sandbox.", + "docs_reference_links": "N/A", "fields": [ "@timestamp", "_document_id", @@ -25578,17 +25932,13 @@ "user_id", "user_agent", "created_at", - "multi_repo", - "number", - "publicly_leaked", - "secret_type", - "secret_type_display_name" - ], - "docs_reference_titles": "Manage secret scanning alerts" + "operation_type", + "sandbox_id" + ] }, { - "action": "secret_scanning_alert.reopen", - "description": "A secret scanning alert was reopened.", + "action": "sandbox.remove_port", + "description": "A forwarded port was removed from a sandbox.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -25613,17 +25963,330 @@ "user", "user_id", "user_agent", - "actor_is_agent", - "actor_is_bot", "created_at", - "multi_repo", - "number", - "oauth_application_id", "operation_type", - "publicly_leaked", - "public_repo", - "resolution", - "secret_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.resume", + "description": "A sandbox was resumed.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "sandbox.stop", + "description": "A sandbox was stopped.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "sandbox_id" + ] + }, + { + "action": "secret_scanning_alert.assign", + "description": "A user was assigned to a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.create", + "description": "GitHub detected a secret and created a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.delete", + "description": "A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "reason", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.metadata_create", + "description": "Metadata was added to a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.metadata_remove", + "description": "Metadata was removed from a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.public_leak", + "description": "A secret scanning alert was leaked in a public repo.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.reopen", + "description": "A secret scanning alert was reopened.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "multi_repo", + "number", + "oauth_application_id", + "operation_type", + "publicly_leaked", + "public_repo", + "resolution", + "secret_type", "secret_type_display_name", "user_programmatic_access_name" ] @@ -26369,6 +27032,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -29199,6 +29863,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -29206,6 +29871,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], @@ -29255,6 +29921,71 @@ ], "docs_reference_titles": "Understanding GitHub Actions" }, + { + "action": "workflows.debugger_session_completed", + "description": "An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "completed_at", + "created_at", + "operation_type", + "started_at" + ] + }, + { + "action": "workflows.debugger_session_started", + "description": "An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "operation_type", + "started_at" + ] + }, { "action": "workflows.delete_workflow_run", "description": "A workflow run was deleted.", diff --git a/src/audit-logs/data/ghec/user.json b/src/audit-logs/data/ghec/user.json index c4b66f719bf9..a35f7517e21c 100644 --- a/src/audit-logs/data/ghec/user.json +++ b/src/audit-logs/data/ghec/user.json @@ -307,6 +307,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -718,6 +719,40 @@ "operation_type" ] }, + { + "action": "business.add_member", + "description": "A member was added to an enterprise.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "created_at", + "name", + "operation_type" + ] + }, { "action": "business.add_support_entitlee", "description": "A support entitlement was added to a member of an enterprise.", @@ -1069,6 +1104,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1138,6 +1174,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -1210,6 +1247,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1243,6 +1281,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -1316,7 +1355,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1758,6 +1798,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1904,6 +1945,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2019,6 +2061,38 @@ "seat_assignment" ] }, + { + "action": "copilot.code_review_organization_settings_updated", + "description": "Copilot code review settings were updated for an organization.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "operation_type" + ] + }, { "action": "copilot.code_review_repository_settings_updated", "description": "Copilot code review settings were updated for a repository.", @@ -2505,6 +2579,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -2543,10 +2618,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -2584,6 +2661,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3550,6 +3628,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3586,6 +3665,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3620,6 +3700,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3692,6 +3773,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -4297,6 +4379,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4518,7 +4603,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -4602,6 +4688,43 @@ ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, + { + "action": "integration.update", + "description": "A GitHub App was updated.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_agent", + "actor_is_bot", + "application_client_id", + "created_at", + "integration", + "name", + "oauth_application_id", + "operation_type" + ] + }, { "action": "issue_dependencies.blocked_by_add", "description": "An issue was marked as blocked by another issue.", @@ -6178,6 +6301,41 @@ ], "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" }, + { + "action": "oauth_application.update_token_expiration", + "description": "The token expiration setting for an OAuth application was updated.", + "docs_reference_links": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "created_at", + "oauth_application", + "oauth_application_id", + "operation_type" + ], + "docs_reference_titles": "/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app" + }, { "action": "oauth_authorization.create", "description": "An authorization for an OAuth application was created.", @@ -6284,8 +6442,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -6706,6 +6866,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6741,10 +6902,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -6812,6 +6975,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6888,6 +7052,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -6963,7 +7128,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -7558,6 +7724,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -8592,10 +8759,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -8633,7 +8802,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -8827,6 +8997,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -10569,6 +10740,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10612,6 +10784,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -10763,6 +10936,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -10844,7 +11018,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -11727,7 +11902,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11758,7 +11934,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11789,7 +11966,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11820,7 +11998,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11851,7 +12030,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11882,7 +12062,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -11913,7 +12094,8 @@ "user_id", "user_agent", "created_at", - "operation_type" + "operation_type", + "sandbox_id" ] }, { @@ -13132,6 +13314,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -13932,6 +14115,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -14105,6 +14289,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -14270,7 +14455,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14297,12 +14482,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14328,12 +14514,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14359,6 +14546,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -14430,7 +14618,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14457,12 +14645,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14488,13 +14677,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14520,6 +14710,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -15472,6 +15663,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghes-3.17/enterprise.json b/src/audit-logs/data/ghes-3.17/enterprise.json index 0a402974b44a..5eb83165b22d 100644 --- a/src/audit-logs/data/ghes-3.17/enterprise.json +++ b/src/audit-logs/data/ghes-3.17/enterprise.json @@ -415,13 +415,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -1644,6 +1647,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "name", "operation_type" @@ -1717,7 +1721,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -2106,6 +2111,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2139,6 +2145,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2403,6 +2410,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2436,6 +2444,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2682,6 +2691,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -2754,6 +2764,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -2787,6 +2798,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -2860,7 +2872,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -3836,6 +3849,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3982,6 +3996,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -5172,6 +5187,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -5359,6 +5375,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -6687,6 +6704,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -6730,6 +6748,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -7352,6 +7371,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -7388,6 +7408,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -7422,6 +7443,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -7494,6 +7516,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -8174,6 +8197,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -8395,7 +8421,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -9919,11 +9946,13 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -10102,8 +10131,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -10169,6 +10200,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -10279,7 +10311,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -10946,6 +10979,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11013,9 +11047,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -11046,6 +11082,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11114,6 +11151,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11361,6 +11399,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -11488,10 +11527,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -12432,6 +12473,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12467,10 +12509,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -12501,8 +12545,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12631,8 +12677,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12907,7 +12955,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12942,7 +12991,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13402,6 +13452,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13510,6 +13561,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13585,7 +13637,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -14918,6 +14971,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -16020,10 +16074,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -16061,7 +16117,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -17189,6 +17246,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -17868,6 +17926,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -18765,6 +18824,7 @@ "user_agent", "created_at", "operation_type", + "public_repo", "visibility" ] }, @@ -19416,6 +19476,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type", "public_repo", @@ -20420,6 +20481,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -20501,7 +20563,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -21529,7 +21592,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21562,8 +21626,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21700,7 +21766,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21961,7 +22028,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -22715,6 +22783,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -22752,6 +22821,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -22785,6 +22855,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -23349,6 +23420,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -25001,6 +25073,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -26422,6 +26495,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -26691,6 +26765,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -26856,7 +26931,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -26883,12 +26958,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -26914,12 +26990,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -26945,6 +27022,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -27016,7 +27094,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27043,12 +27121,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27074,13 +27153,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27106,6 +27186,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -28286,6 +28367,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", @@ -28873,6 +28955,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -28880,6 +28963,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.17/organization.json b/src/audit-logs/data/ghes-3.17/organization.json index e52b65ab4c3f..1958541bd6eb 100644 --- a/src/audit-logs/data/ghes-3.17/organization.json +++ b/src/audit-logs/data/ghes-3.17/organization.json @@ -1445,6 +1445,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1731,6 +1732,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -1912,6 +1914,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -3339,6 +3342,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4015,6 +4019,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4051,6 +4056,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4085,6 +4091,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4765,6 +4772,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4986,7 +4996,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6110,7 +6121,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -6283,6 +6295,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -7193,6 +7206,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -7303,7 +7317,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8311,6 +8326,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8344,8 +8360,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -8376,6 +8394,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8443,9 +8462,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -8476,6 +8497,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8544,6 +8566,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9109,6 +9132,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -9142,6 +9166,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -9269,10 +9294,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -10958,6 +10985,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10993,10 +11021,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -11027,8 +11057,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -11157,8 +11189,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -11495,7 +11529,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -11530,7 +11565,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -11990,6 +12026,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12098,6 +12135,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -12173,7 +12211,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -12240,6 +12279,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -12275,6 +12315,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13040,7 +13081,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13073,7 +13114,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13105,7 +13146,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13138,7 +13179,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13397,7 +13438,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -14525,6 +14567,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -15425,10 +15468,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -15466,7 +15511,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -16594,6 +16640,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -17273,6 +17320,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19699,6 +19747,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -19780,7 +19829,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -20482,7 +20532,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -21046,6 +21097,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -21373,7 +21425,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21406,8 +21459,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21544,7 +21599,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21879,7 +21935,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -22731,6 +22788,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -22768,6 +22826,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -22877,6 +22936,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -22994,7 +23054,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -23789,6 +23850,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -26453,6 +26515,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -26460,6 +26523,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.17/user.json b/src/audit-logs/data/ghes-3.17/user.json index 1a4923449495..716859e29392 100644 --- a/src/audit-logs/data/ghes-3.17/user.json +++ b/src/audit-logs/data/ghes-3.17/user.json @@ -578,6 +578,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -650,6 +651,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -683,6 +685,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -756,7 +759,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1198,6 +1202,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1344,6 +1349,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2729,6 +2735,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -2765,6 +2772,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -2799,6 +2807,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -2871,6 +2880,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -3476,6 +3486,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -3697,7 +3710,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -5029,8 +5043,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -5488,6 +5504,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5564,6 +5581,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -5639,7 +5657,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -6234,6 +6253,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -7268,10 +7288,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -7309,7 +7331,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -7503,6 +7526,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -9365,6 +9389,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -9446,7 +9471,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -11421,6 +11447,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -12221,6 +12248,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -12394,6 +12422,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -12559,7 +12588,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12586,12 +12615,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12617,12 +12647,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12648,6 +12679,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -12719,7 +12751,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12746,12 +12778,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12777,13 +12810,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12809,6 +12843,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -13761,6 +13796,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghes-3.18/enterprise.json b/src/audit-logs/data/ghes-3.18/enterprise.json index 3fcb978d16e8..330b08cb7f93 100644 --- a/src/audit-logs/data/ghes-3.18/enterprise.json +++ b/src/audit-logs/data/ghes-3.18/enterprise.json @@ -415,13 +415,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -1644,6 +1647,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "name", "operation_type" @@ -1717,7 +1721,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -2106,6 +2111,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2139,6 +2145,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2403,6 +2410,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2436,6 +2444,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2682,6 +2691,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -2754,6 +2764,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -2787,6 +2798,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -2860,7 +2872,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -3836,6 +3849,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3982,6 +3996,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -4727,6 +4742,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5252,6 +5268,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -5439,6 +5456,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -6767,6 +6785,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -6810,6 +6829,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -7432,6 +7452,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -7468,6 +7489,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -7502,6 +7524,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -7574,6 +7597,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -8254,6 +8278,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -8475,7 +8502,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -9999,11 +10027,13 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -10182,8 +10212,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -10249,6 +10281,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -10359,7 +10392,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -11026,6 +11060,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11093,9 +11128,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -11126,6 +11163,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11194,6 +11232,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11441,6 +11480,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -11568,10 +11608,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -12512,6 +12554,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12547,10 +12590,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -12581,8 +12626,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12711,8 +12758,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12987,7 +13036,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13022,7 +13072,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13482,6 +13533,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13590,6 +13642,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13665,7 +13718,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -14998,6 +15052,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -16100,10 +16155,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -16141,7 +16198,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -17269,6 +17327,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -17948,6 +18007,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -18845,6 +18905,7 @@ "user_agent", "created_at", "operation_type", + "public_repo", "visibility" ] }, @@ -19496,6 +19557,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type", "public_repo", @@ -20500,6 +20562,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -20581,7 +20644,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -21683,7 +21747,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21716,8 +21781,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21854,7 +21921,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22115,7 +22183,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -22869,6 +22938,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -22906,6 +22976,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -22939,6 +23010,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -23503,6 +23575,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -25155,6 +25228,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -26576,6 +26650,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -26845,6 +26920,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -27010,7 +27086,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27037,12 +27113,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27068,12 +27145,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27099,6 +27177,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -27170,7 +27249,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27197,12 +27276,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27228,13 +27308,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -27260,6 +27341,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -28440,6 +28522,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", @@ -29027,6 +29110,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -29034,6 +29118,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.18/organization.json b/src/audit-logs/data/ghes-3.18/organization.json index be8181bc2196..1b150d651e8d 100644 --- a/src/audit-logs/data/ghes-3.18/organization.json +++ b/src/audit-logs/data/ghes-3.18/organization.json @@ -1445,6 +1445,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1731,6 +1732,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -1912,6 +1914,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -2784,6 +2787,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3419,6 +3423,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4095,6 +4100,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4131,6 +4137,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4165,6 +4172,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4845,6 +4853,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5066,7 +5077,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6312,7 +6324,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -6485,6 +6498,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -7395,6 +7409,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -7538,7 +7553,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8578,6 +8594,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8611,8 +8628,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -8643,6 +8662,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8710,9 +8730,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -8743,6 +8765,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8811,6 +8834,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9376,6 +9400,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -9409,6 +9434,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -9536,10 +9562,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -11258,6 +11286,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11293,10 +11322,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -11327,8 +11358,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -11457,8 +11490,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -11795,7 +11830,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -11830,7 +11866,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12290,6 +12327,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12398,6 +12436,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -12473,7 +12512,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -12540,6 +12580,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -12575,6 +12616,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13340,7 +13382,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13373,7 +13415,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13405,7 +13447,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13438,7 +13480,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13697,7 +13739,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -14825,6 +14868,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -15725,10 +15769,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -15766,7 +15812,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -16894,6 +16941,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -17573,6 +17621,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19999,6 +20048,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -20080,7 +20130,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -20782,7 +20833,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -21420,6 +21472,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -21747,7 +21800,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21780,8 +21834,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -21918,7 +21974,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22253,7 +22310,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -23105,6 +23163,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -23142,6 +23201,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -23251,6 +23311,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -23368,7 +23429,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -24233,6 +24295,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -26897,6 +26960,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -26904,6 +26968,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.18/user.json b/src/audit-logs/data/ghes-3.18/user.json index e3d4a23fdb66..9ed73d08f6ca 100644 --- a/src/audit-logs/data/ghes-3.18/user.json +++ b/src/audit-logs/data/ghes-3.18/user.json @@ -578,6 +578,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -650,6 +651,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -683,6 +685,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -756,7 +759,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1198,6 +1202,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1344,6 +1349,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2774,6 +2780,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -2810,6 +2817,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -2844,6 +2852,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -2916,6 +2925,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -3521,6 +3531,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -3742,7 +3755,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -5074,8 +5088,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -5533,6 +5549,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5609,6 +5626,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -5684,7 +5702,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -6279,6 +6298,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -7313,10 +7333,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -7354,7 +7376,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -7548,6 +7571,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -9410,6 +9434,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -9491,7 +9516,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -11466,6 +11492,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -12266,6 +12293,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -12439,6 +12467,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -12604,7 +12633,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12631,12 +12660,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12662,12 +12692,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12693,6 +12724,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -12764,7 +12796,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12791,12 +12823,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12822,13 +12855,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -12854,6 +12888,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -13806,6 +13841,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghes-3.19/enterprise.json b/src/audit-logs/data/ghes-3.19/enterprise.json index d521c4bac40d..2387c70f32b9 100644 --- a/src/audit-logs/data/ghes-3.19/enterprise.json +++ b/src/audit-logs/data/ghes-3.19/enterprise.json @@ -415,13 +415,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -508,6 +511,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -1854,6 +1858,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "name", "operation_type" @@ -1927,7 +1932,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -2316,6 +2322,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2349,6 +2356,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2613,6 +2621,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2646,6 +2655,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2957,6 +2967,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3026,6 +3037,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -3098,6 +3110,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3131,6 +3144,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -3204,7 +3218,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -4180,6 +4195,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4326,6 +4342,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -5071,6 +5088,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5596,6 +5614,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -5783,6 +5802,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -5920,6 +5940,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "enterprise_role_id", @@ -7298,6 +7319,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -7341,6 +7363,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -7963,6 +7986,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -7999,6 +8023,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8033,6 +8058,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8105,6 +8131,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -8785,6 +8812,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -9006,7 +9036,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -10678,11 +10709,13 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -10861,8 +10894,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -10928,6 +10963,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -11038,7 +11074,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -11705,6 +11742,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11772,9 +11810,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -11805,6 +11845,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11873,6 +11914,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12120,6 +12162,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -12247,10 +12290,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -13191,6 +13236,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13226,10 +13272,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -13260,8 +13308,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -13390,8 +13440,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -13666,7 +13718,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13701,7 +13754,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -14189,6 +14243,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -14224,10 +14279,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -14295,6 +14352,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -14403,6 +14461,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -14478,7 +14537,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -14909,6 +14969,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "allowed_values", "created_at", @@ -16013,6 +16074,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -17115,10 +17177,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -17156,7 +17220,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -18284,6 +18349,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18963,6 +19029,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19860,6 +19927,7 @@ "user_agent", "created_at", "operation_type", + "public_repo", "visibility" ] }, @@ -20511,6 +20579,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type", "public_repo", @@ -21395,6 +21464,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -21438,6 +21508,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -21589,6 +21660,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -21670,7 +21742,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -22772,7 +22845,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22805,8 +22879,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22943,7 +23019,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23204,7 +23281,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -23958,6 +24036,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -23995,6 +24074,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24028,6 +24108,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -24664,6 +24745,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -26412,6 +26494,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -27905,6 +27988,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -28214,6 +28298,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -28379,7 +28464,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28406,12 +28491,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28437,12 +28523,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28468,6 +28555,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -28539,7 +28627,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28566,12 +28654,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28597,13 +28686,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28629,6 +28719,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -29809,6 +29900,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", @@ -30396,6 +30488,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -30403,6 +30496,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.19/organization.json b/src/audit-logs/data/ghes-3.19/organization.json index 9e0dfb21a1ad..396534e72375 100644 --- a/src/audit-logs/data/ghes-3.19/organization.json +++ b/src/audit-logs/data/ghes-3.19/organization.json @@ -425,6 +425,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -1655,6 +1656,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1941,6 +1943,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2122,6 +2125,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -3028,6 +3032,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3663,6 +3668,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4339,6 +4345,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4375,6 +4382,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4409,6 +4417,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -5089,6 +5098,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5310,7 +5322,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6704,7 +6717,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -6877,6 +6891,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -7787,6 +7802,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -7930,7 +7946,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -9035,6 +9052,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9068,8 +9086,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9100,6 +9120,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9167,9 +9188,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -9200,6 +9223,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9268,6 +9292,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9833,6 +9858,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -9866,6 +9892,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -9993,10 +10020,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -11715,7 +11744,8 @@ "user_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "topic" ] }, { @@ -11779,6 +11809,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11814,10 +11845,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -11848,8 +11881,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -11978,8 +12013,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12316,7 +12353,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12351,7 +12389,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12839,6 +12878,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12874,10 +12914,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -12945,6 +12987,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13053,6 +13096,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13128,7 +13172,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -13195,6 +13240,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13230,6 +13276,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -14108,7 +14155,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14141,7 +14188,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14173,7 +14220,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14206,7 +14253,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14465,7 +14512,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -15593,6 +15641,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -16493,10 +16542,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -16534,7 +16585,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -17662,6 +17714,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18341,6 +18394,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -20721,6 +20775,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -20764,6 +20819,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -20915,6 +20971,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -20996,7 +21053,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -21698,7 +21756,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -22336,6 +22395,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -22663,7 +22723,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22696,8 +22757,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22834,7 +22897,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23169,7 +23233,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24021,6 +24086,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24058,6 +24124,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24167,6 +24234,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -24284,7 +24352,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -25258,6 +25327,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -28034,6 +28104,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -28041,6 +28112,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.19/user.json b/src/audit-logs/data/ghes-3.19/user.json index 4b408ede09e3..2da764234c97 100644 --- a/src/audit-logs/data/ghes-3.19/user.json +++ b/src/audit-logs/data/ghes-3.19/user.json @@ -307,6 +307,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -788,6 +789,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -857,6 +859,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -929,6 +932,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -962,6 +966,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -1035,7 +1040,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1477,6 +1483,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1623,6 +1630,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -3053,6 +3061,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3089,6 +3098,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3123,6 +3133,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3195,6 +3206,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -3800,6 +3812,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4021,7 +4036,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -5501,8 +5517,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -5923,6 +5941,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5958,10 +5977,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -6029,6 +6050,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6105,6 +6127,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -6180,7 +6203,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -6775,6 +6799,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -7809,10 +7834,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -7850,7 +7877,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -8044,6 +8072,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -9786,6 +9815,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9829,6 +9859,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -9980,6 +10011,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -10061,7 +10093,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -12132,6 +12165,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -12932,6 +12966,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -13105,6 +13140,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -13270,7 +13306,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13297,12 +13333,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13328,12 +13365,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13359,6 +13397,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -13430,7 +13469,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13457,12 +13496,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13488,13 +13528,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13520,6 +13561,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -14472,6 +14514,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghes-3.20/enterprise.json b/src/audit-logs/data/ghes-3.20/enterprise.json index 41141e7d2b85..175d0e0bbea2 100644 --- a/src/audit-logs/data/ghes-3.20/enterprise.json +++ b/src/audit-logs/data/ghes-3.20/enterprise.json @@ -415,13 +415,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -508,6 +511,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -1887,6 +1891,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "name", "operation_type" @@ -1960,7 +1965,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -2349,6 +2355,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2382,6 +2389,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2646,6 +2654,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2679,6 +2688,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2990,6 +3000,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3059,6 +3070,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -3131,6 +3143,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3164,6 +3177,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -3237,7 +3251,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -4213,6 +4228,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4359,6 +4375,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -5104,6 +5121,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5629,6 +5647,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -5816,6 +5835,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -5953,6 +5973,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "enterprise_role_id", @@ -7331,6 +7352,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -7374,6 +7396,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -7996,6 +8019,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8032,6 +8056,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8066,6 +8091,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8138,6 +8164,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -8818,6 +8845,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -9039,7 +9069,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -10711,11 +10742,13 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -10894,8 +10927,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -10961,6 +10996,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -11071,7 +11107,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -11738,6 +11775,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11805,9 +11843,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -11838,6 +11878,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11906,6 +11947,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12153,6 +12195,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -12280,10 +12323,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -13224,6 +13269,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13259,10 +13305,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -13293,8 +13341,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -13423,8 +13473,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -13699,7 +13751,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13734,7 +13787,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -14222,6 +14276,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -14257,10 +14312,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -14328,6 +14385,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -14436,6 +14494,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -14511,7 +14570,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -14942,6 +15002,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "allowed_values", "created_at", @@ -16046,6 +16107,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -17148,10 +17210,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -17189,7 +17253,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -18317,6 +18382,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18996,6 +19062,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19893,6 +19960,7 @@ "user_agent", "created_at", "operation_type", + "public_repo", "visibility" ] }, @@ -20544,6 +20612,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type", "public_repo", @@ -21428,6 +21497,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -21471,6 +21541,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -21622,6 +21693,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -21703,7 +21775,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -22805,7 +22878,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22838,8 +22912,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22976,7 +23052,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23237,7 +23314,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -23991,6 +24069,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24028,6 +24107,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24061,6 +24141,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -24697,6 +24778,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -26445,6 +26527,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -27938,6 +28021,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -28247,6 +28331,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -28412,7 +28497,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28439,12 +28524,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28470,12 +28556,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28501,6 +28588,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -28572,7 +28660,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28599,12 +28687,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28630,13 +28719,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -28662,6 +28752,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -29842,6 +29933,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", @@ -30429,6 +30521,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -30436,6 +30529,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.20/organization.json b/src/audit-logs/data/ghes-3.20/organization.json index dbd370519e0b..5b7313601621 100644 --- a/src/audit-logs/data/ghes-3.20/organization.json +++ b/src/audit-logs/data/ghes-3.20/organization.json @@ -425,6 +425,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -1688,6 +1689,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1974,6 +1976,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2155,6 +2158,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -2965,6 +2969,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3600,6 +3605,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4276,6 +4282,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4312,6 +4319,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4346,6 +4354,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -5026,6 +5035,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5247,7 +5259,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6641,7 +6654,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -6814,6 +6828,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -7724,6 +7739,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -7867,7 +7883,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8972,6 +8989,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9005,8 +9023,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9037,6 +9057,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9104,9 +9125,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -9137,6 +9160,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9205,6 +9229,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9770,6 +9795,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -9803,6 +9829,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -9930,10 +9957,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -11652,7 +11681,8 @@ "user_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "topic" ] }, { @@ -11716,6 +11746,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -11751,10 +11782,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -11785,8 +11818,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -11915,8 +11950,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12253,7 +12290,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12288,7 +12326,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12776,6 +12815,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12811,10 +12851,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -12882,6 +12924,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12990,6 +13033,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13065,7 +13109,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -13132,6 +13177,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13167,6 +13213,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -14045,7 +14092,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14078,7 +14125,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14110,7 +14157,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14143,7 +14190,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14402,7 +14449,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -15530,6 +15578,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -16430,10 +16479,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -16471,7 +16522,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -17599,6 +17651,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18278,6 +18331,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -20658,6 +20712,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -20701,6 +20756,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -20852,6 +20908,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -20933,7 +20990,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -21635,7 +21693,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -22273,6 +22332,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -22600,7 +22660,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22633,8 +22694,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -22771,7 +22834,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23106,7 +23170,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -23958,6 +24023,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -23995,6 +24061,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24104,6 +24171,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -24221,7 +24289,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -25195,6 +25264,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -27971,6 +28041,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -27978,6 +28049,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.20/user.json b/src/audit-logs/data/ghes-3.20/user.json index 54d72dab2725..44db7f4fc469 100644 --- a/src/audit-logs/data/ghes-3.20/user.json +++ b/src/audit-logs/data/ghes-3.20/user.json @@ -307,6 +307,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -821,6 +822,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -890,6 +892,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -962,6 +965,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -995,6 +999,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -1068,7 +1073,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1510,6 +1516,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1656,6 +1663,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -3086,6 +3094,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3122,6 +3131,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3156,6 +3166,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3228,6 +3239,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -3833,6 +3845,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4054,7 +4069,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -5534,8 +5550,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -5956,6 +5974,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -5991,10 +6010,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -6062,6 +6083,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6138,6 +6160,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -6213,7 +6236,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -6808,6 +6832,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -7842,10 +7867,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -7883,7 +7910,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -8077,6 +8105,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -9819,6 +9848,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9862,6 +9892,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -10013,6 +10044,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -10094,7 +10126,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -12165,6 +12198,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -12965,6 +12999,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -13138,6 +13173,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -13303,7 +13339,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13330,12 +13366,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13361,12 +13398,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13392,6 +13430,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -13463,7 +13502,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13490,12 +13529,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13521,13 +13561,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -13553,6 +13594,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -14505,6 +14547,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghes-3.21/enterprise.json b/src/audit-logs/data/ghes-3.21/enterprise.json index d4c5d9e56406..74402136c677 100644 --- a/src/audit-logs/data/ghes-3.21/enterprise.json +++ b/src/audit-logs/data/ghes-3.21/enterprise.json @@ -415,13 +415,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -508,6 +511,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -2094,6 +2098,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "name", "operation_type" @@ -2134,6 +2139,41 @@ "operation_type" ] }, + { + "action": "business.members_limit_warning", + "description": "An enterprise is approaching its members limit.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "count", + "created_at", + "limit", + "name", + "operation_type" + ] + }, { "action": "business.organizations_limit_reached", "description": "An enterprise has reached its organizations limit.", @@ -2343,7 +2383,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -2768,6 +2809,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2801,6 +2843,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -3065,6 +3108,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -3098,6 +3142,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -3409,6 +3454,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3478,6 +3524,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -3550,6 +3597,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3583,6 +3631,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -3656,7 +3705,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -4632,6 +4682,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4778,6 +4829,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -5593,6 +5645,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -5631,10 +5684,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -5672,6 +5727,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -5705,6 +5761,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6097,6 +6154,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -6284,6 +6342,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -6421,6 +6480,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "enterprise_role_id", @@ -7799,6 +7859,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -7842,6 +7903,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -8464,6 +8526,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8500,6 +8563,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8534,6 +8598,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8606,6 +8671,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -9286,6 +9352,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -9507,7 +9576,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -11432,11 +11502,13 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -11615,8 +11687,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -11682,6 +11756,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -11792,7 +11867,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -12459,6 +12535,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12526,9 +12603,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -12559,6 +12638,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12627,6 +12707,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12874,6 +12955,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -13001,10 +13083,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -13979,6 +14063,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -14014,10 +14099,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -14048,8 +14135,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -14178,8 +14267,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -14454,7 +14545,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -14489,7 +14581,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -14977,6 +15070,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -15012,10 +15106,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -15083,6 +15179,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -15191,6 +15288,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -15266,7 +15364,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -15697,6 +15796,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "allowed_values", "created_at", @@ -16801,6 +16901,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -17903,10 +18004,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -17944,7 +18047,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -19072,6 +19176,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -19751,6 +19856,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -20648,6 +20754,7 @@ "user_agent", "created_at", "operation_type", + "public_repo", "visibility" ] }, @@ -21299,6 +21406,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type", "public_repo", @@ -22183,6 +22291,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -22226,6 +22335,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -22377,6 +22487,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -22458,7 +22569,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -23560,7 +23672,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23593,8 +23706,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23731,7 +23846,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -24068,7 +24184,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24716,6 +24833,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -24903,6 +25021,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24940,6 +25059,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24973,6 +25093,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -25609,6 +25730,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -27357,6 +27479,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -28865,6 +28988,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -29174,6 +29298,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -29339,7 +29464,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29366,12 +29491,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29397,12 +29523,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29428,6 +29555,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -29499,7 +29627,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29526,12 +29654,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29557,13 +29686,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29589,6 +29719,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -30769,6 +30900,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", @@ -31356,6 +31488,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -31363,6 +31496,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.21/organization.json b/src/audit-logs/data/ghes-3.21/organization.json index 0d70e6106f08..d19d5cc6aec7 100644 --- a/src/audit-logs/data/ghes-3.21/organization.json +++ b/src/audit-logs/data/ghes-3.21/organization.json @@ -425,6 +425,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -595,6 +596,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -629,6 +631,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -733,6 +736,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -1860,6 +1864,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -2146,6 +2151,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2327,6 +2333,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -3207,6 +3214,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -3245,10 +3253,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3286,6 +3296,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3319,6 +3330,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3821,6 +3833,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4497,6 +4510,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4533,6 +4547,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4567,6 +4582,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -5247,6 +5263,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5468,7 +5487,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6924,7 +6944,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -7097,6 +7118,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -8007,6 +8029,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -8150,7 +8173,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8820,6 +8844,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -8852,6 +8877,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9352,6 +9378,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9385,8 +9412,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9417,6 +9446,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9484,9 +9514,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -9517,6 +9549,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9585,6 +9618,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10045,6 +10079,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10221,6 +10256,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -10254,6 +10290,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -10381,10 +10418,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -12137,7 +12176,8 @@ "user_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "topic" ] }, { @@ -12201,6 +12241,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12236,10 +12277,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -12270,8 +12313,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12400,8 +12445,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12738,7 +12785,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12773,7 +12821,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13261,6 +13310,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13296,10 +13346,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -13367,6 +13419,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13475,6 +13528,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13550,7 +13604,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -13617,6 +13672,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13652,6 +13708,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -14565,7 +14622,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14598,7 +14655,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14630,7 +14687,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14663,7 +14720,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14922,7 +14979,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -16050,6 +16108,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -16950,10 +17009,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -16991,7 +17052,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -18119,6 +18181,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18798,6 +18861,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19301,6 +19365,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] @@ -19334,6 +19399,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] @@ -21244,6 +21310,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -21287,6 +21354,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -21438,6 +21506,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -21519,7 +21588,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -22221,7 +22291,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -23008,6 +23079,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -23335,7 +23407,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23368,8 +23441,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23506,7 +23581,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23917,7 +23993,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24739,6 +24816,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -24926,6 +25004,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -24963,6 +25042,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25072,6 +25152,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -25189,7 +25270,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -26163,6 +26245,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -28954,6 +29037,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -28961,6 +29045,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.21/user.json b/src/audit-logs/data/ghes-3.21/user.json index 66b82f3add73..380168b1894a 100644 --- a/src/audit-logs/data/ghes-3.21/user.json +++ b/src/audit-logs/data/ghes-3.21/user.json @@ -307,6 +307,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -1069,6 +1070,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1138,6 +1140,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -1210,6 +1213,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1243,6 +1247,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -1316,7 +1321,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1758,6 +1764,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1904,6 +1911,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2471,6 +2479,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -2509,10 +2518,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -2550,6 +2561,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3516,6 +3528,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3552,6 +3565,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3586,6 +3600,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3658,6 +3673,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -4263,6 +4279,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4484,7 +4503,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6217,8 +6237,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -6639,6 +6661,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6674,10 +6697,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -6745,6 +6770,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6821,6 +6847,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -6896,7 +6923,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -7491,6 +7519,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -8525,10 +8554,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -8566,7 +8597,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -8760,6 +8792,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -10502,6 +10535,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10545,6 +10579,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -10696,6 +10731,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -10777,7 +10813,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -12848,6 +12885,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -13648,6 +13686,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -13821,6 +13860,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -13986,7 +14026,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14013,12 +14053,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14044,12 +14085,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14075,6 +14117,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -14146,7 +14189,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14173,12 +14216,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14204,13 +14248,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14236,6 +14281,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -15188,6 +15234,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/ghes-3.22/enterprise.json b/src/audit-logs/data/ghes-3.22/enterprise.json index da5bf87de046..780528b4b32d 100644 --- a/src/audit-logs/data/ghes-3.22/enterprise.json +++ b/src/audit-logs/data/ghes-3.22/enterprise.json @@ -449,13 +449,16 @@ "audit_log_stream_sink_details", "created_at", "new_azure_blob_container", + "new_datadog_site", "new_event_hub_instance", "new_gc_bucket", "new_s3_arn_role", "new_s3_bucket", "new_splunk_domain", "new_splunk_port", + "oauth_application_id", "old_azure_blob_container", + "old_datadog_site", "old_event_hub_instance", "old_gc_bucket", "old_s3_arn_role", @@ -542,6 +545,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -2162,6 +2166,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "name", "operation_type" @@ -2202,6 +2207,41 @@ "operation_type" ] }, + { + "action": "business.members_limit_warning", + "description": "An enterprise is approaching its members limit.", + "docs_reference_links": "N/A", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "actor_is_bot", + "count", + "created_at", + "limit", + "name", + "operation_type" + ] + }, { "action": "business.organizations_limit_reached", "description": "An enterprise has reached its organizations limit.", @@ -2411,7 +2451,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -2836,6 +2877,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -2869,6 +2911,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -3133,6 +3176,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -3166,6 +3210,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise" @@ -3477,6 +3522,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3546,6 +3592,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -3618,6 +3665,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -3651,6 +3699,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -3724,7 +3773,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -4700,6 +4750,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4846,6 +4897,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -5695,6 +5747,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -5733,10 +5786,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -5774,6 +5829,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -5807,6 +5863,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6199,6 +6256,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -6386,6 +6444,7 @@ "actor_is_bot", "created_at", "domain_name", + "oauth_application_id", "operation_type", "owner", "owner_type" @@ -6523,6 +6582,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "enterprise_role_id", @@ -7901,6 +7961,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "message", "oauth_application_id", "operation_type", @@ -7944,6 +8005,7 @@ "actor_is_bot", "api_request_body", "created_at", + "large_group_warning", "oauth_application_id", "operation_type", "query_string", @@ -8566,6 +8628,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8602,6 +8665,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -8636,6 +8700,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -8708,6 +8773,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -9388,6 +9454,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -9609,7 +9678,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -11567,11 +11637,13 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { @@ -11750,8 +11822,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -11817,6 +11891,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -11927,7 +12002,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -12594,6 +12670,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12661,9 +12738,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -12694,6 +12773,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12762,6 +12842,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13009,6 +13090,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -13136,10 +13218,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -14114,6 +14198,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -14149,10 +14234,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -14183,8 +14270,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -14313,8 +14402,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -14589,7 +14680,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -14624,7 +14716,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -15112,6 +15205,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -15147,10 +15241,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -15218,6 +15314,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -15326,6 +15423,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -15401,7 +15499,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -15832,6 +15931,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "allowed_values", "created_at", @@ -16936,6 +17036,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -18038,10 +18139,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -18079,7 +18182,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -19207,6 +19311,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -19886,6 +19991,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -20783,6 +20889,7 @@ "user_agent", "created_at", "operation_type", + "public_repo", "visibility" ] }, @@ -21434,6 +21541,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type", "public_repo", @@ -22318,6 +22426,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -22361,6 +22470,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -22512,6 +22622,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -22593,7 +22704,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -23695,7 +23807,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23728,8 +23841,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23866,7 +23981,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -24203,7 +24319,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24851,6 +24968,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -25038,6 +25156,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25075,6 +25194,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25108,6 +25228,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -25744,6 +25865,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -27492,6 +27614,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -29000,6 +29123,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -29309,6 +29433,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -29474,7 +29599,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29501,12 +29626,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29532,12 +29658,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29563,6 +29690,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -29634,7 +29762,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29661,12 +29789,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29692,13 +29821,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -29724,6 +29854,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -30904,6 +31035,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", @@ -31491,6 +31623,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -31498,6 +31631,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.22/organization.json b/src/audit-logs/data/ghes-3.22/organization.json index 37b5038161d1..00c4103541e5 100644 --- a/src/audit-logs/data/ghes-3.22/organization.json +++ b/src/audit-logs/data/ghes-3.22/organization.json @@ -459,6 +459,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -629,6 +630,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -663,6 +665,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -767,6 +770,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -1894,6 +1898,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -2180,6 +2185,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2395,6 +2401,7 @@ "actor_is_bot", "created_at", "excluded_paths", + "oauth_application_id", "operation_type", "owner_type", "public_repo", @@ -3309,6 +3316,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -3347,10 +3355,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3388,6 +3398,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3421,6 +3432,7 @@ "user_id", "user_agent", "access_level", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3923,6 +3935,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner", "owner_type", @@ -4599,6 +4612,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -4635,6 +4649,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -4669,6 +4684,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -5349,6 +5365,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -5570,7 +5589,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -7026,7 +7046,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization" }, @@ -7199,6 +7220,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing repository management policies in your enterprise" @@ -8109,6 +8131,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization" @@ -8252,7 +8275,8 @@ "created_at", "oauth_application_id", "operation_type", - "team" + "team", + "user_programmatic_access_name" ] }, { @@ -8922,6 +8946,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -8954,6 +8979,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9518,6 +9544,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9551,8 +9578,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -9583,6 +9612,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9650,9 +9680,11 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization" }, @@ -9683,6 +9715,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -9751,6 +9784,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10211,6 +10245,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10387,6 +10422,7 @@ "actor_is_bot", "created_at", "issuer", + "oauth_application_id", "operation_type", "sso_url" ] @@ -10420,6 +10456,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization" @@ -10547,10 +10584,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization" }, @@ -12303,7 +12342,8 @@ "user_agent", "actor_is_bot", "created_at", - "operation_type" + "operation_type", + "topic" ] }, { @@ -12367,6 +12407,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -12402,10 +12443,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -12436,8 +12479,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12566,8 +12611,10 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Defining custom patterns for secret scanning" @@ -12904,7 +12951,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -12939,7 +12987,8 @@ "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -13427,6 +13476,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13462,10 +13512,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -13533,6 +13585,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -13641,6 +13694,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -13716,7 +13770,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -13783,6 +13838,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -13818,6 +13874,7 @@ "actor_is_bot", "created_at", "from_business", + "oauth_application_id", "operation_type", "to_business" ], @@ -14731,7 +14788,7 @@ }, { "action": "organization_moderators.add_team", - "description": "N/A", + "description": "A team was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14764,7 +14821,7 @@ }, { "action": "organization_moderators.add_user", - "description": "N/A", + "description": "A user was added as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14796,7 +14853,7 @@ }, { "action": "organization_moderators.remove_team", - "description": "N/A", + "description": "A team was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14829,7 +14886,7 @@ }, { "action": "organization_moderators.remove_user", - "description": "N/A", + "description": "A user was removed as an organization moderator.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -15088,7 +15145,8 @@ "owner", "owner_id", "owner_type", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Permissions of custom organization roles" }, @@ -16216,6 +16274,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type" ] }, @@ -17116,10 +17175,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -17157,7 +17218,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -18285,6 +18347,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -18964,6 +19027,7 @@ "oauth_application_id", "operation_type", "public_repo", + "topic", "user_programmatic_access_name" ] }, @@ -19467,6 +19531,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] @@ -19500,6 +19565,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "public_repo" ] @@ -21410,6 +21476,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -21453,6 +21520,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -21604,6 +21672,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -21685,7 +21754,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -22387,7 +22457,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ] }, { @@ -23248,6 +23319,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ], @@ -23575,7 +23647,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23608,8 +23681,10 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -23746,7 +23821,8 @@ "created_at", "oauth_application_id", "operation_type", - "public_repo" + "public_repo", + "user_programmatic_access_name" ], "docs_reference_titles": "Defining custom patterns for secret scanning" }, @@ -24157,7 +24233,8 @@ "oauth_application_id", "operation_type", "public_repo", - "topic" + "topic", + "user_programmatic_access_name" ], "docs_reference_titles": "Push protection" }, @@ -24979,6 +25056,7 @@ "user_id", "user_agent", "active", + "actor_is_agent", "actor_is_bot", "alert_id", "alert_number", @@ -25166,6 +25244,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25203,6 +25282,7 @@ "oauth_application_id", "operation_type", "public_repo", + "reason", "topic", "user_programmatic_access_name" ] @@ -25312,6 +25392,7 @@ "user_agent", "actor_is_bot", "created_at", + "oauth_application_id", "operation_type", "owner" ], @@ -25429,7 +25510,8 @@ "oauth_application_id", "operation_type", "owner", - "role_permissions" + "role_permissions", + "user_programmatic_access_name" ], "docs_reference_titles": "Managing custom repository roles for an organization" }, @@ -25584,6 +25666,78 @@ ], "docs_reference_titles": "Manage secret scanning alerts" }, + { + "action": "secret_scanning_alert.metadata_create", + "description": "Metadata was added to a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, + { + "action": "secret_scanning_alert.metadata_remove", + "description": "Metadata was removed from a secret scanning alert.", + "docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning", + "fields": [ + "@timestamp", + "_document_id", + "action", + "actor", + "actor_id", + "business", + "business_id", + "hashed_token", + "org", + "org_id", + "programmatic_access_type", + "repo", + "repo_id", + "repository", + "repository_id", + "request_access_security_header", + "request_id", + "token_id", + "token_scopes", + "user", + "user_id", + "user_agent", + "created_at", + "multi_repo", + "number", + "publicly_leaked", + "secret_type", + "secret_type_display_name" + ], + "docs_reference_titles": "Manage secret scanning alerts" + }, { "action": "secret_scanning_alert.public_leak", "description": "A secret scanning alert was leaked in a public repo.", @@ -26403,6 +26557,7 @@ "source", "source_slug", "started_at", + "topic", "type", "type_slug" ], @@ -29194,6 +29349,7 @@ "head_branch", "head_sha", "name", + "oauth_application_id", "operation_type", "public_repo", "run_attempt", @@ -29201,6 +29357,7 @@ "started_at", "topic", "trigger_id", + "user_programmatic_access_name", "workflow_id", "workflow_run_id" ], diff --git a/src/audit-logs/data/ghes-3.22/user.json b/src/audit-logs/data/ghes-3.22/user.json index 1ebf20afcb1d..4ad7d06fde4a 100644 --- a/src/audit-logs/data/ghes-3.22/user.json +++ b/src/audit-logs/data/ghes-3.22/user.json @@ -341,6 +341,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_enabled", "budget_limit_type", @@ -1103,6 +1104,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1172,6 +1174,7 @@ "actor_is_bot", "created_at", "name", + "oauth_application_id", "operation_type", "policy" ], @@ -1244,6 +1247,7 @@ "created_at", "limit", "name", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" @@ -1277,6 +1281,7 @@ "user_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "name", "oauth_application_id", "operation_type" @@ -1350,7 +1355,8 @@ "created_at", "name", "oauth_application_id", - "operation_type" + "operation_type", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "Enforcing policies for GitHub Actions in your enterprise" }, @@ -1792,6 +1798,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -1938,6 +1945,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "operation_type", @@ -2539,6 +2547,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", @@ -2577,10 +2586,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -2618,6 +2629,7 @@ "alert_number", "created_at", "number", + "oauth_application_id", "operation_type", "public_repo" ], @@ -3584,6 +3596,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3620,6 +3633,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -3654,6 +3668,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "name", @@ -3726,6 +3741,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "key", @@ -4331,6 +4347,9 @@ "actor_is_bot", "application_client_id", "created_at", + "events_added", + "events_removed", + "events_unchanged", "integration", "name", "operation_type", @@ -4552,7 +4571,8 @@ "integration", "name", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/apps/maintaining-github-apps/suspending-a-github-app-installation" }, @@ -6318,8 +6338,10 @@ "user_agent", "actor_is_bot", "created_at", + "integration", "oauth_application_name", - "operation_type" + "operation_type", + "topic" ], "docs_reference_titles": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps" }, @@ -6740,6 +6762,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6775,10 +6798,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization" }, @@ -6846,6 +6871,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -6922,6 +6948,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "user_programmatic_access_name" @@ -6997,7 +7024,8 @@ "created_at", "oauth_application_id", "operation_type", - "user_programmatic_access_name" + "user_programmatic_access_name", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -7592,6 +7620,7 @@ "actor_is_bot", "created_at", "explanation", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -8626,10 +8655,12 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ], "docs_reference_titles": "/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views" }, @@ -8667,7 +8698,8 @@ "project_id", "project_kind", "project_name", - "public_project" + "public_project", + "user_programmatic_access_name" ] }, { @@ -8861,6 +8893,7 @@ "fingerprint", "key", "operation_type", + "public_repo", "read_only", "title" ], @@ -10603,6 +10636,7 @@ "user", "user_id", "user_agent", + "actor_is_agent", "actor_is_bot", "created_at", "oauth_application_id", @@ -10646,6 +10680,7 @@ "oauth_application_id", "operation_type", "public_repo", + "user_programmatic_access_name", "visibility" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository" @@ -10797,6 +10832,7 @@ "actor_is_agent", "actor_is_bot", "created_at", + "default_workflow_permissions_value", "oauth_application_id", "operation_type", "public_repo", @@ -10878,7 +10914,8 @@ "operation_type", "public_repo", "user_programmatic_access_name", - "visibility" + "visibility", + "workflow_permission_can_approve_pr_value" ], "docs_reference_titles": "/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests" }, @@ -12949,6 +12986,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ], "docs_reference_titles": "Maintaining ownership continuity of your personal account's repositories" @@ -13749,6 +13787,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "oauth_application_id", "operation_type", @@ -13922,6 +13961,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "created_at", "operation_type" ] @@ -14087,7 +14127,7 @@ }, { "action": "user.disable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14114,12 +14154,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.disable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14145,12 +14186,13 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type" ] }, { "action": "user.disable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was disabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14176,6 +14218,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -14247,7 +14290,7 @@ }, { "action": "user.enable_collaborators_only", - "description": "N/A", + "description": "The interaction limit for collaborators only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14274,12 +14317,13 @@ "user_agent", "created_at", "oauth_application_id", - "operation_type" + "operation_type", + "user_programmatic_access_name" ] }, { "action": "user.enable_contributors_only", - "description": "N/A", + "description": "The interaction limit for prior contributors only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14305,13 +14349,14 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] }, { "action": "user.enable_sockpuppet_disallowed", - "description": "N/A", + "description": "The interaction limit for existing users only was enabled for a personal account.", "docs_reference_links": "N/A", "fields": [ "@timestamp", @@ -14337,6 +14382,7 @@ "user_id", "user_agent", "created_at", + "oauth_application_id", "operation_type", "user_programmatic_access_name" ] @@ -15289,6 +15335,7 @@ "user", "user_id", "user_agent", + "actor_is_bot", "blocked_user", "created_at", "oauth_application_id", diff --git a/src/audit-logs/data/shared/entries.json b/src/audit-logs/data/shared/entries.json index 77da93f771fa..fd7f619182e6 100644 --- a/src/audit-logs/data/shared/entries.json +++ b/src/audit-logs/data/shared/entries.json @@ -1 +1 @@ -[{"action":"account.billing_date_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account.plan_change","description":"The account's plan changed.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/about-billing-for-plans","docs_reference_titles":"How GitHub billing works","fieldsIndex":1},{"action":"actions_cache.delete","description":"A GitHub Actions cache was deleted using the REST API.","docs_reference_links":"N/A","fieldsIndex":2},{"action":"advisory_credit.accept","description":"Credit was accepted for a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/editing-a-repository-security-advisory","docs_reference_titles":"Editing a repository security advisory","fieldsIndex":3},{"action":"advisory_credit.create","description":"Someone was added to the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":4},{"action":"advisory_credit.decline","description":"Credit was declined for a security advisory.","docs_reference_links":"N/A","fieldsIndex":5},{"action":"advisory_credit.destroy","description":"Someone was removed from the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":6},{"action":"artifact.destroy","description":"A workflow run artifact was manually deleted.","docs_reference_links":"N/A","fieldsIndex":7},{"action":"auto_approve_personal_access_token_requests.disable","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources. See also: personal_access_token.auto_approve_grant_requests_disabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"auto_approve_personal_access_token_requests.enable","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval. See also: personal_access_token.auto_approve_grant_requests_enabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"billing.budget_create","description":"A billing budget was created for a business or organization. Includes details about the budget limit, alerting preferences, and recipients.","docs_reference_links":"N/A","fieldsIndex":8},{"action":"billing.budget_delete","description":"A billing budget was deleted for a business or organization. Includes details about the removed budget and any alerting settings.","docs_reference_links":"N/A","fieldsIndex":9},{"action":"billing.budget_update","description":"A billing budget was updated for a business or organization. Includes details about the updated limit and alerting settings.","docs_reference_links":"N/A","fieldsIndex":10},{"action":"billing.change_billing_type","description":"The way the account pays for GitHub was changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/adding-or-editing-a-payment-method","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":11},{"action":"billing.change_email","description":"The billing email address changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/setting-your-billing-email","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":12},{"action":"billing.cost_center_create","description":"A cost center was created for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_delete","description":"A cost center was deleted from a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_resource_added","description":"A resource was added to a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_resource_removed","description":"A resource was removed from a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_update","description":"A cost center was updated for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing_customer.azure_subscription_linked","description":"Azure subscription has been linked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing_customer.azure_subscription_unlinked","description":"Azure subscription has been unlinked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing.lock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":1},{"action":"billing.overage_policy_updated","description":"The premium request paid usage policy for your GitHub account was changed.","docs_reference_links":"/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage","docs_reference_titles":"Optimizing your budget configuration","fieldsIndex":15},{"action":"billing.unlock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":16},{"action":"checks.auto_trigger_disabled","description":"Automatic creation of check suites was disabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.auto_trigger_enabled","description":"Automatic creation of check suites was enabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.delete_logs","description":"Logs in a check suite were deleted.","docs_reference_links":"N/A","fieldsIndex":18},{"action":"code_scanning.alert_appeared_in_branch","description":"Existing code scanning alerts appeared in a branch.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_fixed","description":"Code scanning alerts were fixed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_outdated","description":"Code scanning alerts were closed as outdated (all configurations they were detected in were deleted).","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":20},{"action":"code_scanning.alert_closed_by_user","description":"Code scanning alerts were manually dismissed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":21},{"action":"code_scanning.alert_closure_approved","description":"Dismissal of code scanning alerts was approved.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_denied","description":"Dismissal of code scanning alerts was denied.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_requested","description":"Dismissal of code scanning alerts was requested.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_created","description":"Code scanning alerts were seen for the first time.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reappeared","description":"Code scanning alerts that were previously fixed reappeared.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reopened_by_user","description":"Code scanning alerts that were previously dismissed were reopened.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":23},{"action":"codespaces.allow_permissions","description":"A codespace using custom permissions from its devcontainer.json file was launched.","docs_reference_links":"N/A","fieldsIndex":24},{"action":"codespaces.attempted_to_create_from_prebuild","description":"An attempt to create a codespace from a prebuild was made.","docs_reference_links":"N/A","fieldsIndex":25},{"action":"codespaces.business_enablement_updated","description":"Enterprise setting for Codespaces ownership was updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":26},{"action":"codespaces.connect","description":"Credentials for a codespace were refreshed.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.create","description":"A codespace was created","docs_reference_links":"/codespaces/developing-in-codespaces/creating-a-codespace-for-a-repository","docs_reference_titles":"Creating a codespace for a repository","fieldsIndex":27},{"action":"codespaces.destroy","description":"A user deleted a codespace.","docs_reference_links":"/codespaces/developing-in-codespaces/deleting-a-codespace","docs_reference_titles":"Deleting a codespace","fieldsIndex":28},{"action":"codespaces.export_environment","description":"A codespace was exported to a branch on GitHub.","docs_reference_links":"N/A","fieldsIndex":29},{"action":"codespaces.policy_group_created","description":"Policies were applied to codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_deleted","description":"Policies were removed from codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_updated","description":"Policies were updated for codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.restore","description":"A codespace was restored.","docs_reference_links":"N/A","fieldsIndex":30},{"action":"codespaces.start_environment","description":"A codespace was started.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.suspend_environment","description":"A codespace was stopped.","docs_reference_links":"N/A","fieldsIndex":31},{"action":"codespaces.trusted_repositories_access_update","description":"A personal account's access and security setting for Codespaces were updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":11},{"action":"commit_comment.destroy","description":"A commit comment was deleted.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"commit_comment.update","description":"A commit comment was updated.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"copilot.access_revoked","description":"Copilot access was revoked for the organization or enterprise due to its Copilot subscription ending, an issue with billing the entity, the entity being marked spammy, or the entity being suspended.","docs_reference_links":"N/A","fieldsIndex":33},{"action":"copilot.cfb_org_settings_changed","description":"Copilot feature settings were changed at the organization level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.cfb_seat_added","description":"A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_created","description":"A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.","docs_reference_links":"/copilot/overview-of-github-copilot/about-github-copilot-for-business","docs_reference_titles":"What is GitHub Copilot?","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_refreshed","description":"A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_reused","description":"A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":35},{"action":"copilot.cfb_seat_assignment_unassigned","description":"A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_cancelled","description":"A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":36},{"action":"copilot.cfb_seat_cancelled_by_staff","description":"A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":37},{"action":"copilot.cfb_seat_management_changed","description":"The seat management setting was changed at the organization level to either enable or disable Copilot access for all members of the organization, or to enable Copilot access for selected members or teams.","docs_reference_links":"N/A","fieldsIndex":38},{"action":"copilot.code_review_repository_settings_updated","description":"Copilot code review settings were updated for a repository.","docs_reference_links":"N/A","fieldsIndex":39},{"action":"copilot.content_exclusion_changed","description":"The excluded paths for GitHub Copilot were updated.","docs_reference_links":"N/A","fieldsIndex":40},{"action":"copilot.custom_instructions_created","description":"Copilot custom instructions were created for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.custom_instructions_updated","description":"Copilot custom instructions were updated for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.memory_user_opt_out","description":"A user opted out of Copilot Memory.","docs_reference_links":"N/A","fieldsIndex":42},{"action":"copilot.plan_changed","description":"The plan for GitHub Copilot was updated.","docs_reference_links":"/billing/managing-billing-for-github-copilot/about-billing-for-github-copilot","docs_reference_titles":"GitHub Copilot licenses","fieldsIndex":43},{"action":"copilot.plan_downgrade_scheduled","description":"The plan for GitHub Copilot was scheduled to be downgraded.","docs_reference_links":"N/A","fieldsIndex":44},{"action":"copilot.swe_agent_firewall_allowlist_updated","description":"Firewall allowlist for Copilot coding agent was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.swe_agent_mcp_config_updated","description":"MCP Configuration for Copilot coding agent was updated for a specific repository.","docs_reference_links":"N/A","fieldsIndex":45},{"action":"copilot.swe_agent_repo_disabled","description":"Specific repositories were disabled from using Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enabled","description":"Specific repositories were enabled to use Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enablement_updated","description":"Copilot coding agent access was updated for the organization's or user's repositories.","docs_reference_links":"N/A","fieldsIndex":47},{"action":"custom_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"custom_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_property_definition.create","description":"A new custom property definition was created.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.destroy","description":"A custom property definition was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.update","description":"A custom property definition was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":50},{"action":"custom_property_value.create","description":"A repository's custom property value was manually set for the first time.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.destroy","description":"A repository's custom property value was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.update","description":"A repository's custom property value was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":52},{"action":"dependabot_alerts.disable","description":"Dependabot alerts were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":11},{"action":"dependabot_alerts.enable","description":"Dependabot alerts were enabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_closure_request.approve","description":"Dismissal of Dependabot alerts was approved.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":54},{"action":"dependabot_closure_request.cancel","description":"Dismissal request for Dependabot alerts was canceled.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":55},{"action":"dependabot_closure_request.create","description":"Dismissal of Dependabot alerts was requested.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":56},{"action":"dependabot_closure_request.deny","description":"Dismissal of Dependabot alerts was denied.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":57},{"action":"dependabot_repository_access.default_access_level_updated","description":"The default repository access for Dependabot was updated.","docs_reference_links":"N/A","fieldsIndex":58},{"action":"dependabot_repository_access.repositories_updated","description":"The repositories that Dependabot can access were updated.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates.disable","description":"Dependabot security updates were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependabot_security_updates.enable","description":"Dependabot security updates were enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.disable","description":" Dependabot security updates were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.enable","description":"Dependabot security updates were enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph.disable","description":"The dependency graph was disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependency_graph.enable","description":"The dependency graph was enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph_new_repos.disable","description":"The dependency graph was disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependency_graph_new_repos.enable","description":"The dependency graph was enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"discussion_comment.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion_comment.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":59},{"action":"enterprise_announcement.create","description":"A global announcement banner was created for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise#creating-a-global-announcement-banner","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":60},{"action":"enterprise_announcement.destroy","description":"A global announcement banner was removed from the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":61},{"action":"enterprise_announcement.update","description":"A global announcement banner was updated for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":62},{"action":"enterprise_installation.create","description":"The GitHub App associated with a GitHub Connect connection was created.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":15},{"action":"enterprise_installation.destroy","description":"The GitHub App associated with a GitHub Connect connection was deleted.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":63},{"action":"environment.add_protection_rule","description":"A GitHub Actions deployment protection rule was created via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":64},{"action":"environment.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":65},{"action":"environment.create_actions_secret","description":"A secret was created for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":66},{"action":"environment.create_actions_variable","description":"A variable was created for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":66},{"action":"environment.delete","description":"An environment was deleted.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deleting-an-environment","docs_reference_titles":"Managing environments for deployment","fieldsIndex":67},{"action":"environment.remove_actions_secret","description":"A secret was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":68},{"action":"environment.remove_actions_variable","description":"A variable was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":68},{"action":"environment.remove_protection_rule","description":"A GitHub Actions deployment protection rule was deleted via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":69},{"action":"environment.update_actions_secret","description":"A secret was updated for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":66},{"action":"environment.update_actions_variable","description":"A variable was updated for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":66},{"action":"environment.update_protection_rule","description":"A GitHub Actions deployment protection rule was updated via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":70},{"action":"git.clone","description":"A repository was cloned. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"git.fetch","description":"Changes were fetched from a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"git.push","description":"Changes were pushed to a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"github_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":72},{"action":"github_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":16},{"action":"github_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":72},{"action":"hook.active_changed","description":"A hook's active status was updated.","docs_reference_links":"N/A","fieldsIndex":73},{"action":"hook.config_changed","description":"A hook's configuration was changed.","docs_reference_links":"N/A","fieldsIndex":74},{"action":"hook.create","description":"A new hook was added.","docs_reference_links":"/get-started/exploring-integrations/about-webhooks","docs_reference_titles":"About webhooks","fieldsIndex":75},{"action":"hook.destroy","description":"A hook was deleted.","docs_reference_links":"N/A","fieldsIndex":74},{"action":"hook.events_changed","description":"A hook's configured events were changed.","docs_reference_links":"N/A","fieldsIndex":76},{"action":"integration.create","description":"A GitHub App was created.","docs_reference_links":"N/A","fieldsIndex":77},{"action":"integration.destroy","description":"A GitHub App was deleted.","docs_reference_links":"N/A","fieldsIndex":78},{"action":"integration.generate_client_secret","description":"N/A","docs_reference_links":"N/A","fieldsIndex":79},{"action":"integration_installation.create","description":"A GitHub App was installed.","docs_reference_links":"/apps/using-github-apps/authorizing-github-apps","docs_reference_titles":"/apps/using-github-apps/authorizing-github-apps","fieldsIndex":80},{"action":"integration_installation.destroy","description":"A GitHub App was uninstalled.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":81},{"action":"integration_installation.repositories_added","description":"Repositories were added to a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":82},{"action":"integration_installation.repositories_removed","description":"Repositories were removed from a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":83},{"action":"integration_installation_request.close","description":"A request to install a GitHub App was either approved or denied by an owner, or canceled by the member who opened the request.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":84},{"action":"integration_installation_request.create","description":"A member requested that an owner install a GitHub App.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":85},{"action":"integration_installation.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":86},{"action":"integration_installation.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":86},{"action":"integration_installation.version_updated","description":"Permissions for a GitHub App were updated.","docs_reference_links":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","docs_reference_titles":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","fieldsIndex":86},{"action":"integration.manager_added","description":"A member of an enterprise or organization was added as a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","fieldsIndex":87},{"action":"integration.manager_removed","description":"A member of an enterprise or organization was removed from being a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","fieldsIndex":87},{"action":"integration.remove_client_secret","description":"A client secret for a GitHub App was removed.","docs_reference_links":"N/A","fieldsIndex":78},{"action":"integration.revoke_all_tokens","description":"All user tokens for a GitHub App were requested to be revoked.","docs_reference_links":"N/A","fieldsIndex":88},{"action":"integration.revoke_tokens","description":"Token(s) for a GitHub App were revoked.","docs_reference_links":"N/A","fieldsIndex":88},{"action":"integration.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":79},{"action":"integration.transfer","description":"Ownership of a GitHub App was transferred to another user or organization.","docs_reference_links":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","docs_reference_titles":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","fieldsIndex":89},{"action":"integration.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":88},{"action":"ip_allow_list.disable","description":"An IP allow list was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.disable_for_installed_apps","description":"An IP allow list was disabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable","description":"An IP allow list was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_for_installed_apps","description":"An IP allow list was enabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list_entry.create","description":"An IP address was added to an IP allow list.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"ip_allow_list_entry.destroy","description":"An IP address was deleted from an IP allow list.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"ip_allow_list_entry.update","description":"An IP address or its description was changed.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_comment.destroy","description":"A comment on an issue was deleted from the repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.pinned","description":"A comment on an issue was pinned to a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.unpinned","description":"A comment on an issue was unpinned from a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.update","description":"A comment on an issue (other than the initial one) changed.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_dependencies.blocked_by_add","description":"An issue was marked as blocked by another issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue_dependencies.blocked_by_remove","description":"The blocked by relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue_dependencies.blocking_add","description":"An issue was marked as blocking another issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue_dependencies.blocking_remove","description":"The blocking relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"issue.destroy","description":"An issue was deleted from the repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/deleting-an-issue","docs_reference_titles":"Deleting an issue","fieldsIndex":92},{"action":"issue.pinned","description":"An issue was pinned to a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":93},{"action":"issue.transfer","description":"An issue was transferred to another repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/transferring-an-issue-to-another-repository","docs_reference_titles":"Transferring an issue to another repository","fieldsIndex":94},{"action":"issue_type.create","description":"An issue type was created.","docs_reference_links":"N/A","fieldsIndex":95},{"action":"issue_type.destroy","description":"An issue type was deleted.","docs_reference_links":"N/A","fieldsIndex":96},{"action":"issue_type.update","description":"An issue type was updated.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"issue.unpinned","description":"An issue was unpinned from a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":93},{"action":"issues.deletes_disabled","description":"The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"issues.deletes_enabled","description":"The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"issues.deletes_policy_cleared","description":"An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"marketplace_agreement_signature.create","description":"The GitHub Marketplace Developer Agreement was signed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"marketplace_listing.approve","description":"A listing was approved for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.change_category","description":"A category for a listing for an app in GitHub Marketplace was changed.","docs_reference_links":"N/A","fieldsIndex":99},{"action":"marketplace_listing.create","description":"A listing for an app in GitHub Marketplace was created.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.delist","description":"A listing was removed from GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":100},{"action":"marketplace_listing.redraft","description":"A listing was sent back to draft state.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.reject","description":"A listing was not accepted for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"mcp_registry.allowlist_assign","description":"An MCP registry allowlist was assigned to an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":101},{"action":"mcp_registry.allowlist_remove_assignment","description":"An MCP registry allowlist assignment was removed from an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":101},{"action":"members_can_create_pages.disable","description":"The ability for members to publish GitHub Pages sites was disabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_pages.enable","description":"The ability for members to publish GitHub Pages sites was enabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.disable","description":"The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.enable","description":"The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":1},{"action":"members_can_create_public_pages.disable","description":"The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_public_pages.enable","description":"The ability for members to publish public GitHub Pages was enabled Members can publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_delete_repos.clear","description":"An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.disable","description":"The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.enable","description":"The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"members_can_view_dependency_insights.clear","description":"An enterprise owner cleared the policy setting for viewing dependency insights in any organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"members_can_view_dependency_insights.disable","description":"The ability for enterprise members to view dependency insights was disabled. Members cannot view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"members_can_view_dependency_insights.enable","description":"The ability for enterprise members to view dependency insights was enabled. Members can view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":11},{"action":"merge_queue.pull_request_dequeued","description":"A pull request was removed from a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.pull_request_queue_jump","description":"A pull request was moved ahead in a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.queue_cleared","description":"A merge queue was cleared.","docs_reference_links":"N/A","fieldsIndex":102},{"action":"merge_queue.update_settings","description":"The settings for a merge queue were updated.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"metered_billing_configuration.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"migration.create","description":"A migration file was created for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance.","docs_reference_links":"N/A","fieldsIndex":104},{"action":"migration.destroy_file","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was deleted.","docs_reference_links":"N/A","fieldsIndex":104},{"action":"migration.download","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was downloaded.","docs_reference_links":"N/A","fieldsIndex":104},{"action":"network_configuration.create","description":"A network configuration for a hosted compute service was created.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":105},{"action":"network_configuration.delete","description":"A network configuration for a hosted compute service was deleted.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":106},{"action":"network_configuration.update","description":"A network configuration for a hosted compute service was updated.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":107},{"action":"oauth_application.create","description":"An OAuth application was created.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.destroy","description":"An OAuth application was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.generate_client_secret","description":"An OAuth application's secret key was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.remove_client_secret","description":"An OAuth application's secret key was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.reset_secret","description":"The secret key for an OAuth application was reset.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":109},{"action":"oauth_application.revoke_all_tokens","description":"All user tokens for an OAuth application were requested to be revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.revoke_tokens","description":"Token(s) for an OAuth application were revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.transfer","description":"An OAuth application was transferred from one account to another.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"org.accept_business_invitation","description":"An invitation sent to an organization to join an enterprise was accepted.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":15},{"action":"org.add_billing_manager","description":"A billing manager was added to an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","fieldsIndex":15},{"action":"org.add_disallowed_two_factor_method","description":"An organization prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":110},{"action":"org.add_member","description":"A user joined an organization.","docs_reference_links":"N/A","fieldsIndex":111},{"action":"org.add_outside_collaborator","description":"An outside collaborator was added to a repository.","docs_reference_links":"N/A","fieldsIndex":112},{"action":"org.add_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":113},{"action":"org.advanced_security_disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_disabled_on_all_repos","description":"GitHub Advanced Security was disabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.advanced_security_enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_enabled_on_all_repos","description":"GitHub Advanced Security was enabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.advanced_security_entity_policy_update","description":"An enterprise owner updated the GitHub Advanced Security access policy for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":114},{"action":"org.advanced_security_policy_selected_member_disabled","description":"An enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.advanced_security_policy_selected_member_enabled","description":"An enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_disabled","description":"Third-party application access for outside collaborators was disabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests#enabling-or-disabling-integration-access-requests","docs_reference_titles":"Limiting OAuth app and GitHub App access requests and installations","fieldsIndex":0},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_enabled","description":"Third-party application access for outside collaborators was enabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","fieldsIndex":0},{"action":"org.archive","description":"The organization was archived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.audit_log_export","description":"An export of the organization audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","fieldsIndex":115},{"action":"org.audit_log_git_event_export","description":"An export of the organization's Git events was created.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","fieldsIndex":116},{"action":"org.billing_signup_error","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.block_user","description":"An organization owner blocked a user from accessing the organization's repositories.","docs_reference_links":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","fieldsIndex":117},{"action":"org.cancel_business_invitation","description":"An invitation for an organization to join an enterprise was revoked","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":118},{"action":"org.cancel_invitation","description":"An invitation sent to a user to join an organization was revoked.","docs_reference_links":"N/A","fieldsIndex":119},{"action":"org.clear_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_quality_entity_policy_update","description":"An organization owner updated the Code Quality entity policy for repositories owned by the organization.","docs_reference_links":"N/A","fieldsIndex":114},{"action":"org.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_disabled","description":"Scanning inactive repositories was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_enabled","description":"Scanning inactive repositories was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"org.codeql_disabled","description":"Code scanning using the default setup was disabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":11},{"action":"org.codeql_enabled","description":"Code scanning using the default setup was enabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":1},{"action":"org.codespaces_access_updated","description":"Access to use Codespaces on internal and private repositories was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","fieldsIndex":122},{"action":"org.codespaces_ownership_updated","description":"Ownership and payment for codespaces was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":123},{"action":"org.codespaces_team_access_allowed","description":"A team has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":124},{"action":"org.codespaces_team_access_revoked","description":"A team has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":124},{"action":"org.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to all other repositories in an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":32},{"action":"org.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to all other repositories in an organization was revoked.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":121},{"action":"org.codespaces_user_access_allowed","description":"A user has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.codespaces_user_access_revoked","description":"A user has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.config.disable_collaborators_only","description":"The interaction limit for collaborators only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":11},{"action":"org.config.disable_contributors_only","description":"The interaction limit for prior contributors only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.enable_collaborators_only","description":"The interaction limit for collaborators only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":16},{"action":"org.config.enable_contributors_only","description":"The interaction limit for prior contributors only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":16},{"action":"org.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","fieldsIndex":53},{"action":"org.confirm_business_invitation","description":"An invitation for an organization to join an enterprise was confirmed.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":125},{"action":"org.connect_usage_metrics_export","description":"Server statistics were exported for the organization.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":0},{"action":"org.create","description":"An organization was created.","docs_reference_links":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","docs_reference_titles":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","fieldsIndex":1},{"action":"org.create_actions_secret","description":"A GitHub Actions secret was created for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.create_actions_variable","description":"A GitHub Actions variable was created for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.create_integration_secret","description":"A Codespaces or Dependabot secret was created for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org_credential_authorization.deauthorize","description":"A member removed the SSO (SAML or OIDC) authorization from a credential that had access to your organization.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on","docs_reference_titles":"Authorizing a personal access token for use with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.grant","description":"A member authorized credentials for use with SAML or OIDC single sign-on.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on","docs_reference_titles":"Authenticating with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.revoke","description":"An owner revoked authorized credentials.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":129},{"action":"org.delete","description":"An organization was deleted by a user or staff.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.delete_custom_image","description":"A custom image was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":16},{"action":"org.delete_custom_image_version","description":"A custom image version was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":53},{"action":"org.disable_member_team_creation_permission","description":"Team creation was limited to owners.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":53},{"action":"org.disable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were disabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.disable_reader_discussion_creation_permission","description":"An organization owner limited discussion creation to users with at least triage permission in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.disable_saml","description":"SAML single sign-on was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":130},{"action":"org.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":15},{"action":"org.disable_two_factor_requirement","description":"A two-factor authentication requirement was disabled for the organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_disabled","description":"An organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_enabled","description":"An organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.enable_member_team_creation_permission","description":"Team creation by members was allowed.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":11},{"action":"org.enable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were enabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.enable_reader_discussion_creation_permission","description":"An organization owner allowed users with read access to create discussions in an organization","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.enable_saml","description":"SAML single sign-on was enabled for the organization.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/enabling-and-testing-saml-single-sign-on-for-your-organization","docs_reference_titles":"Enabling and testing SAML single sign-on for your organization","fieldsIndex":130},{"action":"org.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":15},{"action":"org.enable_two_factor_requirement","description":"Two-factor authentication is now required for the organization.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":11},{"action":"org.integration_manager_added","description":"An organization owner granted a member access to manage all GitHub Apps owned by an organization.","docs_reference_links":"N/A","fieldsIndex":131},{"action":"org.integration_manager_removed","description":"An organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.","docs_reference_links":"N/A","fieldsIndex":131},{"action":"org.invite_member","description":"A new user was invited to join an organization.","docs_reference_links":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","fieldsIndex":119},{"action":"org.invite_to_business","description":"An organization was invited to join an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_limit_warning","description":"An organization is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":132},{"action":"org.oauth_app_access_approved","description":"Access to an organization was granted for an OAuth App.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","fieldsIndex":133},{"action":"org.oauth_app_access_blocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.oauth_app_access_denied","description":"Access was disabled for an OAuth App that was previously approved.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","fieldsIndex":133},{"action":"org.oauth_app_access_requested","description":"An organization member requested that an owner grant an OAuth App access to an organization.","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.oauth_app_access_unblocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.rate_limited_invites","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recovery_code_failed","description":"An organization owner failed to sign into a organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":134},{"action":"org.recovery_code_used","description":"An organization owner successfully signed into an organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":15},{"action":"org.recovery_codes_downloaded","description":"An organization owner downloaded the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_generated","description":"An organization owner generated the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_printed","description":"An organization owner printed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_viewed","description":"An organization owner viewed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-an-organization","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":63},{"action":"org.remove_actions_secret","description":"A GitHub Actions secret was removed from an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":135},{"action":"org.remove_actions_variable","description":"A GitHub Actions variable was removed from an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":135},{"action":"org.remove_billing_manager","description":"A billing manager was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":53},{"action":"org.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an organization.","docs_reference_links":"N/A","fieldsIndex":110},{"action":"org.remove_integration_secret","description":"A Codespaces or Dependabot secret was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":136},{"action":"org.remove_member","description":"A member was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_outside_collaborator","description":"An outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":137},{"action":"org.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-an-organization","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":53},{"action":"org.rename","description":"An organization was renamed.","docs_reference_links":"N/A","fieldsIndex":138},{"action":"org.required_workflow_create","description":"Triggered when a required workflow is created.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_delete","description":"Triggered when a required workflow is deleted.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_update","description":"Triggered when a required workflow is updated.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.restore_member","description":"An organization member was restored.","docs_reference_links":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","fieldsIndex":1},{"action":"org.revoke_external_identity","description":"A member's linked identity was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.revoke_sso_session","description":"A member's SAML session was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.runner_group_created","description":"A self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#creating-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":139},{"action":"org.runner_group_removed","description":"A self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_renamed","description":"A self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"org.runner_group_runner_removed","description":"The REST API was used to remove a self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":142},{"action":"org.runner_group_runners_added","description":"A self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_runners_updated","description":"A runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":140},{"action":"org.runner_group_updated","description":"The configuration of a self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":139},{"action":"org.runner_group_visiblity_updated","description":"The visibility of a self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":143},{"action":"org.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":11},{"action":"org_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":16},{"action":"org_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":11},{"action":"org_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org.secret_scanning_custom_pattern_push_protection_disabled","description":"Push protection for a custom pattern for secret scanning was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org.secret_scanning_custom_pattern_push_protection_enabled","description":"Push protection for a custom pattern for secret scanning was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_custom_message_disabled","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_custom_message_enabled","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_custom_message_updated","description":"The custom message triggered by an attempted push to a push-protected repository was updated for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_disable","description":"Push protection for secret scanning was disabled.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":11},{"action":"org.secret_scanning_push_protection_enable","description":"Push protection for secret scanning was enabled.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_disable","description":"Push protection for secret scanning was disabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_enable","description":"Push protection for secret scanning was enabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":144},{"action":"org_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":145},{"action":"org.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the CodeQL pull request alerts page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"org.security_center_export_coverage","description":"A CSV export was requested on the Coverage page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.security_center_export_overview_dashboard","description":"A CSV export was requested on the Overview Dashboard page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"org.security_center_export_risk","description":"A CSV export was requested on the Risk page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"org.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"org.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":149},{"action":"org.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":16},{"action":"org.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":11},{"action":"org.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","fieldsIndex":150},{"action":"org.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":151},{"action":"org.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in an organization was changed.","docs_reference_links":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","fieldsIndex":152},{"action":"org.set_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","fieldsIndex":53},{"action":"org.set_fork_pr_workflows_policy","description":"The policy for workflows on private repository forks was changed.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":150},{"action":"org.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":53},{"action":"org.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":153},{"action":"org.transfer","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":154},{"action":"org.transfer_outgoing","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":154},{"action":"org.unarchive","description":"The organization was unarchived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.unblock_user","description":"A user was unblocked from an organization.","docs_reference_links":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","fieldsIndex":117},{"action":"org.update_actions_secret","description":"A GitHub Actions secret was updated for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.update_actions_settings","description":"An organization owner or site administrator updated GitHub Actions policy settings for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","fieldsIndex":155},{"action":"org.update_actions_variable","description":"A GitHub Actions variable was updated for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.update_custom_images_policy","description":"The enterprise updated GitHub Actions custom image policy settings for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":156},{"action":"org.update_default_repository_permission","description":"The default repository permission level for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":157},{"action":"org.update_immutable_releases_settings_policy","description":"The settings policy for immutable releases was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":158},{"action":"org.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org.update_member","description":"A person's role was changed from owner to member or member to owner.","docs_reference_links":"N/A","fieldsIndex":157},{"action":"org.update_member_repository_creation_permission","description":"The create repository permission for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":159},{"action":"org.update_member_repository_invitation_permission","description":"An organization owner changed the policy setting for organization members inviting outside collaborators to repositories.","docs_reference_links":"/organizations/managing-organization-settings/setting-permissions-for-adding-outside-collaborators","docs_reference_titles":"Setting permissions for adding outside collaborators","fieldsIndex":160},{"action":"org.update_new_repository_default_branch_setting","description":"The name of the default branch was changed for new repositories in the organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.update_repo_self_hosted_runners_policy","description":"The repository self-hosted runners policy was updated","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","fieldsIndex":161},{"action":"org.update_saml_provider_settings","description":"An organization's SAML provider settings were updated.","docs_reference_links":"N/A","fieldsIndex":130},{"action":"org.update_terms_of_service","description":"An organization changed between the Standard Terms of Service and the GitHub Customer Agreement.","docs_reference_links":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","docs_reference_titles":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","fieldsIndex":11},{"action":"organization_custom_property_value.create","description":"An organization's custom property value was manually set for the first time.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":162},{"action":"organization_custom_property_value.destroy","description":"An organization's custom property value was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":162},{"action":"organization_default_label.create","description":"A default label was created for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","fieldsIndex":1},{"action":"organization_default_label.destroy","description":"A default label was deleted for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","fieldsIndex":15},{"action":"organization_default_label.update","description":"A default label was edited for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","fieldsIndex":15},{"action":"organization_domain.approve","description":"A domain was approved for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","fieldsIndex":163},{"action":"organization_domain.create","description":"A domain was added to an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":163},{"action":"organization_domain.destroy","description":"A domain was removed from an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","fieldsIndex":163},{"action":"organization_domain.verify","description":"A domain was verified for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":163},{"action":"organization_moderators.add_team","description":"N/A","docs_reference_links":"N/A","fieldsIndex":124},{"action":"organization_moderators.add_user","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_moderators.remove_team","description":"N/A","docs_reference_links":"N/A","fieldsIndex":124},{"action":"organization_moderators.remove_user","description":"N/A","docs_reference_links":"N/A","fieldsIndex":53},{"action":"organization_projects_change.clear","description":"An enterprise owner cleared the policy setting for organization-wide project boards in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":11},{"action":"organization_projects_change.disable","description":"Organization projects were disabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_projects_change.enable","description":"Organization projects were enabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_role.assign","description":"An organization role was assigned to a user or team.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":164},{"action":"organization_role.create","description":"A custom organization role was created in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":165},{"action":"organization_role.destroy","description":"A custom organization role was deleted in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":166},{"action":"organization_role.revoke","description":"A user or team was unassigned an organization role.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":164},{"action":"organization_role.update","description":"A custom organization role was edited in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":167},{"action":"organization_wide_project_base_role.update","description":"An organization's default project base role was updated.","docs_reference_links":"N/A","fieldsIndex":168},{"action":"packages.package_deleted","description":"An entire package was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":169},{"action":"packages.package_published","description":"A package was published or republished to an organization.","docs_reference_links":"N/A","fieldsIndex":170},{"action":"packages.package_version_deleted","description":"A specific package version was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":171},{"action":"packages.package_version_published","description":"A specific package version was published or republished to a package.","docs_reference_links":"N/A","fieldsIndex":172},{"action":"pages_protected_domain.create","description":"A GitHub Pages verified domain was created for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":173},{"action":"pages_protected_domain.delete","description":"A GitHub Pages verified domain was deleted from an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":173},{"action":"pages_protected_domain.verify","description":"A GitHub Pages domain was verified for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":173},{"action":"payment_method.create","description":"A new payment method was added, such as a new credit card or PayPal account.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.remove","description":"A payment method was removed.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.update","description":"An existing payment method was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_granted","description":"A fine-grained personal access token was granted access to resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":174},{"action":"personal_access_token.access_restriction_disabled","description":"The configured restriction for access to resources via personal access tokens was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_restriction_enabled","description":"The configured restriction for access to resources via personal access tokens was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_revoked","description":"A fine-grained personal access token was revoked. The token can still read public organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","fieldsIndex":175},{"action":"personal_access_token.auto_approve_grant_requests_disabled","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_enabled","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.expiration_limit_set","description":"A personal access token expiration limit was set.","docs_reference_links":"N/A","fieldsIndex":176},{"action":"personal_access_token.expiration_limit_unset","description":"A personal access token expiration limit was unset.","docs_reference_links":"N/A","fieldsIndex":177},{"action":"personal_access_token.request_cancelled","description":"A pending request for a fine-grained personal access token to access organization resources was canceled.","docs_reference_links":"N/A","fieldsIndex":178},{"action":"personal_access_token.request_created","description":"Triggered when a fine-grained personal access token was created to access organization resources and the organization requires approval before the token can access organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":179},{"action":"personal_access_token.request_denied","description":"A request for a fine-grained personal access token to access organization resources was denied.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":180},{"action":"prebuild_configuration.create","description":"A GitHub Codespaces prebuild configuration for a repository was created.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"prebuild_configuration.destroy","description":"A GitHub Codespaces prebuild configuration for a repository was deleted.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"prebuild_configuration.run_triggered","description":"A user initiated a run of a GitHub Codespaces prebuild configuration for a repository branch.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"prebuild_configuration.update","description":"A GitHub Codespaces prebuild configuration for a repository was edited.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":181},{"action":"premium_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"premium_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"premium_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"private_repository_forking.clear","description":"An enterprise owner cleared the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"private_repository_forking.disable","description":"An enterprise owner disabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are never allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"private_repository_forking.enable","description":"An enterprise owner enabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are always allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":182},{"action":"private_vulnerability_reporting.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"profile_picture.update","description":"A profile picture was updated.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile","docs_reference_titles":"Personalize your profile","fieldsIndex":183},{"action":"project.access","description":"A project board visibility was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project_base_role.update","description":"A project's base role was updated.","docs_reference_links":"N/A","fieldsIndex":184},{"action":"project.close","description":"A project board was closed.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/closing-a-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":185},{"action":"project_collaborator.add","description":"A collaborator was added to a project.","docs_reference_links":"N/A","fieldsIndex":186},{"action":"project_collaborator.remove","description":"A collaborator was removed from a project.","docs_reference_links":"N/A","fieldsIndex":186},{"action":"project_collaborator.update","description":"A project collaborator's permission level was changed.","docs_reference_links":"N/A","fieldsIndex":186},{"action":"project.create","description":"A project board was created.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project.delete","description":"A project board was deleted.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project_field.create","description":"A field was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields","fieldsIndex":53},{"action":"project_field.delete","description":"A field was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","fieldsIndex":188},{"action":"project.link","description":"A repository was linked to a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.open","description":"A project board was reopened.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/reopening-a-closed-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":185},{"action":"project.rename","description":"A project board was renamed.","docs_reference_links":"N/A","fieldsIndex":189},{"action":"project.unlink","description":"A repository was unlinked from a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.update_org_permission","description":"The project's base-level permission for all organization members was changed or removed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"project.update_team_permission","description":"A team's project board permission level was changed or when a team was added or removed from a project board.","docs_reference_links":"N/A","fieldsIndex":190},{"action":"project.update_user_permission","description":"A user was added to or removed from a project board or had their permission level changed.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project_view.create","description":"A view was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":53},{"action":"project_view.delete","description":"A view was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":11},{"action":"project.visibility_private","description":"A project's visibility was changed from public to private.","docs_reference_links":"N/A","fieldsIndex":191},{"action":"project.visibility_public","description":"A project's visibility was changed from private to public.","docs_reference_links":"N/A","fieldsIndex":192},{"action":"protected_branch.authorized_users_teams","description":"The users, teams, or integrations allowed to bypass a branch protection were changed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","fieldsIndex":193},{"action":"protected_branch.branch_allowances","description":"A protected branch allowance was given to a specific user, team or integration.","docs_reference_links":"N/A","fieldsIndex":194},{"action":"protected_branch.create","description":"Branch protection was enabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.destroy","description":"Branch protection was disabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.dismiss_stale_reviews","description":"Enforcement of dismissing stale pull requests was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":196},{"action":"protected_branch.dismissal_restricted_users_teams","description":"Enforcement of restricting users and/or teams who can dismiss reviews was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":197},{"action":"protected_branch.policy_override","description":"A branch protection requirement was overridden by a repository administrator.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.rejected_ref_update","description":"A branch update attempt was rejected.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.update_admin_enforced","description":"Branch protection was enforced for repository administrators.","docs_reference_links":"N/A","fieldsIndex":199},{"action":"protected_branch.update_allow_deletions_enforcement_level","description":"Branch deletion was enabled or disabled for a protected branch.","docs_reference_links":"N/A","fieldsIndex":200},{"action":"protected_branch.update_allow_force_pushes_enforcement_level","description":"Force pushes were enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":201},{"action":"protected_branch.update_ignore_approvals_from_contributors","description":"Ignoring of approvals from contributors to a pull request was enabled or disabled for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":202},{"action":"protected_branch.update_linear_history_requirement_enforcement_level","description":"Required linear commit history was enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":203},{"action":"protected_branch.update_lock_allows_fetch_and_merge","description":"Fork syncing was enabled or disabled for a read-only branch","docs_reference_links":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":204},{"action":"protected_branch.update_lock_branch_enforcement_level","description":"The enforcement of a branch lock was updated.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":205},{"action":"protected_branch.update_merge_queue_enforcement_level","description":"Enforcement of the merge queue was modified for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","fieldsIndex":206},{"action":"protected_branch.update_name","description":"A branch name pattern was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":207},{"action":"protected_branch.update_pull_request_reviews_enforcement_level","description":"Enforcement of required pull request reviews was updated for a branch. Can be 0 (deactivated), 1 (non-admins), or 2 (everyone).","docs_reference_links":"N/A","fieldsIndex":208},{"action":"protected_branch.update_require_code_owner_review","description":"Enforcement of required code owner review was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":209},{"action":"protected_branch.update_require_last_push_approval","description":"Someone other than the person who pushed the last code-modifying commit to the branch must approve pull requests for the branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","fieldsIndex":210},{"action":"protected_branch.update_required_approving_review_count","description":"Enforcement of the required number of approvals before merging was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":211},{"action":"protected_branch.update_required_status_checks_enforcement_level","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":212},{"action":"protected_branch.update_signature_requirement_enforcement_level","description":"Enforcement of required commit signing was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":213},{"action":"protected_branch.update_strict_required_status_checks_policy","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":214},{"action":"public_key.create","description":"An SSH key was added to a user account or a deploy key was added to a repository.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","fieldsIndex":215},{"action":"public_key.delete","description":"An SSH key was removed from a user account or a deploy key was removed from a repository.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","fieldsIndex":216},{"action":"public_key.unverification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":217},{"action":"public_key.unverify","description":"A user account's SSH key or a repository's deploy key was unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":218},{"action":"public_key.update","description":"A user account's SSH key or a repository's deploy key was updated.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verify","description":"A user account's SSH key or a repository's deploy key was verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"pull_request.close","description":"A pull request was closed without being merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/closing-a-pull-request","docs_reference_titles":"Closing a pull request","fieldsIndex":219},{"action":"pull_request.converted_to_draft","description":"A pull request was converted to a draft.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#converting-a-pull-request-to-a-draft","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.create","description":"A pull request was created.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request","docs_reference_titles":"Creating a pull request","fieldsIndex":221},{"action":"pull_request.create_review_request","description":"A review was requested on a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.in_progress","description":"A pull request was marked as in progress.","docs_reference_links":"N/A","fieldsIndex":223},{"action":"pull_request.indirect_merge","description":"A pull request was considered merged because the pull request's commits were merged into the target branch.","docs_reference_links":"N/A","fieldsIndex":219},{"action":"pull_request.merge","description":"A pull request was merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/merging-a-pull-request","docs_reference_titles":"Merging a pull request","fieldsIndex":219},{"action":"pull_request.ready_for_review","description":"A pull request was marked as ready for review.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#marking-a-pull-request-as-ready-for-review","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.rebase","description":"A pull request was rebased.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request.remove_review_request","description":"A review request was removed from a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.reopen","description":"A pull request was reopened after previously being closed.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request_review_comment.create","description":"A review comment was added to a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":224},{"action":"pull_request_review_comment.delete","description":"A review comment on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":225},{"action":"pull_request_review_comment.update","description":"A review comment on a pull request was changed.","docs_reference_links":"N/A","fieldsIndex":226},{"action":"pull_request_review.delete","description":"A review on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":227},{"action":"pull_request_review.dismiss","description":"A review on a pull request was dismissed.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/dismissing-a-pull-request-review","docs_reference_titles":"Dismissing a pull request review","fieldsIndex":227},{"action":"pull_request_review.submit","description":"A review on a pull request was submitted.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-proposed-changes-in-a-pull-request#submitting-your-review","docs_reference_titles":"Reviewing proposed changes in a pull request","fieldsIndex":227},{"action":"repo.access","description":"The visibility of a repository changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","fieldsIndex":228},{"action":"repo.actions_enabled","description":"GitHub Actions was enabled for a repository.","docs_reference_links":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","docs_reference_titles":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","fieldsIndex":229},{"action":"repo.add_member","description":"A collaborator was added to a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/inviting-collaborators-to-a-personal-repository","docs_reference_titles":"Inviting collaborators to a personal repository","fieldsIndex":230},{"action":"repo.add_topic","description":"A topic was added to a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","fieldsIndex":231},{"action":"repo.advanced_security_disabled","description":"GitHub Advanced Security was disabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.advanced_security_enabled","description":"GitHub Advanced Security was enabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.archived","description":"A repository was archived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.change_merge_setting","description":"Pull request merge options were changed for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_analysis_deleted","description":"Code scanning analysis for a repository was deleted.","docs_reference_links":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","docs_reference_titles":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","fieldsIndex":235},{"action":"repo.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_configuration_for_branch_deleted","description":"A code scanning configuration for a branch of a repository was deleted.","docs_reference_links":"/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch","docs_reference_titles":"Resolving code scanning alerts","fieldsIndex":236},{"action":"repo.code_scanning_delegated_alert_dismissal_disabled","description":"Prevention of direct alert dismissal for code scanning was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_scanning_delegated_alert_dismissal_enabled","description":"Prevention of direct alert dismissal for code scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.codeql_disabled","description":"Code scanning using the default setup was disabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":231},{"action":"repo.codeql_enabled","description":"Code scanning using the default setup was enabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":237},{"action":"repo.codeql_updated","description":"Code scanning using the default setup was updated for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":237},{"action":"repo.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to this repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to this repository was revoked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.config.disable_collaborators_only","description":"The interaction limit for collaborators only was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":238},{"action":"repo.config.disable_contributors_only","description":"The interaction limit for prior contributors only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":239},{"action":"repo.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":238},{"action":"repo.config.enable_collaborators_only","description":"The interaction limit for collaborators only was enabled in a repository Users that are not collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":32},{"action":"repo.config.enable_contributors_only","description":"The interaction limit for prior contributors only was enabled in a repository Users that are not prior contributors, collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":104},{"action":"repo.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users was enabled in a repository New users aren't able to interact with a repository for a set duration Existing users of the repository, contributors, collaborators or organization members are able to interact with a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":18},{"action":"repo.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","fieldsIndex":32},{"action":"repo.create","description":"A repository was created.","docs_reference_links":"/repositories/creating-and-managing-repositories/creating-a-new-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/creating-a-new-repository","fieldsIndex":240},{"action":"repo.create_actions_secret","description":"A GitHub Actions secret was created for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.create_actions_variable","description":"A GitHub Actions variable was created for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.create_integration_secret","description":"A Codespaces or Dependabot secret was created for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.destroy","description":"A repository was deleted.","docs_reference_links":"/repositories/creating-and-managing-repositories/deleting-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/deleting-a-repository","fieldsIndex":240},{"action":"repo.download_zip","description":"A source code archive of a repository was downloaded as a ZIP file.","docs_reference_links":"/repositories/working-with-files/using-files/downloading-source-code-archives","docs_reference_titles":"/repositories/working-with-files/using-files/downloading-source-code-archives","fieldsIndex":233},{"action":"repo.immutable_releases_settings_disabled","description":"The setting for immutable releases was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.immutable_releases_settings_enabled","description":"The setting for immutable releases was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_cname","description":"A GitHub Pages custom domain was modified in a repository.","docs_reference_links":"N/A","fieldsIndex":243},{"action":"repo.pages_create","description":"A GitHub Pages site was created.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_destroy","description":"A GitHub Pages site was deleted.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_disabled","description":"HTTPS redirects were disabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_enabled","description":"HTTPS redirects were enabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_private","description":"A GitHub Pages site visibility was changed to private.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_public","description":"A GitHub Pages site visibility was changed to public.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_soft_delete","description":"A GitHub Pages site was soft-deleted because its owner's plan changed.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.pages_soft_delete_restore","description":"A GitHub Pages site that was previously soft-deleted was restored.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_source","description":"A GitHub Pages source was modified.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":245},{"action":"repo.remove_actions_secret","description":"A GitHub Actions secret was deleted for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":246},{"action":"repo.remove_actions_variable","description":"A GitHub Actions variable was deleted for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":246},{"action":"repo.remove_integration_secret","description":"A Codespaces or Dependabot secret was deleted for a repository.","docs_reference_links":"N/A","fieldsIndex":247},{"action":"repo.remove_member","description":"A collaborator was removed from a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/removing-a-collaborator-from-a-personal-repository","docs_reference_titles":"Removing a collaborator from a personal repository","fieldsIndex":233},{"action":"repo.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":32},{"action":"repo.remove_topic","description":"A topic was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repo.rename","description":"A repository was renamed.","docs_reference_links":"/repositories/creating-and-managing-repositories/renaming-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/renaming-a-repository","fieldsIndex":248},{"action":"repo.rename_branch","description":"A branch was renamed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","fieldsIndex":249},{"action":"repo.restore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"repo.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"repo.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":149},{"action":"repo.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":250},{"action":"repo.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":251},{"action":"repo.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","fieldsIndex":252},{"action":"repo.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","fieldsIndex":252},{"action":"repo.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","fieldsIndex":253},{"action":"repo.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","fieldsIndex":233},{"action":"repo.set_fork_pr_workflows_policy","description":"Triggered when the policy for workflows on private repository forks is changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","fieldsIndex":252},{"action":"repo.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":233},{"action":"repo.staff_unlock","description":"An enterprise owner or GitHub staff (with permission from a repository administrator) temporarily unlocked the repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.transfer","description":"A user accepted a request to receive a transferred repository.","docs_reference_links":"/repositories/creating-and-managing-repositories/transferring-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/transferring-a-repository","fieldsIndex":254},{"action":"repo.transfer_outgoing","description":"A repository was transferred to another repository network.","docs_reference_links":"N/A","fieldsIndex":255},{"action":"repo.transfer_start","description":"A user sent a request to transfer a repository to another user or organization.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.unarchived","description":"A repository was unarchived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.update_actions_access_settings","description":"The setting to control how a repository was used by GitHub Actions workflows in other repositories was changed.","docs_reference_links":"N/A","fieldsIndex":256},{"action":"repo.update_actions_secret","description":"A GitHub Actions secret was updated for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.update_actions_settings","description":"A repository administrator changed GitHub Actions policy settings for a repository.","docs_reference_links":"N/A","fieldsIndex":257},{"action":"repo.update_actions_variable","description":"A GitHub Actions variable was updated for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.update_default_branch","description":"The default branch for a repository was changed.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.update_member","description":"A user's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":258},{"action":"repository_advisory.close","description":"Someone closed a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/about-repository-security-advisories","docs_reference_titles":"Repository security advisories","fieldsIndex":32},{"action":"repository_advisory.cve_request","description":"Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.github_broadcast","description":"GitHub made a security advisory public in the GitHub Advisory Database.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"repository_advisory.github_withdraw","description":"GitHub withdrew a security advisory that was published in error.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"repository_advisory.open","description":"Someone opened a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.publish","description":"Someone published a security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.reopen","description":"Someone reopened as draft security advisory.","docs_reference_links":"N/A","fieldsIndex":259},{"action":"repository_advisory.update","description":"Someone edited a draft or published security advisory.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"repository_branch_protection_evaluation.disable","description":"Branch protections were disabled for the repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_branch_protection_evaluation.enable","description":"Branch protections were enabled for this repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_code_security.disable","description":"Code security was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_code_security.enable","description":"Code security was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_content_analysis.disable","description":"Data use settings were disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_content_analysis.enable","description":"Data use settings were enabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_dependency_graph_autosubmit.disable","description":"Automatic dependency submission was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph_autosubmit.enable","description":"Automatic dependency submission was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph.disable","description":"The dependency graph was disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea, tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":231},{"action":"repository_dependency_graph.enable","description":"The dependency graph was enabled for a private repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_updates_self_hosted.disabled","description":"Dependency updates on self-hosted runners was disabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":238},{"action":"repository_dependency_updates_self_hosted.enabled","description":"Dependency updates on self-hosted runners was enabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":231},{"action":"repository_image.create","description":"An image to represent a repository was uploaded.","docs_reference_links":"N/A","fieldsIndex":260},{"action":"repository_image.destroy","description":"An image to represent a repository was deleted.","docs_reference_links":"N/A","fieldsIndex":260},{"action":"repository_invitation.accept","description":"An invitation to join a repository was accepted.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_invitation.cancel","description":"An invitation to join a repository was canceled.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_invitation.create","description":"An invitation to join a repository was sent.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_invitation.reject","description":"An invitation to join a repository was declined.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_limit.reached","description":"An organization has reached their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":263},{"action":"repository_limit.warning","description":"An organization is approaching their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":264},{"action":"repository_malware_alerts.disable","description":"Dependabot malware alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_malware_alerts.enable","description":"Dependabot malware alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_projects_change.clear","description":"The repository projects policy was removed for an organization, or all organizations in the enterprise Organization owners can now control their repository projects settings.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":0},{"action":"repository_projects_change.disable","description":"Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_projects_change.enable","description":"Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_ruleset.create","description":"A repository ruleset was created.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","fieldsIndex":265},{"action":"repository_ruleset.destroy","description":"A repository ruleset was deleted.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","fieldsIndex":265},{"action":"repository_ruleset.update","description":"A repository ruleset was edited.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","fieldsIndex":266},{"action":"repository_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":104},{"action":"repository_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":234},{"action":"repository_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":104},{"action":"repository_secret_scanning.disable","description":"Secret scanning was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":231},{"action":"repository_secret_scanning.enable","description":"Secret scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.disabled","description":"Metadata for secret scanning alerts has been disabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.enabled","description":"Metadata for secret scanning alerts has been enabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":104},{"action":"repository_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":102},{"action":"repository_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":234},{"action":"repository_secret_scanning_push_protection.disable","description":"Secret scanning push protection was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection.enable","description":"Secret scanning push protection was enabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_security_configuration.applied","description":"A code security configuration was applied to a repository.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_configuration.failed","description":"A code security configuration failed to attach to the repository.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_configuration.removed","description":"A code security configuration was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_configuration.removed_by_settings_change","description":"A code security configuration was removed due to a change in repository or enterprise settings.","docs_reference_links":"N/A","fieldsIndex":267},{"action":"repository_security_updates.disable","description":"Dependabot security updates was disabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_security_updates.enable","description":"Dependabot security updates was enabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_visibility_change.clear","description":"The repository visibility change setting was cleared for an organization or enterprise.","docs_reference_links":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-changes-to-repository-visibility","docs_reference_titles":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"repository_visibility_change.disable","description":"The ability for enterprise members to update a repository's visibility was disabled. Members are unable to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"repository_visibility_change.enable","description":"The ability for enterprise members to update a repository's visibility was enabled. Members are able to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"repository_vulnerability_alert.assign","description":"A user was assigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_vulnerability_alert.auto_dismiss","description":"A Dependabot alert was automatically dismissed because its metadata matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":269},{"action":"repository_vulnerability_alert.auto_reopen","description":"A previously auto-dismissed Dependabot alert was automatically reopened because its metadata no longer matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":269},{"action":"repository_vulnerability_alert.create","description":"GitHub created a Dependabot alert because the repository uses a vulnerable dependency.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":270},{"action":"repository_vulnerability_alert.dismiss","description":"A Dependabot alert was manually dismissed.","docs_reference_links":"N/A","fieldsIndex":271},{"action":"repository_vulnerability_alert.reintroduce","description":"A Dependabot alert was automatically reopened because the repository resumed use of a vulnerable dependency.","docs_reference_links":"N/A","fieldsIndex":270},{"action":"repository_vulnerability_alert.reopen","description":"A Dependabot alert was manually reopened.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_vulnerability_alert.resolve","description":"Changes were pushed to update and resolve a Dependabot alert in a project dependency.","docs_reference_links":"N/A","fieldsIndex":270},{"action":"repository_vulnerability_alert.unassign","description":"A user was unassigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":272},{"action":"repository_vulnerability_alert.withdraw","description":"A Dependabot alert was withdrawn.","docs_reference_links":"N/A","fieldsIndex":273},{"action":"repository_vulnerability_alerts.authorized_users_teams","description":"The list of people or teams authorized to receive Dependabot alerts for the repository was updated.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","fieldsIndex":234},{"action":"repository_vulnerability_alerts_auto_dismissal.disable","description":"Automatic dismissal of low-impact Dependabot alerts was disabled for the repository.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"repository_vulnerability_alerts_auto_dismissal.enable","description":"Automatic dismissal of low-impact Dependabot alerts was enabled for the repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_vulnerability_alerts.disable","description":"Dependabot alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_vulnerability_alerts.enable","description":"Dependabot alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"required_status_check.create","description":"A status check was marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":274},{"action":"required_status_check.destroy","description":"A status check was no longer marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":274},{"action":"restrict_notification_delivery.disable","description":"Email notification restrictions for an organization or enterprise were disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":275},{"action":"restrict_notification_delivery.enable","description":"Email notification restrictions for an organization or enterprise were enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":276},{"action":"role.create","description":"A new custom repository role was created.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":277},{"action":"role.destroy","description":"A custom repository role was deleted.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":278},{"action":"role.update","description":"A custom repository role was edited.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":279},{"action":"secret_scanning_alert.assign","description":"A user was assigned to a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.create","description":"GitHub detected a secret and created a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.delete","description":"A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":281},{"action":"secret_scanning_alert.public_leak","description":"A secret scanning alert was leaked in a public repo.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.reopen","description":"A secret scanning alert was reopened.","docs_reference_links":"N/A","fieldsIndex":282},{"action":"secret_scanning_alert.report","description":"A leaked secret was reported to the secret's provider by secret scanning.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning/resolving-alerts","docs_reference_titles":"Resolving alerts from secret scanning","fieldsIndex":283},{"action":"secret_scanning_alert.resolve","description":"A secret scanning alert was resolved.","docs_reference_links":"N/A","fieldsIndex":282},{"action":"secret_scanning_alert.revoke","description":"A secret scanning alert was revoked.","docs_reference_links":"N/A","fieldsIndex":284},{"action":"secret_scanning_alert.unassign","description":"A user was unassigned from a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":280},{"action":"secret_scanning_alert.validate","description":"A secret scanning alert was validated.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":285},{"action":"secret_scanning_closure_request.approve","description":"A request to close a secret scanning alert was approved by a user.","docs_reference_links":"N/A","fieldsIndex":286},{"action":"secret_scanning_closure_request.cancel","description":"N/A","docs_reference_links":"A reqeust to close a secret scanning alert was canceled by a user.","docs_reference_titles":"A, reqeust, to, close, a, secret, scanning, alert, was, canceled, by, a, user.","fieldsIndex":56},{"action":"secret_scanning_closure_request.create","description":"N/A","docs_reference_links":"A user requested to close a secret scanning alert.","docs_reference_titles":"A, user, requested, to, close, a, secret, scanning, alert.","fieldsIndex":287},{"action":"secret_scanning_closure_request.deny","description":"A request to close a secret scanning alert was denied by a user.","docs_reference_links":"N/A","fieldsIndex":286},{"action":"secret_scanning.disable","description":"Secret scanning was disabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":11},{"action":"secret_scanning.enable","description":"Secret scanning was enabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.disable","description":"Secret scanning was disabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.enable","description":"Secret scanning was enabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_push_protection.bypass","description":"Triggered when a user bypasses the push protection on a secret detected by secret scanning.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#bypassing-push-protection-for-a-secret","docs_reference_titles":"Push protection","fieldsIndex":288},{"action":"secret_scanning_push_protection_request.approve","description":"A request to bypass secret scanning push protection was approved by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":289},{"action":"secret_scanning_push_protection_request.cancel","description":"A user canceled a request to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":290},{"action":"secret_scanning_push_protection_request.complete","description":"A user pushed a commit containing a secret for which there is an approved secret scanning push protection bypass request.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":290},{"action":"secret_scanning_push_protection_request.deny","description":"A request to bypass secret scanning push protection was denied by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":291},{"action":"secret_scanning_push_protection_request.request","description":"A user requested to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":292},{"action":"secret_scanning_scan.completed","description":"A secret scanning scan has completed on this repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":293},{"action":"security_configuration.create","description":"A security configuration was created","docs_reference_links":"N/A","fieldsIndex":294},{"action":"security_configuration_default.delete","description":"A default security configuration setting for new repositories was removed.","docs_reference_links":"N/A","fieldsIndex":295},{"action":"security_configuration_default.update","description":"A default security configuration setting for new repositories was updated.","docs_reference_links":"N/A","fieldsIndex":295},{"action":"security_configuration.delete","description":"A security configuration was deleted","docs_reference_links":"N/A","fieldsIndex":294},{"action":"security_configuration_policy.update","description":"A security configuration policy was updated","docs_reference_links":"N/A","fieldsIndex":296},{"action":"security_configuration.update","description":"A security configuration was updated","docs_reference_links":"N/A","fieldsIndex":297},{"action":"sponsors.agreement_sign","description":"A GitHub Sponsors agreement was signed on behalf of an organization.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"sponsors.custom_amount_settings_change","description":"Custom amounts for GitHub Sponsors were enabled or disabled, or the suggested custom amount was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":298},{"action":"sponsors.fiscal_host_change","description":"The fiscal host for a GitHub Sponsors listing was updated.","docs_reference_links":"N/A","fieldsIndex":299},{"action":"sponsors.invoiced_agreement_sign","description":"An agreement for invoiced billing for GitHub Sponsors was signed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","fieldsIndex":0},{"action":"sponsors.repo_funding_links_file_action","description":"The FUNDING file in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","fieldsIndex":300},{"action":"sponsors.sponsor_sponsorship_cancel","description":"A sponsorship was canceled.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Downgrading a sponsorship","fieldsIndex":301},{"action":"sponsors.sponsor_sponsorship_create","description":"A sponsorship was created, by sponsoring an account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":302},{"action":"sponsors.sponsor_sponsorship_payment_complete","description":"After you sponsor an account and a payment has been processed, the sponsorship payment was marked as complete.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":302},{"action":"sponsors.sponsor_sponsorship_preference_change","description":"The option to receive email updates from a sponsored account was changed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","fieldsIndex":301},{"action":"sponsors.sponsor_sponsorship_tier_change","description":"A sponsorship was upgraded or downgraded.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/upgrading-a-sponsorship, /billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Upgrading a sponsorship, Downgrading a sponsorship","fieldsIndex":302},{"action":"sponsors.sponsored_developer_approve","description":"A GitHub Sponsors account was approved.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":299},{"action":"sponsors.sponsored_developer_create","description":"A GitHub Sponsors account was created.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":303},{"action":"sponsors.sponsored_developer_disable","description":"A GitHub Sponsors account was disabled.","docs_reference_links":"N/A","fieldsIndex":299},{"action":"sponsors.sponsored_developer_profile_update","description":"The profile for GitHub Sponsors account was edited.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","fieldsIndex":303},{"action":"sponsors.sponsored_developer_redraft","description":"A GitHub Sponsors account was returned to draft state from approved state.","docs_reference_links":"N/A","fieldsIndex":299},{"action":"sponsors.sponsored_developer_request_approval","description":"An application for GitHub Sponsors was submitted for approval.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":299},{"action":"sponsors.sponsored_developer_tier_description_update","description":"The description for a sponsorship tier was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":304},{"action":"sponsors.sponsors_patreon_user_create","description":"A Patreon account was linked to a user account for use with GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","fieldsIndex":305},{"action":"sponsors.sponsors_patreon_user_destroy","description":"A Patreon account for use with GitHub Sponsors was unlinked from a user account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/unlinking-your-patreon-account-from-your-github-account","docs_reference_titles":"Unlinking your Patreon account from GitHub","fieldsIndex":305},{"action":"sponsors.update_tier_repository","description":"A GitHub Sponsors tier changed access for a repository.","docs_reference_links":"N/A","fieldsIndex":304},{"action":"sponsors.update_tier_welcome_message","description":"The welcome message for a GitHub Sponsors tier for an organization was updated.","docs_reference_links":"N/A","fieldsIndex":304},{"action":"sponsors.withdraw_agreement_signature","description":"A signature was withdrawn from a GitHub Sponsors agreement that applies to an organization.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"ssh_certificate_authority.create","description":"An SSH certificate authority for an organization or enterprise was created.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":306},{"action":"ssh_certificate_authority.destroy","description":"An SSH certificate authority for an organization or enterprise was deleted.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":306},{"action":"ssh_certificate_requirement.disable","description":"The requirement for members to use SSH certificates to access an organization resources was disabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"ssh_certificate_requirement.enable","description":"The requirement for members to use SSH certificates to access an organization resources was enabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"staff.dependabot_debug_credentials_generated","description":"Dependabot encrypted config was read.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"staff.set_domain_token_expiration","description":"The verification code expiry time for an organization or enterprise domain was set.","docs_reference_links":"N/A","fieldsIndex":307},{"action":"staff.unverify_domain","description":"An organization or enterprise domain was unverified.","docs_reference_links":"N/A","fieldsIndex":308},{"action":"staff.verify_domain","description":"An organization or enterprise domain was verified.","docs_reference_links":"N/A","fieldsIndex":309},{"action":"sub_issues.parent_issue_add","description":"A parent issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"sub_issues.parent_issue_remove","description":"A parent issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"sub_issues.sub_issue_add","description":"A sub-issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"sub_issues.sub_issue_remove","description":"A sub-issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":91},{"action":"team.add_member","description":"A member of an organization was added to a team.","docs_reference_links":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","fieldsIndex":310},{"action":"team.add_repository","description":"A team was given access and permissions to a repository.","docs_reference_links":"N/A","fieldsIndex":311},{"action":"team.add_to_organization","description":"A team was added to an organization.","docs_reference_links":"N/A","fieldsIndex":312},{"action":"team.change_parent_team","description":"A child team was created or a child team's parent was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","docs_reference_titles":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","fieldsIndex":310},{"action":"team.change_privacy","description":"A team's privacy level was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/changing-team-visibility","docs_reference_titles":"/organizations/organizing-members-into-teams/changing-team-visibility","fieldsIndex":310},{"action":"team.create","description":"A new team is created.","docs_reference_links":"N/A","fieldsIndex":310},{"action":"team.demote_maintainer","description":"A user was demoted from a team maintainer to a team member.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","fieldsIndex":310},{"action":"team.destroy","description":"A team was deleted.","docs_reference_links":"N/A","fieldsIndex":310},{"action":"team_group_mapping.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team_group_mapping.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team_group_mapping.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team.members_limit_warning","description":"A team is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.organization_assignments_limit_reached","description":"A team has reached its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.organization_assignments_limit_warning","description":"A team is approaching its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.promote_maintainer","description":"A user was promoted from a team member to a team maintainer.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","fieldsIndex":310},{"action":"team.remove_from_organization","description":"A team was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":312},{"action":"team.remove_member","description":"An organization member was removed from a team.","docs_reference_links":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","fieldsIndex":310},{"action":"team.remove_repository","description":"A repository was removed from a team's control.","docs_reference_links":"N/A","fieldsIndex":315},{"action":"team.rename","description":"A team's name was changed.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team_sync_tenant.disabled","description":"Team synchronization with a tenant was disabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.enabled","description":"Team synchronization with a tenant was enabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.update_okta_credentials","description":"The Okta credentials for team synchronization with a tenant were changed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"team.update_repository_permission","description":"A team's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":317},{"action":"user_content_edit.delete","description":"Triggered when a user content edit is deleted.","docs_reference_links":"N/A","fieldsIndex":318},{"action":"vulnerability_alert_rule.create","description":"A Dependabot rule was created.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"vulnerability_alert_rule.delete","description":"A Dependabot rule was deleted.","docs_reference_links":"N/A","fieldsIndex":320},{"action":"vulnerability_alert_rule.disable","description":"A Dependabot rule was disabled for a single repository or disabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"vulnerability_alert_rule.enable","description":"A Dependabot rule was enabled for a single repository or enabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"vulnerability_alert_rule.force_disable","description":"A Dependabot rule was enabled for an organization and cannot be disabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":322},{"action":"vulnerability_alert_rule.force_enable","description":"A Dependabot rule was disabled for an organization and cannot be enabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":322},{"action":"vulnerability_alert_rule.update","description":"A Dependabot rule's conditions, actions, or metadata changed.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"workflows.actions_policy_violation","description":"A workflow run produced one or more workflow execution protection policy violations.","docs_reference_links":"N/A","fieldsIndex":323},{"action":"workflows.approve_workflow_job","description":"A workflow job was approved.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":324},{"action":"workflows.bypass_protection_rules","description":"N/A","docs_reference_links":"N/A","fieldsIndex":325},{"action":"workflows.cancel_workflow_run","description":"A workflow run was cancelled.","docs_reference_links":"/actions/managing-workflow-runs/canceling-a-workflow","docs_reference_titles":"Canceling a workflow run","fieldsIndex":326},{"action":"workflows.comment_workflow_job","description":"N/A","docs_reference_links":"N/A","fieldsIndex":327},{"action":"workflows.completed_workflow_run","description":"A workflow status changed to completed. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/monitoring-and-troubleshooting-workflows/viewing-workflow-run-history","docs_reference_titles":"Viewing workflow run history","fieldsIndex":328},{"action":"workflows.created_workflow_run","description":"A workflow run was create. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/learn-github-actions/understanding-github-actions#create-an-example-workflow","docs_reference_titles":"Understanding GitHub Actions","fieldsIndex":329},{"action":"workflows.delete_workflow_run","description":"A workflow run was deleted.","docs_reference_links":"/actions/managing-workflow-runs/deleting-a-workflow-run","docs_reference_titles":"Deleting a workflow run","fieldsIndex":330},{"action":"workflows.disable_workflow","description":"A workflow was disabled.","docs_reference_links":"N/A","fieldsIndex":331},{"action":"workflows.enable_workflow","description":"A workflow was enabled, after previously being disabled by disable_workflow.","docs_reference_links":"N/A","fieldsIndex":331},{"action":"workflows.pin_workflow","description":"A workflow was pinned.","docs_reference_links":"N/A","fieldsIndex":332},{"action":"workflows.prepared_workflow_job","description":"A workflow job was started. Includes the list of secrets that were provided to the job. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/using-workflows/events-that-trigger-workflows","docs_reference_titles":"Events that trigger workflows","fieldsIndex":333},{"action":"workflows.reject_workflow_job","description":"A workflow job was rejected.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":334},{"action":"workflows.rerun_workflow_run","description":"A workflow run was re-run.","docs_reference_links":"/actions/managing-workflow-runs/re-running-workflows-and-jobs","docs_reference_titles":"Re-running workflows and jobs","fieldsIndex":335},{"action":"workflows.unpin_workflow","description":"A workflow was unpinned after previously being pinned.","docs_reference_links":"N/A","fieldsIndex":332},{"action":"account_recovery_token.confirm","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.recover","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"billing.update_bill_cycle_day","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.add_admin","description":"An enterprise owner was added to an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":336},{"action":"business.add_billing_manager","description":"A billing manager was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"business.add_support_entitlee","description":"A support entitlement was added to a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":337},{"action":"business.remove_admin","description":"An enterprise owner was removed from an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":336},{"action":"business.remove_billing_manager","description":"A billing manager was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"business.remove_member","description":"A member was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":338},{"action":"business.remove_support_entitlee","description":"A support entitlement was removed from a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":336},{"action":"business.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the \"CodeQL pull request alerts\" page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"business.security_center_export_coverage","description":"A CSV export was requested on the \"Coverage\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.security_center_export_overview_dashboard","description":"A CSV export was requested on the \"Overview Dashboard\" page.","docs_reference_links":"N/A","fieldsIndex":146},{"action":"business.security_center_export_risk","description":"A CSV export was requested on the \"Risk\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":337},{"action":"business.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":13},{"action":"business.set_actions_fork_pr_approvals_policy","description":"The policy for requiring approvals for workflows from public forks was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":339},{"action":"business.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-private-repositories","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":340},{"action":"business.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-artifact-and-log-retention-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":341},{"action":"business.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-workflow-permissions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":13},{"action":"business.set_fork_pr_workflows_policy","description":"The policy for fork pull request workflows was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":340},{"action":"business.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":13},{"action":"gist.create","description":"A gist was created.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"gist.destroy","description":"A gist was deleted.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"gist.visibility_change","description":"The visibility of a gist was updated.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"git_signing_ssh_public_key.create","description":"An SSH key was added to a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":343},{"action":"git_signing_ssh_public_key.delete","description":"An SSH key was removed from a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":344},{"action":"gpg_key.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":345},{"action":"gpg_key.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":345},{"action":"marketplace_listing_plan.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"marketplace_listing_plan.publish","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"marketplace_listing_plan.retire","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"marketplace_listing_plan.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":346},{"action":"mcp_registry.allowlist_add_server","description":"A server was added to an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":347},{"action":"mcp_registry.allowlist_create","description":"An MCP registry allowlist was created.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"mcp_registry.allowlist_delete","description":"An MCP registry allowlist was deleted.","docs_reference_links":"N/A","fieldsIndex":349},{"action":"mcp_registry.allowlist_remove_server","description":"A server was removed from an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":347},{"action":"mcp_registry.allowlist_set_server_entries","description":"Entries were set for a server in an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":350},{"action":"mcp_registry.allowlist_update","description":"An MCP registry allowlist was updated.","docs_reference_links":"N/A","fieldsIndex":351},{"action":"mcp_registry.settings_update","description":"An MCP policy setting for the business was updated.","docs_reference_links":"N/A","fieldsIndex":352},{"action":"oauth_access.create","description":"An OAuth access token was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, /authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, Managing your personal access tokens","fieldsIndex":353},{"action":"oauth_access.destroy","description":"An OAuth access token was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","fieldsIndex":354},{"action":"oauth_access.regenerate","description":"An OAuth access token was regenerated.","docs_reference_links":"N/A","fieldsIndex":353},{"action":"oauth_access.revoke","description":"An OAuth access token was revoked.","docs_reference_links":"N/A","fieldsIndex":355},{"action":"oauth_access.update","description":"An OAuth access token was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"oauth_authorization.create","description":"An authorization for an OAuth application was created.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":353},{"action":"oauth_authorization.destroy","description":"An authorization for an OAuth application was deleted.","docs_reference_links":"/apps/using-github-apps/reviewing-your-authorized-integrations","docs_reference_titles":"Reviewing and revoking authorization of GitHub Apps","fieldsIndex":356},{"action":"oauth_authorization.update","description":"An authorization for an OAuth application was updated.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":357},{"action":"passkey.register","description":"A new passkey was added.","docs_reference_links":"N/A","fieldsIndex":358},{"action":"passkey.remove","description":"A new passkey was removed.","docs_reference_links":"N/A","fieldsIndex":358},{"action":"personal_access_token.create","description":"Triggered when you create a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":359},{"action":"personal_access_token.credential_regenerated","description":"Triggered when you regenerate a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":360},{"action":"personal_access_token.credential_revoked","description":"A fine-grained personal access token was revoked by GitHub Advanced Security.","docs_reference_links":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","docs_reference_titles":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","fieldsIndex":361},{"action":"personal_access_token.destroy","description":"Triggered when you delete a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":362},{"action":"personal_access_token.update","description":"A fine-grained personal access token was updated.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","fieldsIndex":363},{"action":"repo.temporary_access_granted","description":"Temporary access was enabled for a repository.","docs_reference_links":"/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise","docs_reference_titles":"Accessing user-owned repositories in your enterprise","fieldsIndex":104},{"action":"sandbox.add_port","description":"A forwarded port was added to a sandbox.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.create","description":"A sandbox was created.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.delete","description":"A sandbox was deleted.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.generate_token","description":"A token was generated for a sandbox.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.remove_port","description":"A forwarded port was removed from a sandbox.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.resume","description":"A sandbox was resumed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sandbox.stop","description":"A sandbox was stopped.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"security_key.register","description":"A security key was registered for an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"security_key.remove","description":"A security key was removed from an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"social_identity.linked","description":"A user linked a social identity to their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"social_identity.unlinked","description":"A user unlinked a social identity from their account.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"social_identity.unlinked_all","description":"A user unlinked all social identities from their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sponsors.sponsored_developer_update_newsletter_send","description":"Triggered when you send an email update to your sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","fieldsIndex":15},{"action":"sponsors.waitlist_join","description":"You join the waitlist to join GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":303},{"action":"successor_invitation.accept","description":"Triggered when you accept a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.cancel","description":"Triggered when you cancel a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.create","description":"Triggered when you create a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.decline","description":"Triggered when you decline a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"successor_invitation.revoke","description":"Triggered when you revoke a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":364},{"action":"trusted_device.register","description":"A new trusted device was added.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"trusted_device.remove","description":"A trusted device was removed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.abort","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.complete","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.ignore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_approve","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_decline","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.start","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_account_recovery.two_factor_destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.add_factor","description":"A secondary authentication factor was added to a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.disabled","description":"Two-factor authentication was disabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/disabling-two-factor-authentication-for-your-personal-account","docs_reference_titles":"Disabling two-factor authentication for your personal account","fieldsIndex":15},{"action":"two_factor_authentication.enabled","description":"Two-factor authentication was enabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"Configuring two-factor authentication","fieldsIndex":15},{"action":"two_factor_authentication.password_reset_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.recovery_codes_regenerated","description":"Two factor recovery codes were regenerated for a user account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_authentication.remove_factor","description":"A secondary authentication factor was removed from a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.sign_in_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.update_fallback","description":"The two-factor authentication fallback for a user account was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.add_email","description":"An email address was added to a user account.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/adding-an-email-address-to-your-github-account","docs_reference_titles":"Adding an email address to your GitHub account","fieldsIndex":365},{"action":"user.async_delete","description":"An asynchronous job was started to destroy a user account, eventually triggering a user.delete event.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.audit_log_export","description":"Audit log entries were exported.","docs_reference_links":"N/A","fieldsIndex":115},{"action":"user.block_user","description":"A user was blocked by another user.","docs_reference_links":"N/A","fieldsIndex":117},{"action":"user.change_password","description":"A user changed their password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.codespaces_trusted_repo_access_granted","description":"Triggered when you allow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":366},{"action":"user.codespaces_trusted_repo_access_revoked","description":"Triggered when you disallow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":120},{"action":"user.create","description":"A new user account was created.","docs_reference_links":"N/A","fieldsIndex":367},{"action":"user.create_integration_secret","description":"A user secret for Codespaces was created.","docs_reference_links":"N/A","fieldsIndex":368},{"action":"user.creation_rate_limit_exceeded","description":"The rate of creation of user accounts, applications, issues, pull requests or other resources exceeded the configured rate limits, or too many users were followed too quickly.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"user.delete","description":"A user account was destroyed by an asynchronous job.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.demote","description":"A site administrator was demoted to an ordinary user account.","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.destroy","description":"A user deleted his or her account, triggering user.async_delete.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.device_verification_failure","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_requested","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_success","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.disable_collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.disable_contributors_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.disable_sockpuppet_disallowed","description":"N/A","docs_reference_links":"N/A","fieldsIndex":369},{"action":"user_email.confirm_claim","description":"An enterprise managed user claimed an email address.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_email.mark_as_unclaimed","description":"N/A","docs_reference_links":"An enterprise managed user unclaimed an email address.","docs_reference_titles":"An, GitHub Help Documentation, managed, user, unclaimed, an, email, address.","fieldsIndex":15},{"action":"user.enable_collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.enable_contributors_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":369},{"action":"user.enable_sockpuppet_disallowed","description":"N/A","docs_reference_links":"N/A","fieldsIndex":369},{"action":"user.failed_login","description":"A user tried to sign in with an incorrect username, password, or two-factor authentication code.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.forgot_password","description":"A user requested a password reset.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","fieldsIndex":370},{"action":"user.grant_github_developer","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.hide_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now hidden.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.login","description":"A user signed in.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.logout","description":"A user signed out.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.new_device_used","description":"A user signed in from a new device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.promote","description":"An ordinary user account was promoted to a site administrator.","docs_reference_links":"N/A","fieldsIndex":364},{"action":"user.recreate","description":"A user's account was restored.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.remove_email","description":"An email address was removed from a user account.","docs_reference_links":"N/A","fieldsIndex":365},{"action":"user.remove_integration_secret","description":"A user secret for Codespaces was deleted.","docs_reference_links":"N/A","fieldsIndex":372},{"action":"user.rename","description":"A username was changed.","docs_reference_links":"N/A","fieldsIndex":373},{"action":"user.reset_password","description":"A user reset their account password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_session.country_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.show_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now shown.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device","description":"A user signed in from an unrecognized device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device_and_location","description":"A user signed in from an unrecognized device and location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_status.destroy","description":"Triggered when you clear the status on your profile.","docs_reference_links":"N/A","fieldsIndex":374},{"action":"user_status.update","description":"Triggered when you set or change the status on your profile.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile#setting-a-status","docs_reference_titles":"Personalize your profile","fieldsIndex":375},{"action":"user.suspend","description":"A user account was suspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.toggle_warn_private_email","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.two_factor_challenge_failure","description":"A 2FA challenge issued for a user account failed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_challenge_success","description":"A 2FA challenge issued for a user account succeeded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recover","description":"A user used their 2FA recovery codes.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_downloaded","description":"A user downloaded 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_printed","description":"A user printed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_viewed","description":"A user viewed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_requested","description":"A user was prompted for a two-factor authentication code.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","fieldsIndex":15},{"action":"user.unblock_user","description":"A user was unblocked by another user.","docs_reference_links":"N/A","fieldsIndex":376},{"action":"user.unsuspend","description":"A user account was unsuspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.update_integration_secret","description":"A user secret for Codespaces was updated.","docs_reference_links":"N/A","fieldsIndex":368},{"action":"user.update_new_repository_default_branch_setting","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"api.request","description":"An API request was made to an endpoint for the enterprise, or an enterprise owned resource. This event is only included if API Request Events is enabled in the enterprise's audit log settings. This event is only available via audit log streaming.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise#enabling-audit-log-streaming-of-api-requests","docs_reference_titles":"Streaming the audit log for your enterprise","fieldsIndex":377},{"action":"audit_log_streaming.check","description":"A manual check of the endpoint configured for audit log streaming was performed.","docs_reference_links":"N/A","fieldsIndex":378},{"action":"audit_log_streaming.create","description":"An endpoint was added for audit log streaming.","docs_reference_links":"N/A","fieldsIndex":379},{"action":"audit_log_streaming.destroy","description":"An audit log streaming endpoint was deleted.","docs_reference_links":"N/A","fieldsIndex":380},{"action":"audit_log_streaming.update","description":"An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.","docs_reference_links":"N/A","fieldsIndex":381},{"action":"business.add_disallowed_two_factor_method","description":"An enterprise prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":382},{"action":"business.add_organization","description":"An organization was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":383},{"action":"business_advanced_security.disabled","description":"GitHub Advanced Security was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.disabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was disabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.enabled","description":"GitHub Advanced Security was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was enabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.advanced_security_metered_usage_lock","description":"Enablement for Advanced Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.advanced_security_metered_usage_unlock","description":"Enablement for Advanced Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.advanced_security_policy_update","description":"An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":384},{"action":"business.advanced_security_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business_advanced_security.user_namespace_repos_disabled","description":"GitHub Advanced Security was disabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.user_namespace_repos_enabled","description":"GitHub Advanced Security was enabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.audit_log_export","description":"An export of the enterprise audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":115},{"action":"business.audit_log_git_event_export","description":"An export of the enterprise's Git events was created.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":116},{"action":"business.cancel_admin_invitation","description":"An invitation for someone to be an owner of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.cancel_billing_manager_invitation","description":"An invitation for someone to be an billing manager of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":386},{"action":"business.cancel_trial","description":"The trial of GitHub Enterprise Cloud was canceled.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.change_seats_plan_type","description":"The seats plan type was changed for an enterprise.","docs_reference_links":"N/A","fieldsIndex":387},{"action":"business.clear_actions_settings","description":"An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":388},{"action":"business.clear_default_repository_permission","description":"An enterprise owner cleared the base repository permission policy setting for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":13},{"action":"business.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an enterprise.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.clear_members_can_create_repos","description":"An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":389},{"action":"business.code_quality_access_policy_update","description":"The policy for Code Quality access was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_quality_enablement_policy_update","description":"The policy for Code Quality enablement was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_scanning_ai_findings_policy_update","description":"The policy for Code scanning AI findings was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_scanning_autofix_policy_update","description":"The policy for Code scanning autofix was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.code_scanning_autofix_third_party_tools_policy_update","description":"The policy for Code scanning autofix third party tools was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":384},{"action":"business.code_security_enablement_policy_update","description":"The policy for Code Security enablement was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":384},{"action":"business.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.connect_usage_metrics_export","description":"Server statistics were exported for the enterprise.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":337},{"action":"business.convert_trial","description":"The enterprise account on a trial of GitHub Enterprise Cloud was upgraded to a paid enterprise account.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.create","description":"An enterprise was created.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.create_trial","description":"A trial of GitHub Enterprise Cloud began.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.delete","description":"The enterprise was deleted.","docs_reference_links":"/admin/overview/deleting-an-enterprise-account","docs_reference_titles":"Deleting an enterprise account","fieldsIndex":337},{"action":"business.delete_custom_image","description":"A custom image was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":13},{"action":"business.delete_custom_image_version","description":"A custom image version was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":13},{"action":"business_dependabot_alerts.disable","description":"Dependabot alerts were disabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts.enable","description":"Dependabot alerts were enabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business.dependabot_alerts_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.disable_oidc","description":"OIDC single sign-on was disabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.disable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was disabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.disable_saml","description":"SAML single sign-on was disabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was disabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.disable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.enable_oidc","description":"OIDC single sign-on was enabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.enable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enable_saml","description":"SAML single sign-on was enabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was enabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.enable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.enterprise_server_license_download","description":"A GitHub Enterprise Server license was downloaded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enterprise_teams_limit_reached","description":"An enterprise has reached its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.enterprise_teams_limit_warning","description":"An enterprise is approaching its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.expire_trial","description":"The trial of GitHub Enterprise Cloud expired.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.github_models_billing_disabled","description":"GitHub Models billing was disabled for the business.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.github_models_billing_enabled","description":"GitHub Models billing was enabled for the business.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.import_license_usage","description":"License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.","docs_reference_links":"/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage","docs_reference_titles":"Syncing license usage from GitHub Enterprise Server to Cloud","fieldsIndex":392},{"action":"business.invite_admin","description":"An invitation for someone to be an enterprise owner of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.invite_billing_manager","description":"An invitation for someone to be a billing manager of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.invite_unaffiliated_member","description":"An invitation for someone to join an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"business.members_can_update_protected_branches.clear","description":"An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.","docs_reference_links":"N/A","fieldsIndex":388},{"action":"business.members_limit_reached","description":"An enterprise has reached its members limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.organizations_limit_reached","description":"An enterprise has reached its organizations limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.organizations_limit_warning","description":"An enterprise is approaching its organizations limit.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.proxy_security_header_disabled","description":"The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_enabled","description":"The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_unsatisfied","description":"A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.recovery_code_failed","description":"An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":393},{"action":"business.recovery_code_used","description":"An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":337},{"action":"business.recovery_codes_downloaded","description":"An enterprise owner downloaded the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.recovery_codes_generated","description":"An enterprise owner generated the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.recovery_codes_printed","description":"An enterprise owner printed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.recovery_codes_viewed","description":"An enterprise owner viewed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":337},{"action":"business.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an enterprise.","docs_reference_links":"N/A","fieldsIndex":394},{"action":"business.remove_organization","description":"An organization was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"business.rename_slug","description":"The slug for the enterprise URL was renamed.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.restore","description":"The deleted enterprise was restored.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.revoke_external_identity","description":"The external identity for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.revoke_sso_session","description":"The SAML single sign-on session for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":337},{"action":"business.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":121},{"action":"business_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.create","description":"An enterprise-level custom pattern was created for secret scanning.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":11},{"action":"business_secret_scanning_custom_pattern.delete","description":"An enterprise-level custom pattern was removed from secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern.publish","description":"An enterprise-level custom pattern was published for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.update","description":"Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning.disable","description":"Secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.disabled_for_new_repos","description":"Secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.enable","description":"Secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.enabled_for_new_repos","description":"Secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.disable","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.enable","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.update","description":"The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.disable","description":"Push protection for secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":0},{"action":"business_secret_scanning_push_protection.disabled_for_new_repos","description":"Push protection for secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.enable","description":"Push protection for secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.enabled_for_new_repos","description":"Push protection for secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":144},{"action":"business_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":145},{"action":"business.secret_scanning_repo_admin_settings_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":384},{"action":"business.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.trial_email_verification_failed","description":"A trial email verification attempt failed for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.trial_email_verification_requested","description":"A trial email verification resend was requested for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.trial_email_verification_sent","description":"A trial email verification was sent for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.trial_email_verified","description":"The trial email was successfully verified for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":337},{"action":"business.update_actions_settings","description":"An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":396},{"action":"business.update_default_repository_permission","description":"The base repository permission setting was updated for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":397},{"action":"business.update_emu_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":398},{"action":"business.update_member_repository_creation_permission","description":"The repository creation setting was updated for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":399},{"action":"business.update_member_repository_invitation_permission","description":"The policy setting for enterprise members inviting outside collaborators to repositories was updated.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-inviting-outside-collaborators-to-repositories","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":400},{"action":"business.update_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":401},{"action":"business.update_saml_provider_settings","description":"The SAML single sign-on provider settings for an enterprise were updated.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.update_unaffiliated_users_policy","description":"The policy for removing user accounts when removing the last organization membership was updated.","docs_reference_links":"/admin/enforcing-policies/enforcing-policies-for-your-enterprise/control-offboarding","docs_reference_titles":"Controlling user offboarding with the unaffiliated users policy","fieldsIndex":402},{"action":"business.upgrade_from_organization","description":"The organization was upgraded to an enterprise account.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/upgrading-your-accounts-plan#upgrading-your-organizations-plan","docs_reference_titles":"Upgrading your account's plan","fieldsIndex":337},{"action":"copilot.cfb_enterprise_org_enablement_changed","description":"The Copilot enablement policy changed at the enterprise level to either allow or disable access for all organizations, or to allow access for selected organizations.","docs_reference_links":"N/A","fieldsIndex":403},{"action":"copilot.cfb_enterprise_settings_changed","description":"Copilot feature settings were changed at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.clickwrap_save_event","description":"The GitHub Copilot Product Terms or Pre-Release Preview Terms were accepted.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.enterprise_enablement_changed","description":"Copilot access was enabled or disabled at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":403},{"action":"enterprise.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","fieldsIndex":11},{"action":"enterprise_domain.approve","description":"A domain was approved for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#approving-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":163},{"action":"enterprise_domain.create","description":"A domain was added to an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":163},{"action":"enterprise_domain.destroy","description":"A domain was removed from an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#removing-an-approved-or-verified-domain","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":404},{"action":"enterprise_domain.verify","description":"A domain was verified for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":163},{"action":"enterprise.register_self_hosted_runner","description":"A new GitHub Actions self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":15},{"action":"enterprise.remove_self_hosted_runner","description":"A GitHub Actions self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":11},{"action":"enterprise_role.assign","description":"An enterprise role was assigned to a user or enterprise team.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":405},{"action":"enterprise_role.create","description":"A custom enterprise role was created in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":406},{"action":"enterprise_role.destroy","description":"A custom enterprise role was deleted in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":406},{"action":"enterprise_role.revoke","description":"A user or enterprise team was unassigned an enterprise role.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":407},{"action":"enterprise_role.update","description":"A custom enterprise role was edited in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":408},{"action":"enterprise.runner_group_created","description":"A GitHub Actions self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":409},{"action":"enterprise.runner_group_removed","description":"A GitHub Actions self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":410},{"action":"enterprise.runner_group_renamed","description":"A GitHub Actions self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"enterprise.runner_group_runner_removed","description":"The REST API was used to remove a GitHub Actions self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":411},{"action":"enterprise.runner_group_runners_added","description":"A GitHub Actions self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":410},{"action":"enterprise.runner_group_runners_updated","description":"A GitHub Actions runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":410},{"action":"enterprise.runner_group_updated","description":"The configuration of a GitHub Actions self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":409},{"action":"enterprise.runner_group_visiblity_updated","description":"The visibility of a GitHub Actions self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":143},{"action":"enterprise.self_hosted_runner_offline","description":"The GitHub Actions runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"enterprise.self_hosted_runner_online","description":"The GitHub Actions runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":148},{"action":"enterprise.self_hosted_runner_updated","description":"The GitHub Actions runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":149},{"action":"enterprise_team.add_member","description":"A new member was added to the enterprise team or an IdP group linked to an enterprise team, or an IdP group was linked to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":412},{"action":"enterprise_team.copilot_assignment","description":"A license for GitHub Copilot was assigned to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":413},{"action":"enterprise_team.copilot_unassignment","description":"A license for GitHub Copilot was unassigned from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":413},{"action":"enterprise_team.create","description":"A new enterprise team was created.","docs_reference_links":"N/A","fieldsIndex":412},{"action":"enterprise_team.destroy","description":"An enterprise team was deleted.","docs_reference_links":"N/A","fieldsIndex":413},{"action":"enterprise_team.remove_member","description":"A member was removed from the enterprise team or an IdP group linked to an enterprise team, or an IdP group was unlinked from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":412},{"action":"enterprise_team.rename","description":"The name of an enterprise team was changed.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"external_group.add_member","description":"A user was added to an external group.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"external_group.delete","description":"An external group was deleted.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.link","description":"An external group was linked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.provision","description":"An external group was created.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.remove_member","description":"A user was removed from an external group.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"external_group.scim_api_failure","description":"Failed external group SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":418},{"action":"external_group.scim_api_success","description":"Successful external group SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":419},{"action":"external_group.unlink","description":"An external group was unlinked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.update","description":"An external group was updated.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.update_display_name","description":"An external group's display name was updated.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_identity.deprovision","description":"An external identity was deprovisioned, suspending the linked GitHub user.","docs_reference_links":"N/A","fieldsIndex":420},{"action":"external_identity.provision","description":"An external identity was created and linked to a GitHub user.","docs_reference_links":"N/A","fieldsIndex":420},{"action":"external_identity.scim_api_failure","description":"Failed external identity SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":421},{"action":"external_identity.scim_api_success","description":"Successful external identity SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":422},{"action":"external_identity.update","description":"An external identity was updated.","docs_reference_links":"N/A","fieldsIndex":420},{"action":"ip_allow_list.disable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_user_level_enforcement","description":"IP allow list user level enforcement was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_user_level_enforcement","description":"IP allow list user level enforcement was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.update_ip_allowlist_configuration","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_custom_property_definition.create","description":"A new organization custom property definition was created.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":423},{"action":"organization_custom_property_definition.destroy","description":"An organization custom property definition was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":424},{"action":"organization_custom_property_definition.update","description":"An organization custom property definition was updated.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":425},{"action":"personal_access_token.access_restriction_reset","description":"The configured restriction for access to resources via personal access tokens was reset and delegated to organizations.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_reset","description":"Triggered when the enterprise delegates to the organizations when to require approval for fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.disable","description":"SSO lockdown for users was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.enable","description":"SSO lockdown for users was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.disable","description":"Automatic redirects for users to single sign-on (SSO) was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.enable","description":"Automatic redirects for users to single sign-on (SSO) was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.user_access_reinstated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":426},{"action":"copilot.user_access_revoked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":426},{"action":"discussion_post.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"discussion_post_reply.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":428},{"action":"discussion_post_reply.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":429},{"action":"discussion_post.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"oauth_application.suspend","description":"N/A","docs_reference_links":"N/A","fieldsIndex":108},{"action":"oauth_application.unsuspend","description":"An OAuth application was unsuspended for a user or organization account.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"org.async_delete","description":"A user initiated a background job to delete an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recreate","description":"An organization was restored.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.transform","description":"A user account was converted into an organization.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-personal-account/converting-a-user-into-an-organization","docs_reference_titles":"Converting a user into an organization","fieldsIndex":430},{"action":"repo.collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":431},{"action":"repo.disk_archive","description":"A repository was archived on disk.","docs_reference_links":"/repositories/archiving-a-github-repository/archiving-repositories","docs_reference_titles":"/repositories/archiving-a-github-repository/archiving-repositories","fieldsIndex":0},{"action":"repo.hide_from_discovery","description":"N/A","docs_reference_links":"N/A","fieldsIndex":432},{"action":"repo.noindex","description":"N/A","docs_reference_links":"N/A","fieldsIndex":432},{"action":"repo.override_unlock","description":"The repository was unlocked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.pages_build","description":"N/A","docs_reference_links":"N/A","fieldsIndex":433},{"action":"repo.require_login","description":"N/A","docs_reference_links":"N/A","fieldsIndex":434},{"action":"team_discussions.clear","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.correct_password_from_unrecognized_device","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_device_and_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.flag_as_large_scale_contributor","description":"A user account was flagged as a large scale contributor. Only contributions from public repositories the user owns will be shown in their contribution graph, in order to prevent timeouts.","docs_reference_links":"N/A","fieldsIndex":360},{"action":"user.minimize_comment","description":"A comment made by a user was minimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"user.partial_two_factor_email_followup","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.remove_large_scale_contributor_flag","description":"A user account was no longer flagged as a large scale contributor.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.report_abuse","description":"N/A","docs_reference_links":"N/A","fieldsIndex":234},{"action":"user.report_content","description":"Triggered when you report an issue or pull request, or a comment on an issue, pull request, or commit.","docs_reference_links":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","docs_reference_titles":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","fieldsIndex":0},{"action":"user.sign_in_from_unrecognized_location","description":"A user signed in from an unrecognized location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.unminimize_comment","description":"A comment made by a user was unminimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"copilot.knowledge_base_created","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_deleted","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_updated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"actions_policy.evaluate","description":"N/A","docs_reference_links":"N/A","fieldsIndex":245}] \ No newline at end of file +[{"action":"account.billing_date_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account.plan_change","description":"The account's plan changed.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/about-billing-for-plans","docs_reference_titles":"How GitHub billing works","fieldsIndex":1},{"action":"actions_cache.delete","description":"A GitHub Actions cache was deleted using the REST API.","docs_reference_links":"N/A","fieldsIndex":2},{"action":"advisory_credit.accept","description":"Credit was accepted for a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/editing-a-repository-security-advisory","docs_reference_titles":"Editing a repository security advisory","fieldsIndex":3},{"action":"advisory_credit.create","description":"Someone was added to the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":4},{"action":"advisory_credit.decline","description":"Credit was declined for a security advisory.","docs_reference_links":"N/A","fieldsIndex":5},{"action":"advisory_credit.destroy","description":"Someone was removed from the credit section of a security advisory.","docs_reference_links":"N/A","fieldsIndex":6},{"action":"artifact.destroy","description":"A workflow run artifact was manually deleted.","docs_reference_links":"N/A","fieldsIndex":7},{"action":"auto_approve_personal_access_token_requests.disable","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources. See also: personal_access_token.auto_approve_grant_requests_disabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"auto_approve_personal_access_token_requests.enable","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval. See also: personal_access_token.auto_approve_grant_requests_enabled","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization","fieldsIndex":0},{"action":"billing.budget_create","description":"A billing budget was created for a business or organization. Includes details about the budget limit, alerting preferences, and recipients.","docs_reference_links":"N/A","fieldsIndex":8},{"action":"billing.budget_delete","description":"A billing budget was deleted for a business or organization. Includes details about the removed budget and any alerting settings.","docs_reference_links":"N/A","fieldsIndex":9},{"action":"billing.budget_update","description":"A billing budget was updated for a business or organization. Includes details about the updated limit and alerting settings.","docs_reference_links":"N/A","fieldsIndex":10},{"action":"billing.change_billing_type","description":"The way the account pays for GitHub was changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/adding-or-editing-a-payment-method","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":11},{"action":"billing.change_email","description":"The billing email address changed.","docs_reference_links":"/billing/managing-your-github-billing-settings/setting-your-billing-email","docs_reference_titles":"Managing your payment and billing information","fieldsIndex":12},{"action":"billing.cost_center_create","description":"A cost center was created for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_delete","description":"A cost center was deleted from a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing.cost_center_resource_added","description":"A resource was added to a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_resource_removed","description":"A resource was removed from a cost center for a business or organization.","docs_reference_links":"N/A","fieldsIndex":14},{"action":"billing.cost_center_update","description":"A cost center was updated for a business or organization.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"billing_customer.azure_subscription_linked","description":"Azure subscription has been linked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing_customer.azure_subscription_unlinked","description":"Azure subscription has been unlinked on this account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"billing.lock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":1},{"action":"billing.overage_policy_updated","description":"The premium request paid usage policy for your GitHub account was changed.","docs_reference_links":"/copilot/how-tos/manage-and-track-spending/manage-request-allowances#setting-a-policy-for-paid-usage","docs_reference_titles":"Optimizing your budget configuration","fieldsIndex":15},{"action":"billing.unlock","description":"N/A","docs_reference_links":"N/A","fieldsIndex":16},{"action":"checks.auto_trigger_disabled","description":"Automatic creation of check suites was disabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.auto_trigger_enabled","description":"Automatic creation of check suites was enabled on a repository in the organization or enterprise.","docs_reference_links":"/rest/checks#update-repository-preferences-for-check-suites","docs_reference_titles":"/rest/checks#update-repository-preferences-for-check-suites","fieldsIndex":17},{"action":"checks.delete_logs","description":"Logs in a check suite were deleted.","docs_reference_links":"N/A","fieldsIndex":18},{"action":"code_scanning.alert_appeared_in_branch","description":"Existing code scanning alerts appeared in a branch.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_fixed","description":"Code scanning alerts were fixed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_closed_became_outdated","description":"Code scanning alerts were closed as outdated (all configurations they were detected in were deleted).","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":20},{"action":"code_scanning.alert_closed_by_user","description":"Code scanning alerts were manually dismissed.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":21},{"action":"code_scanning.alert_closure_approved","description":"Dismissal of code scanning alerts was approved.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_denied","description":"Dismissal of code scanning alerts was denied.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_closure_requested","description":"Dismissal of code scanning alerts was requested.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":22},{"action":"code_scanning.alert_created","description":"Code scanning alerts were seen for the first time.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reappeared","description":"Code scanning alerts that were previously fixed reappeared.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":19},{"action":"code_scanning.alert_reopened_by_user","description":"Code scanning alerts that were previously dismissed were reopened.","docs_reference_links":"/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning","docs_reference_titles":"Code scanning","fieldsIndex":23},{"action":"codespaces.allow_permissions","description":"A codespace using custom permissions from its devcontainer.json file was launched.","docs_reference_links":"N/A","fieldsIndex":24},{"action":"codespaces.attempted_to_create_from_prebuild","description":"An attempt to create a codespace from a prebuild was made.","docs_reference_links":"N/A","fieldsIndex":25},{"action":"codespaces.business_enablement_updated","description":"Enterprise setting for Codespaces ownership was updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":26},{"action":"codespaces.connect","description":"Credentials for a codespace were refreshed.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.create","description":"A codespace was created","docs_reference_links":"/codespaces/developing-in-codespaces/creating-a-codespace-for-a-repository","docs_reference_titles":"Creating a codespace for a repository","fieldsIndex":27},{"action":"codespaces.destroy","description":"A user deleted a codespace.","docs_reference_links":"/codespaces/developing-in-codespaces/deleting-a-codespace","docs_reference_titles":"Deleting a codespace","fieldsIndex":28},{"action":"codespaces.export_environment","description":"A codespace was exported to a branch on GitHub.","docs_reference_links":"N/A","fieldsIndex":29},{"action":"codespaces.policy_group_created","description":"Policies were applied to codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_deleted","description":"Policies were removed from codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.policy_group_updated","description":"Policies were updated for codespaces in an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"codespaces.restore","description":"A codespace was restored.","docs_reference_links":"N/A","fieldsIndex":30},{"action":"codespaces.start_environment","description":"A codespace was started.","docs_reference_links":"N/A","fieldsIndex":27},{"action":"codespaces.suspend_environment","description":"A codespace was stopped.","docs_reference_links":"N/A","fieldsIndex":31},{"action":"codespaces.trusted_repositories_access_update","description":"A personal account's access and security setting for Codespaces were updated.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":1},{"action":"commit_comment.destroy","description":"A commit comment was deleted.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"commit_comment.update","description":"A commit comment was updated.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"copilot.access_revoked","description":"Copilot access was revoked for the organization or enterprise due to its Copilot subscription ending, an issue with billing the entity, the entity being marked spammy, or the entity being suspended.","docs_reference_links":"N/A","fieldsIndex":33},{"action":"copilot.cfb_org_settings_changed","description":"Copilot feature settings were changed at the organization level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.cfb_seat_added","description":"A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_created","description":"A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.","docs_reference_links":"/copilot/overview-of-github-copilot/about-github-copilot-for-business","docs_reference_titles":"What is GitHub Copilot?","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_refreshed","description":"A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_assignment_reused","description":"A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.","docs_reference_links":"N/A","fieldsIndex":35},{"action":"copilot.cfb_seat_assignment_unassigned","description":"A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.","docs_reference_links":"N/A","fieldsIndex":34},{"action":"copilot.cfb_seat_cancelled","description":"A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":36},{"action":"copilot.cfb_seat_cancelled_by_staff","description":"A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.","docs_reference_links":"N/A","fieldsIndex":37},{"action":"copilot.cfb_seat_management_changed","description":"The seat management setting was changed at the organization level to either enable or disable Copilot access for all members of the organization, or to enable Copilot access for selected members or teams.","docs_reference_links":"N/A","fieldsIndex":38},{"action":"copilot.code_review_organization_settings_updated","description":"Copilot code review settings were updated for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.code_review_repository_settings_updated","description":"Copilot code review settings were updated for a repository.","docs_reference_links":"N/A","fieldsIndex":39},{"action":"copilot.content_exclusion_changed","description":"The excluded paths for GitHub Copilot were updated.","docs_reference_links":"N/A","fieldsIndex":40},{"action":"copilot.custom_instructions_created","description":"Copilot custom instructions were created for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.custom_instructions_updated","description":"Copilot custom instructions were updated for the organization.","docs_reference_links":"N/A","fieldsIndex":41},{"action":"copilot.memory_user_opt_out","description":"A user opted out of Copilot Memory.","docs_reference_links":"N/A","fieldsIndex":42},{"action":"copilot.plan_changed","description":"The plan for GitHub Copilot was updated.","docs_reference_links":"/billing/managing-billing-for-github-copilot/about-billing-for-github-copilot","docs_reference_titles":"GitHub Copilot licenses","fieldsIndex":43},{"action":"copilot.plan_downgrade_scheduled","description":"The plan for GitHub Copilot was scheduled to be downgraded.","docs_reference_links":"N/A","fieldsIndex":44},{"action":"copilot.swe_agent_firewall_allowlist_updated","description":"Firewall allowlist for Copilot coding agent was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.swe_agent_mcp_config_updated","description":"MCP Configuration for Copilot coding agent was updated for a specific repository.","docs_reference_links":"N/A","fieldsIndex":45},{"action":"copilot.swe_agent_repo_disabled","description":"Specific repositories were disabled from using Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enabled","description":"Specific repositories were enabled to use Copilot coding agent.","docs_reference_links":"N/A","fieldsIndex":46},{"action":"copilot.swe_agent_repo_enablement_updated","description":"Copilot coding agent access was updated for the organization's or user's repositories.","docs_reference_links":"N/A","fieldsIndex":47},{"action":"custom_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"custom_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"custom_property_definition.create","description":"A new custom property definition was created.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.destroy","description":"A custom property definition was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":49},{"action":"custom_property_definition.update","description":"A custom property definition was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":50},{"action":"custom_property_value.create","description":"A repository's custom property value was manually set for the first time.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.destroy","description":"A repository's custom property value was deleted.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":51},{"action":"custom_property_value.update","description":"A repository's custom property value was updated.","docs_reference_links":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-custom-properties-for-repositories-in-your-organization","fieldsIndex":52},{"action":"dependabot_alerts.disable","description":"Dependabot alerts were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":11},{"action":"dependabot_alerts.enable","description":"Dependabot alerts were enabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-for-all-existing-repositories","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#enabling-or-disabling-a-feature-automatically-when-new-repositories-are-added","fieldsIndex":53},{"action":"dependabot_closure_request.approve","description":"Dismissal of Dependabot alerts was approved.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":54},{"action":"dependabot_closure_request.cancel","description":"Dismissal request for Dependabot alerts was canceled.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":54},{"action":"dependabot_closure_request.create","description":"Dismissal of Dependabot alerts was requested.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":55},{"action":"dependabot_closure_request.deny","description":"Dismissal of Dependabot alerts was denied.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":55},{"action":"dependabot_repository_access.default_access_level_updated","description":"The default repository access for Dependabot was updated.","docs_reference_links":"N/A","fieldsIndex":56},{"action":"dependabot_repository_access.repositories_updated","description":"The repositories that Dependabot can access were updated.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates.disable","description":"Dependabot security updates were disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependabot_security_updates.enable","description":"Dependabot security updates were enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.disable","description":" Dependabot security updates were disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependabot_security_updates_new_repos.enable","description":"Dependabot security updates were enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph.disable","description":"The dependency graph was disabled for all existing repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":11},{"action":"dependency_graph.enable","description":"The dependency graph was enabled for all existing repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"dependency_graph_new_repos.disable","description":"The dependency graph was disabled for all new repositories.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization","fieldsIndex":53},{"action":"dependency_graph_new_repos.enable","description":"The dependency graph was enabled for all new repositories.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"discussion_comment.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion_comment.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":32},{"action":"discussion.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":57},{"action":"enterprise_announcement.create","description":"A global announcement banner was created for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise#creating-a-global-announcement-banner","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":58},{"action":"enterprise_announcement.destroy","description":"A global announcement banner was removed from the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":46},{"action":"enterprise_announcement.update","description":"A global announcement banner was updated for the enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/communicating-information-to-users-in-your-enterprise/customizing-user-messages-for-your-enterprise","docs_reference_titles":"Customizing user messages for your enterprise","fieldsIndex":59},{"action":"enterprise_installation.create","description":"The GitHub App associated with a GitHub Connect connection was created.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":15},{"action":"enterprise_installation.destroy","description":"The GitHub App associated with a GitHub Connect connection was deleted.","docs_reference_links":"/admin/configuration/configuring-github-connect/managing-github-connect","docs_reference_titles":"Enabling GitHub Connect for GitHub.com","fieldsIndex":60},{"action":"environment.add_protection_rule","description":"A GitHub Actions deployment protection rule was created via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":61},{"action":"environment.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":62},{"action":"environment.create_actions_secret","description":"A secret was created for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":63},{"action":"environment.create_actions_variable","description":"A variable was created for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":63},{"action":"environment.delete","description":"An environment was deleted.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deleting-an-environment","docs_reference_titles":"Managing environments for deployment","fieldsIndex":64},{"action":"environment.remove_actions_secret","description":"A secret was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":65},{"action":"environment.remove_actions_variable","description":"A variable was deleted for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":65},{"action":"environment.remove_protection_rule","description":"A GitHub Actions deployment protection rule was deleted via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":66},{"action":"environment.update_actions_secret","description":"A secret was updated for a GitHub Actions environment.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#environment-secrets","docs_reference_titles":"Managing environments for deployment","fieldsIndex":63},{"action":"environment.update_actions_variable","description":"A variable was updated for a GitHub Actions environment.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-environment","docs_reference_titles":"Store information in variables","fieldsIndex":63},{"action":"environment.update_protection_rule","description":"A GitHub Actions deployment protection rule was updated via the API.","docs_reference_links":"/actions/deployment/targeting-different-environments/using-environments-for-deployment#deployment-protection-rules","docs_reference_titles":"Managing environments for deployment","fieldsIndex":67},{"action":"git.clone","description":"A repository was cloned. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":68},{"action":"git.fetch","description":"Changes were fetched from a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":68},{"action":"git.push","description":"Changes were pushed to a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":68},{"action":"github_hosted_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":69},{"action":"github_hosted_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":53},{"action":"github_hosted_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":69},{"action":"hook.active_changed","description":"A hook's active status was updated.","docs_reference_links":"N/A","fieldsIndex":70},{"action":"hook.config_changed","description":"A hook's configuration was changed.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"hook.create","description":"A new hook was added.","docs_reference_links":"/get-started/exploring-integrations/about-webhooks","docs_reference_titles":"About webhooks","fieldsIndex":72},{"action":"hook.destroy","description":"A hook was deleted.","docs_reference_links":"N/A","fieldsIndex":71},{"action":"hook.events_changed","description":"A hook's configured events were changed.","docs_reference_links":"N/A","fieldsIndex":73},{"action":"integration.create","description":"A GitHub App was created.","docs_reference_links":"N/A","fieldsIndex":74},{"action":"integration.destroy","description":"A GitHub App was deleted.","docs_reference_links":"N/A","fieldsIndex":75},{"action":"integration.generate_client_secret","description":"N/A","docs_reference_links":"N/A","fieldsIndex":76},{"action":"integration_installation.create","description":"A GitHub App was installed.","docs_reference_links":"/apps/using-github-apps/authorizing-github-apps","docs_reference_titles":"/apps/using-github-apps/authorizing-github-apps","fieldsIndex":77},{"action":"integration_installation.destroy","description":"A GitHub App was uninstalled.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":78},{"action":"integration_installation.repositories_added","description":"Repositories were added to a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":79},{"action":"integration_installation.repositories_removed","description":"Repositories were removed from a GitHub App.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#modifying-repository-access","fieldsIndex":80},{"action":"integration_installation_request.close","description":"A request to install a GitHub App was either approved or denied by an owner, or canceled by the member who opened the request.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":81},{"action":"integration_installation_request.create","description":"A member requested that an owner install a GitHub App.","docs_reference_links":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","docs_reference_titles":"/apps/using-github-apps/requesting-a-github-app-from-your-organization-owner","fieldsIndex":82},{"action":"integration_installation.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":83},{"action":"integration_installation.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","docs_reference_titles":"/apps/using-github-apps/reviewing-and-modifying-installed-github-apps#blocking-access","fieldsIndex":83},{"action":"integration_installation.version_updated","description":"Permissions for a GitHub App were updated.","docs_reference_links":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","docs_reference_titles":"/apps/using-github-apps/approving-updated-permissions-for-a-github-app","fieldsIndex":84},{"action":"integration.manager_added","description":"A member of an enterprise or organization was added as a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#giving-someone-the-ability-to-manage-all-github-apps-owned-by-the-organization","fieldsIndex":85},{"action":"integration.manager_removed","description":"A member of an enterprise or organization was removed from being a GitHub App manager.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/adding-and-removing-github-app-managers-in-your-organization#removing-a-github-app-managers-permissions-for-the-entire-organization","fieldsIndex":85},{"action":"integration.remove_client_secret","description":"A client secret for a GitHub App was removed.","docs_reference_links":"N/A","fieldsIndex":75},{"action":"integration.revoke_all_tokens","description":"All user tokens for a GitHub App were requested to be revoked.","docs_reference_links":"N/A","fieldsIndex":86},{"action":"integration.revoke_tokens","description":"Token(s) for a GitHub App were revoked.","docs_reference_links":"N/A","fieldsIndex":86},{"action":"integration.suspend","description":"A GitHub App was suspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":87},{"action":"integration.transfer","description":"Ownership of a GitHub App was transferred to another user or organization.","docs_reference_links":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","docs_reference_titles":"/apps/maintaining-github-apps/transferring-ownership-of-a-github-app","fieldsIndex":88},{"action":"integration.unsuspend","description":"A GitHub App was unsuspended.","docs_reference_links":"/apps/maintaining-github-apps/suspending-a-github-app-installation","docs_reference_titles":"/apps/maintaining-github-apps/suspending-a-github-app-installation","fieldsIndex":86},{"action":"integration.update","description":"A GitHub App was updated.","docs_reference_links":"N/A","fieldsIndex":76},{"action":"ip_allow_list.disable","description":"An IP allow list was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.disable_for_installed_apps","description":"An IP allow list was disabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable","description":"An IP allow list was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_for_installed_apps","description":"An IP allow list was enabled for installed GitHub Apps.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list_entry.create","description":"An IP address was added to an IP allow list.","docs_reference_links":"N/A","fieldsIndex":89},{"action":"ip_allow_list_entry.destroy","description":"An IP address was deleted from an IP allow list.","docs_reference_links":"N/A","fieldsIndex":89},{"action":"ip_allow_list_entry.update","description":"An IP address or its description was changed.","docs_reference_links":"N/A","fieldsIndex":89},{"action":"issue_comment.destroy","description":"A comment on an issue was deleted from the repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.pinned","description":"A comment on an issue was pinned to a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.unpinned","description":"A comment on an issue was unpinned from a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_comment.update","description":"A comment on an issue (other than the initial one) changed.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"issue_dependencies.blocked_by_add","description":"An issue was marked as blocked by another issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_dependencies.blocked_by_remove","description":"The blocked by relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_dependencies.blocking_add","description":"An issue was marked as blocking another issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue_dependencies.blocking_remove","description":"The blocking relationship between an issue and another issue was removed.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"issue.destroy","description":"An issue was deleted from the repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/deleting-an-issue","docs_reference_titles":"Deleting an issue","fieldsIndex":91},{"action":"issue.pinned","description":"An issue was pinned to a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":92},{"action":"issue.transfer","description":"An issue was transferred to another repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/transferring-an-issue-to-another-repository","docs_reference_titles":"Transferring an issue to another repository","fieldsIndex":93},{"action":"issue_type.create","description":"An issue type was created.","docs_reference_links":"N/A","fieldsIndex":94},{"action":"issue_type.destroy","description":"An issue type was deleted.","docs_reference_links":"N/A","fieldsIndex":95},{"action":"issue_type.update","description":"An issue type was updated.","docs_reference_links":"N/A","fieldsIndex":96},{"action":"issue.unpinned","description":"An issue was unpinned from a repository.","docs_reference_links":"/issues/tracking-your-work-with-issues/pinning-an-issue-to-your-repository","docs_reference_titles":"Pinning an issue to your repository","fieldsIndex":92},{"action":"issues.deletes_disabled","description":"The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"issues.deletes_enabled","description":"The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"issues.deletes_policy_cleared","description":"An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-deleting-issues","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"marketplace_agreement_signature.create","description":"The GitHub Marketplace Developer Agreement was signed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"marketplace_listing.approve","description":"A listing was approved for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"marketplace_listing.change_category","description":"A category for a listing for an app in GitHub Marketplace was changed.","docs_reference_links":"N/A","fieldsIndex":98},{"action":"marketplace_listing.create","description":"A listing for an app in GitHub Marketplace was created.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"marketplace_listing.delist","description":"A listing was removed from GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":99},{"action":"marketplace_listing.redraft","description":"A listing was sent back to draft state.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"marketplace_listing.reject","description":"A listing was not accepted for inclusion in GitHub Marketplace.","docs_reference_links":"N/A","fieldsIndex":97},{"action":"mcp_registry.allowlist_assign","description":"An MCP registry allowlist was assigned to an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":100},{"action":"mcp_registry.allowlist_remove_assignment","description":"An MCP registry allowlist assignment was removed from an organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":100},{"action":"members_can_create_pages.disable","description":"The ability for members to publish GitHub Pages sites was disabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_pages.enable","description":"The ability for members to publish GitHub Pages sites was enabled.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.disable","description":"The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_private_pages.enable","description":"The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_public_pages.disable","description":"The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_create_public_pages.enable","description":"The ability for members to publish public GitHub Pages was enabled Members can publish public GitHub Pages in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-publication-of-github-pages-sites-for-your-organization","fieldsIndex":53},{"action":"members_can_delete_repos.clear","description":"An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.disable","description":"The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_delete_repos.enable","description":"The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-deletion-and-transfer","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":11},{"action":"members_can_view_dependency_insights.clear","description":"An enterprise owner cleared the policy setting for viewing dependency insights in any organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"members_can_view_dependency_insights.disable","description":"The ability for enterprise members to view dependency insights was disabled. Members cannot view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"members_can_view_dependency_insights.enable","description":"The ability for enterprise members to view dependency insights was enabled. Members can view dependency insights in any organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":11},{"action":"merge_queue.pull_request_dequeued","description":"A pull request was removed from a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.pull_request_queue_jump","description":"A pull request was moved ahead in a merge queue.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"merge_queue.queue_cleared","description":"A merge queue was cleared.","docs_reference_links":"N/A","fieldsIndex":101},{"action":"merge_queue.update_settings","description":"The settings for a merge queue were updated.","docs_reference_links":"N/A","fieldsIndex":102},{"action":"metered_billing_configuration.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"metered_billing_configuration.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"migration.create","description":"A migration file was created for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"migration.destroy_file","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was deleted.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"migration.download","description":"A migration file for transferring data from a source location (such as a GitHub.com organization or a GitHub Enterprise Server instance) to a target GitHub Enterprise Server instance was downloaded.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"network_configuration.create","description":"A network configuration for a hosted compute service was created.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":104},{"action":"network_configuration.delete","description":"A network configuration for a hosted compute service was deleted.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":105},{"action":"network_configuration.update","description":"A network configuration for a hosted compute service was updated.","docs_reference_links":"/admin/configuration/configuring-private-networking-for-hosted-compute-products/about-networking-for-hosted-compute-products","docs_reference_titles":"About networking for hosted compute products in your enterprise","fieldsIndex":106},{"action":"oauth_application.create","description":"An OAuth application was created.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.destroy","description":"An OAuth application was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.generate_client_secret","description":"An OAuth application's secret key was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.remove_client_secret","description":"An OAuth application's secret key was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.reset_secret","description":"The secret key for an OAuth application was reset.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":108},{"action":"oauth_application.revoke_all_tokens","description":"All user tokens for an OAuth application were requested to be revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.revoke_tokens","description":"Token(s) for an OAuth application were revoked.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.transfer","description":"An OAuth application was transferred from one account to another.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"oauth_application.update_token_expiration","description":"The token expiration setting for an OAuth application was updated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"org.accept_business_invitation","description":"An invitation sent to an organization to join an enterprise was accepted.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":15},{"action":"org.add_billing_manager","description":"A billing manager was added to an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/adding-a-billing-manager-to-your-organization","fieldsIndex":11},{"action":"org.add_disallowed_two_factor_method","description":"An organization prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":109},{"action":"org.add_member","description":"A user joined an organization.","docs_reference_links":"N/A","fieldsIndex":110},{"action":"org.add_outside_collaborator","description":"An outside collaborator was added to a repository.","docs_reference_links":"N/A","fieldsIndex":111},{"action":"org.add_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"org.advanced_security_disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_disabled_on_all_repos","description":"GitHub Advanced Security was disabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.advanced_security_enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.advanced_security_enabled_on_all_repos","description":"GitHub Advanced Security was enabled for all repositories in an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.advanced_security_entity_policy_update","description":"An enterprise owner updated the GitHub Advanced Security access policy for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":113},{"action":"org.advanced_security_policy_selected_member_disabled","description":"An enterprise owner prevented GitHub Advanced Security features from being enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.advanced_security_policy_selected_member_enabled","description":"An enterprise owner allowed GitHub Advanced Security features to be enabled for repositories owned by the organization.","docs_reference_links":"/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":15},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_disabled","description":"Third-party application access for outside collaborators was disabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests#enabling-or-disabling-integration-access-requests","docs_reference_titles":"Limiting OAuth app and GitHub App access requests and installations","fieldsIndex":0},{"action":"org.allow_third_party_access_requests_from_outside_collaborators_enabled","description":"Third-party application access for outside collaborators was enabled for the organization.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/limiting-oauth-app-and-github-app-access-requests-and-installations#enabling-or-disabling-app-access-requests","fieldsIndex":0},{"action":"org.archive","description":"The organization was archived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.audit_log_export","description":"An export of the organization audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#exporting-the-audit-log","fieldsIndex":114},{"action":"org.audit_log_git_event_export","description":"An export of the organization's Git events was created.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/audit-log-events-for-your-organization","fieldsIndex":115},{"action":"org.billing_signup_error","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.block_user","description":"An organization owner blocked a user from accessing the organization's repositories.","docs_reference_links":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/blocking-a-user-from-your-organization","fieldsIndex":116},{"action":"org.cancel_business_invitation","description":"An invitation for an organization to join an enterprise was revoked","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":117},{"action":"org.cancel_invitation","description":"An invitation sent to a user to join an organization was revoked.","docs_reference_links":"N/A","fieldsIndex":118},{"action":"org.clear_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_quality_entity_policy_update","description":"An organization owner updated the Code Quality entity policy for repositories owned by the organization.","docs_reference_links":"N/A","fieldsIndex":113},{"action":"org.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"org.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_disabled","description":"Scanning inactive repositories was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_scanning_scan_inactive_repos_enabled","description":"Scanning inactive repositories was enabled for an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":119},{"action":"org.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org.codeql_disabled","description":"Code scanning using the default setup was disabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":11},{"action":"org.codeql_enabled","description":"Code scanning using the default setup was enabled for an organization.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale","docs_reference_titles":"Configuring default setup for code scanning at scale","fieldsIndex":1},{"action":"org.codespaces_access_updated","description":"Access to use Codespaces on internal and private repositories was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/enabling-or-disabling-github-codespaces-for-your-organization","fieldsIndex":121},{"action":"org.codespaces_ownership_updated","description":"Ownership and payment for codespaces was updated for an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","docs_reference_titles":"/codespaces/managing-codespaces-for-your-organization/choosing-who-owns-and-pays-for-codespaces-in-your-organization","fieldsIndex":122},{"action":"org.codespaces_team_access_allowed","description":"A team has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"org.codespaces_team_access_revoked","description":"A team has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"org.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to all other repositories in an organization.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":32},{"action":"org.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to all other repositories in an organization was revoked.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":120},{"action":"org.codespaces_user_access_allowed","description":"A user has been allowed to use Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.codespaces_user_access_revoked","description":"A user has been prevented from using Codespaces for an organization.","docs_reference_links":"N/A","fieldsIndex":1},{"action":"org.config.disable_collaborators_only","description":"The interaction limit for collaborators only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":1},{"action":"org.config.disable_contributors_only","description":"The interaction limit for prior contributors only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":124},{"action":"org.config.enable_collaborators_only","description":"The interaction limit for collaborators only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":53},{"action":"org.config.enable_contributors_only","description":"The interaction limit for prior contributors only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":15},{"action":"org.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users only for an organization was enabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-organization#limiting-interactions-in-your-organization","fieldsIndex":53},{"action":"org.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-organization","fieldsIndex":53},{"action":"org.confirm_business_invitation","description":"An invitation for an organization to join an enterprise was confirmed.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#inviting-an-organization-to-join-your-enterprise-account","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":125},{"action":"org.connect_usage_metrics_export","description":"Server statistics were exported for the organization.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":0},{"action":"org.create","description":"An organization was created.","docs_reference_links":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","docs_reference_titles":"/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch","fieldsIndex":1},{"action":"org.create_actions_secret","description":"A GitHub Actions secret was created for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.create_actions_variable","description":"A GitHub Actions variable was created for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.create_integration_secret","description":"A Codespaces or Dependabot secret was created for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org_credential_authorization.deauthorize","description":"A member removed the SSO (SAML or OIDC) authorization from a credential that had access to your organization.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on/authorizing-a-personal-access-token-for-use-with-saml-single-sign-on","docs_reference_titles":"Authorizing a personal access token for use with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.grant","description":"A member authorized credentials for use with SAML or OIDC single sign-on.","docs_reference_links":"/authentication/authenticating-with-saml-single-sign-on","docs_reference_titles":"Authenticating with single sign-on","fieldsIndex":128},{"action":"org_credential_authorization.revoke","description":"An owner revoked authorized credentials.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":129},{"action":"org.delete","description":"An organization was deleted by a user or staff.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.delete_custom_image","description":"A custom image was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":53},{"action":"org.delete_custom_image_version","description":"A custom image version was deleted for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":53},{"action":"org.disable_member_team_creation_permission","description":"Team creation was limited to owners.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":53},{"action":"org.disable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were disabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.disable_reader_discussion_creation_permission","description":"An organization owner limited discussion creation to users with at least triage permission in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.disable_saml","description":"SAML single sign-on was disabled for an organization.","docs_reference_links":"N/A","fieldsIndex":130},{"action":"org.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":11},{"action":"org.disable_two_factor_requirement","description":"A two-factor authentication requirement was disabled for the organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_disabled","description":"An organization owner disabled the display of a commenter's full name in an organization. Members cannot see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.display_commenter_full_name_enabled","description":"An organization owner enabled the display of a commenter's full name in an organization. Members can see a comment author's full name.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.enable_member_team_creation_permission","description":"Team creation by members was allowed.","docs_reference_links":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/setting-team-creation-permissions-in-your-organization","fieldsIndex":53},{"action":"org.enable_oauth_app_restrictions","description":"Third-party application access restrictions for an organization were enabled.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization","fieldsIndex":15},{"action":"org.enable_reader_discussion_creation_permission","description":"An organization owner allowed users with read access to create discussions in an organization","docs_reference_links":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-discussion-creation-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.enable_saml","description":"SAML single sign-on was enabled for the organization.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/enabling-and-testing-saml-single-sign-on-for-your-organization","docs_reference_titles":"Enabling and testing SAML single sign-on for your organization","fieldsIndex":131},{"action":"org.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the organization was enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/displaying-ip-addresses-in-the-audit-log-for-your-organization","fieldsIndex":15},{"action":"org.enable_two_factor_requirement","description":"Two-factor authentication is now required for the organization.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":11},{"action":"org.integration_manager_added","description":"An organization owner granted a member access to manage all GitHub Apps owned by an organization.","docs_reference_links":"N/A","fieldsIndex":132},{"action":"org.integration_manager_removed","description":"An organization owner removed access to manage all GitHub Apps owned by an organization from an organization member.","docs_reference_links":"N/A","fieldsIndex":132},{"action":"org.invite_member","description":"A new user was invited to join an organization.","docs_reference_links":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/inviting-users-to-join-your-organization","fieldsIndex":118},{"action":"org.invite_to_business","description":"An organization was invited to join an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update protected branches was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update protected branches was enabled. Members of an organization can update protected branches.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.members_limit_warning","description":"An organization is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":133},{"action":"org.oauth_app_access_approved","description":"Access to an organization was granted for an OAuth App.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/approving-oauth-apps-for-your-organization","fieldsIndex":134},{"action":"org.oauth_app_access_blocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":134},{"action":"org.oauth_app_access_denied","description":"Access was disabled for an OAuth App that was previously approved.","docs_reference_links":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","docs_reference_titles":"/organizations/managing-oauth-access-to-your-organizations-data/denying-access-to-a-previously-approved-oauth-app-for-your-organization","fieldsIndex":134},{"action":"org.oauth_app_access_requested","description":"An organization member requested that an owner grant an OAuth App access to an organization.","docs_reference_links":"N/A","fieldsIndex":134},{"action":"org.oauth_app_access_unblocked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":134},{"action":"org.rate_limited_invites","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recovery_code_failed","description":"An organization owner failed to sign into a organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":135},{"action":"org.recovery_code_used","description":"An organization owner successfully signed into an organization with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/accessing-your-organization-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your organization if your identity provider is unavailable","fieldsIndex":15},{"action":"org.recovery_codes_downloaded","description":"An organization owner downloaded the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_generated","description":"An organization owner generated the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_printed","description":"An organization owner printed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.recovery_codes_viewed","description":"An organization owner viewed the organization's SSO recovery codes.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/downloading-your-organizations-saml-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your organization's SAML single sign-on recovery codes","fieldsIndex":15},{"action":"org.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-an-organization","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":60},{"action":"org.remove_actions_secret","description":"A GitHub Actions secret was removed from an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":136},{"action":"org.remove_actions_variable","description":"A GitHub Actions variable was removed from an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":136},{"action":"org.remove_billing_manager","description":"A billing manager was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","docs_reference_titles":"/organizations/managing-peoples-access-to-your-organization-with-roles/removing-a-billing-manager-from-your-organization, /organizations/keeping-your-organization-secure/managing-two-factor-authentication-for-your-organization/requiring-two-factor-authentication-in-your-organization","fieldsIndex":53},{"action":"org.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an organization.","docs_reference_links":"N/A","fieldsIndex":109},{"action":"org.remove_integration_secret","description":"A Codespaces or Dependabot secret was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":137},{"action":"org.remove_member","description":"A member was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_outside_collaborator","description":"An outside collaborator was removed from an organization, either manually or due to a two-factor authentication requirement.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"org.remove_security_manager","description":"N/A","docs_reference_links":"N/A","fieldsIndex":138},{"action":"org.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-an-organization","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":53},{"action":"org.rename","description":"An organization was renamed.","docs_reference_links":"N/A","fieldsIndex":139},{"action":"org.required_workflow_create","description":"Triggered when a required workflow is created.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_delete","description":"Triggered when a required workflow is deleted.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.required_workflow_update","description":"Triggered when a required workflow is updated.","docs_reference_links":"/actions/using-workflows/required-workflows","docs_reference_titles":"/actions/using-workflows/required-workflows","fieldsIndex":0},{"action":"org.restore_member","description":"An organization member was restored.","docs_reference_links":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","docs_reference_titles":"/organizations/managing-membership-in-your-organization/reinstating-a-former-member-of-your-organization","fieldsIndex":1},{"action":"org.revoke_external_identity","description":"A member's linked identity was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.revoke_sso_session","description":"A member's SAML session was revoked.","docs_reference_links":"/organizations/granting-access-to-your-organization-with-saml-single-sign-on/viewing-and-managing-a-members-saml-access-to-your-organization#viewing-and-revoking-a-linked-identity","docs_reference_titles":"Viewing and managing a member's SAML access to your organization","fieldsIndex":15},{"action":"org.runner_group_created","description":"A self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#creating-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_removed","description":"A self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"org.runner_group_renamed","description":"A self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":142},{"action":"org.runner_group_runner_removed","description":"The REST API was used to remove a self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":143},{"action":"org.runner_group_runners_added","description":"A self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":141},{"action":"org.runner_group_runners_updated","description":"A runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":141},{"action":"org.runner_group_updated","description":"The configuration of a self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":140},{"action":"org.runner_group_visiblity_updated","description":"The visibility of a self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":144},{"action":"org.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this organization.","docs_reference_links":"N/A","fieldsIndex":119},{"action":"org.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this organization.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"org_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":11},{"action":"org_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the organization level","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","docs_reference_titles":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization#allowing-validity-checks-for-partner-patterns-in-an-organization","fieldsIndex":53},{"action":"org_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":53},{"action":"org_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":1},{"action":"org_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":15},{"action":"org.secret_scanning_custom_pattern_push_protection_disabled","description":"Push protection for a custom pattern for secret scanning was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org.secret_scanning_custom_pattern_push_protection_enabled","description":"Push protection for a custom pattern for secret scanning was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-organization","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"org_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in an organization.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":1},{"action":"org_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the organization level","docs_reference_links":"N/A","fieldsIndex":0},{"action":"org_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the organization level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":15},{"action":"org_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the organization level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_custom_message_disabled","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":1},{"action":"org.secret_scanning_push_protection_custom_message_enabled","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_custom_message_updated","description":"The custom message triggered by an attempted push to a push-protected repository was updated for an organization.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#enabling-secret-scanning-as-a-push-protection-for-an-organization","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_disable","description":"Push protection for secret scanning was disabled.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":11},{"action":"org.secret_scanning_push_protection_enable","description":"Push protection for secret scanning was enabled.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_disable","description":"Push protection for secret scanning was disabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org.secret_scanning_push_protection_new_repos_enable","description":"Push protection for secret scanning was enabled for all new repositories in the organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":53},{"action":"org_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":145},{"action":"org_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your organization.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations","docs_reference_titles":"Push protection","fieldsIndex":146},{"action":"org.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the CodeQL pull request alerts page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.security_center_export_coverage","description":"A CSV export was requested on the Coverage page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"org.security_center_export_overview_dashboard","description":"A CSV export was requested on the Overview Dashboard page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"org.security_center_export_risk","description":"A CSV export was requested on the Risk page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"org.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"org.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"org.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":150},{"action":"org.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":53},{"action":"org.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-github-actions-settings-for-your-organization","fieldsIndex":53},{"action":"org.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#requiring-approval-for-workflows-from-public-forks","fieldsIndex":151},{"action":"org.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":151},{"action":"org.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in an organization was changed.","docs_reference_links":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-organization","fieldsIndex":152},{"action":"org.set_custom_invitation_rate_limit","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#setting-the-permissions-of-the-github_token-for-your-organization","fieldsIndex":153},{"action":"org.set_fork_pr_workflows_policy","description":"The policy for workflows on private repository forks was changed.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#enabling-workflows-for-private-repository-forks","fieldsIndex":151},{"action":"org.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":154},{"action":"org.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":155},{"action":"org.transfer","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/user-management/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":156},{"action":"org.transfer_outgoing","description":"An organization was transferred between enterprise accounts.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/adding-organizations-to-your-enterprise#transferring-an-organization-between-enterprise-accounts","docs_reference_titles":"Adding organizations to your enterprise","fieldsIndex":156},{"action":"org.unarchive","description":"The organization was unarchived.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.unblock_user","description":"A user was unblocked from an organization.","docs_reference_links":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","docs_reference_titles":"/communities/maintaining-your-safety-on-github/unblocking-a-user-from-your-organization","fieldsIndex":116},{"action":"org.update_actions_secret","description":"A GitHub Actions secret was updated for an organization.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-an-organization","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":126},{"action":"org.update_actions_settings","description":"An organization owner or site administrator updated GitHub Actions policy settings for an organization.","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization","fieldsIndex":157},{"action":"org.update_actions_variable","description":"A GitHub Actions variable was updated for an organization.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-an-organization","docs_reference_titles":"Store information in variables","fieldsIndex":126},{"action":"org.update_custom_images_policy","description":"The enterprise updated GitHub Actions custom image policy settings for an organization.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":158},{"action":"org.update_default_repository_permission","description":"The default repository permission level for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":159},{"action":"org.update_immutable_releases_settings_policy","description":"The settings policy for immutable releases was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":160},{"action":"org.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for an organization.","docs_reference_links":"N/A","fieldsIndex":127},{"action":"org.update_member","description":"A person's role was changed from owner to member or member to owner.","docs_reference_links":"N/A","fieldsIndex":159},{"action":"org.update_member_repository_creation_permission","description":"The create repository permission for organization members was changed.","docs_reference_links":"N/A","fieldsIndex":161},{"action":"org.update_member_repository_invitation_permission","description":"An organization owner changed the policy setting for organization members inviting outside collaborators to repositories.","docs_reference_links":"/organizations/managing-organization-settings/setting-permissions-for-adding-outside-collaborators","docs_reference_titles":"Setting permissions for adding outside collaborators","fieldsIndex":162},{"action":"org.update_new_repository_default_branch_setting","description":"The name of the default branch was changed for new repositories in the organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/managing-the-default-branch-name-for-repositories-in-your-organization","fieldsIndex":15},{"action":"org.update_repo_self_hosted_runners_policy","description":"The repository self-hosted runners policy was updated","docs_reference_links":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","docs_reference_titles":"/organizations/managing-organization-settings/disabling-or-limiting-github-actions-for-your-organization#limiting-the-use-of-self-hosted-runners","fieldsIndex":163},{"action":"org.update_saml_provider_settings","description":"An organization's SAML provider settings were updated.","docs_reference_links":"N/A","fieldsIndex":131},{"action":"org.update_terms_of_service","description":"An organization changed between the Standard Terms of Service and the GitHub Customer Agreement.","docs_reference_links":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","docs_reference_titles":"/organizations/managing-organization-settings/upgrading-to-the-github-customer-agreement","fieldsIndex":11},{"action":"organization_custom_property_value.create","description":"An organization's custom property value was manually set for the first time.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":164},{"action":"organization_custom_property_value.destroy","description":"An organization's custom property value was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":164},{"action":"organization_default_label.create","description":"A default label was created for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#creating-a-default-label","fieldsIndex":1},{"action":"organization_default_label.destroy","description":"A default label was deleted for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#deleting-a-default-label","fieldsIndex":15},{"action":"organization_default_label.update","description":"A default label was edited for repositories in an organization.","docs_reference_links":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","docs_reference_titles":"/organizations/managing-organization-settings/managing-default-labels-for-repositories-in-your-organization#editing-a-default-label","fieldsIndex":15},{"action":"organization_domain.approve","description":"A domain was approved for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#approving-a-domain-for-your-organization","fieldsIndex":165},{"action":"organization_domain.create","description":"A domain was added to an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":165},{"action":"organization_domain.destroy","description":"A domain was removed from an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#removing-an-approved-or-verified-domain","fieldsIndex":165},{"action":"organization_domain.verify","description":"A domain was verified for an organization.","docs_reference_links":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","docs_reference_titles":"/organizations/managing-organization-settings/verifying-or-approving-a-domain-for-your-organization#verifying-a-domain-for-your-organization","fieldsIndex":165},{"action":"organization_moderators.add_team","description":"A team was added as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"organization_moderators.add_user","description":"A user was added as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_moderators.remove_team","description":"A team was removed as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":123},{"action":"organization_moderators.remove_user","description":"A user was removed as an organization moderator.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"organization_projects_change.clear","description":"An enterprise owner cleared the policy setting for organization-wide project boards in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":11},{"action":"organization_projects_change.disable","description":"Organization projects were disabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_projects_change.enable","description":"Organization projects were enabled for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise#enforcing-a-policy-for-organization-wide-project-boards","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":53},{"action":"organization_role.assign","description":"An organization role was assigned to a user or team.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":166},{"action":"organization_role.create","description":"A custom organization role was created in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":167},{"action":"organization_role.destroy","description":"A custom organization role was deleted in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":167},{"action":"organization_role.revoke","description":"A user or team was unassigned an organization role.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":166},{"action":"organization_role.update","description":"A custom organization role was edited in an organization.","docs_reference_links":"/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles","docs_reference_titles":"Permissions of custom organization roles","fieldsIndex":168},{"action":"organization_wide_project_base_role.update","description":"An organization's default project base role was updated.","docs_reference_links":"N/A","fieldsIndex":169},{"action":"packages.package_deleted","description":"An entire package was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":170},{"action":"packages.package_published","description":"A package was published or republished to an organization.","docs_reference_links":"N/A","fieldsIndex":171},{"action":"packages.package_version_deleted","description":"A specific package version was deleted.","docs_reference_links":"/packages/learn-github-packages/deleting-and-restoring-a-package","docs_reference_titles":"/packages/learn-github-packages/deleting-and-restoring-a-package","fieldsIndex":172},{"action":"packages.package_version_published","description":"A specific package version was published or republished to a package.","docs_reference_links":"N/A","fieldsIndex":173},{"action":"pages_protected_domain.create","description":"A GitHub Pages verified domain was created for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":174},{"action":"pages_protected_domain.delete","description":"A GitHub Pages verified domain was deleted from an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":174},{"action":"pages_protected_domain.verify","description":"A GitHub Pages domain was verified for an organization or enterprise.","docs_reference_links":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","docs_reference_titles":"/pages/configuring-a-custom-domain-for-your-github-pages-site/verifying-your-custom-domain-for-github-pages","fieldsIndex":174},{"action":"payment_method.create","description":"A new payment method was added, such as a new credit card or PayPal account.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.remove","description":"A payment method was removed.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"payment_method.update","description":"An existing payment method was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_granted","description":"A fine-grained personal access token was granted access to resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":175},{"action":"personal_access_token.access_restriction_disabled","description":"The configured restriction for access to resources via personal access tokens was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_restriction_enabled","description":"The configured restriction for access to resources via personal access tokens was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.access_revoked","description":"A fine-grained personal access token was revoked. The token can still read public organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/reviewing-and-revoking-personal-access-tokens-in-your-organization","fieldsIndex":176},{"action":"personal_access_token.auto_approve_grant_requests_disabled","description":"Triggered when fine-grained personal access tokens can access organization resources without prior approval.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_enabled","description":"Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.expiration_limit_set","description":"A personal access token expiration limit was set.","docs_reference_links":"N/A","fieldsIndex":177},{"action":"personal_access_token.expiration_limit_unset","description":"A personal access token expiration limit was unset.","docs_reference_links":"N/A","fieldsIndex":178},{"action":"personal_access_token.request_cancelled","description":"A pending request for a fine-grained personal access token to access organization resources was canceled.","docs_reference_links":"N/A","fieldsIndex":179},{"action":"personal_access_token.request_created","description":"Triggered when a fine-grained personal access token was created to access organization resources and the organization requires approval before the token can access organization resources.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":180},{"action":"personal_access_token.request_denied","description":"A request for a fine-grained personal access token to access organization resources was denied.","docs_reference_links":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","docs_reference_titles":"/organizations/managing-programmatic-access-to-your-organization/managing-requests-for-personal-access-tokens-in-your-organization","fieldsIndex":181},{"action":"prebuild_configuration.create","description":"A GitHub Codespaces prebuild configuration for a repository was created.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"prebuild_configuration.destroy","description":"A GitHub Codespaces prebuild configuration for a repository was deleted.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"prebuild_configuration.run_triggered","description":"A user initiated a run of a GitHub Codespaces prebuild configuration for a repository branch.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"prebuild_configuration.update","description":"A GitHub Codespaces prebuild configuration for a repository was edited.","docs_reference_links":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","docs_reference_titles":"/codespaces/prebuilding-your-codespaces/about-github-codespaces-prebuilds","fieldsIndex":182},{"action":"premium_runner.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"premium_runner.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"premium_runner.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":48},{"action":"private_repository_forking.clear","description":"An enterprise owner cleared the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"private_repository_forking.disable","description":"An enterprise owner disabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are never allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"private_repository_forking.enable","description":"An enterprise owner enabled the policy setting for allowing forks of private and internal repositories, for a repository, organization or enterprise. Private and internal repositories are always allowed to be forked.","docs_reference_links":"N/A","fieldsIndex":183},{"action":"private_vulnerability_reporting.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"private_vulnerability_reporting_new_repos.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"profile_picture.update","description":"A profile picture was updated.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile","docs_reference_titles":"Personalize your profile","fieldsIndex":184},{"action":"project.access","description":"A project board visibility was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project_base_role.update","description":"A project's base role was updated.","docs_reference_links":"N/A","fieldsIndex":185},{"action":"project.close","description":"A project board was closed.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/closing-a-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":186},{"action":"project_collaborator.add","description":"A collaborator was added to a project.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project_collaborator.remove","description":"A collaborator was removed from a project.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project_collaborator.update","description":"A project collaborator's permission level was changed.","docs_reference_links":"N/A","fieldsIndex":187},{"action":"project.create","description":"A project board was created.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project.delete","description":"A project board was deleted.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"project_field.create","description":"A field was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields","fieldsIndex":53},{"action":"project_field.delete","description":"A field was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","docs_reference_titles":"/issues/planning-and-tracking-with-projects/understanding-fields/deleting-custom-fields","fieldsIndex":189},{"action":"project.link","description":"A repository was linked to a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.open","description":"A project board was reopened.","docs_reference_links":"/issues/organizing-your-work-with-project-boards/managing-project-boards/reopening-a-closed-project-board","docs_reference_titles":"Planning and tracking with Projects","fieldsIndex":186},{"action":"project.rename","description":"A project board was renamed.","docs_reference_links":"N/A","fieldsIndex":190},{"action":"project.unlink","description":"A repository was unlinked from a project board.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"project.update_org_permission","description":"The project's base-level permission for all organization members was changed or removed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"project.update_team_permission","description":"A team's project board permission level was changed or when a team was added or removed from a project board.","docs_reference_links":"N/A","fieldsIndex":191},{"action":"project.update_user_permission","description":"A user was added to or removed from a project board or had their permission level changed.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"project_view.create","description":"A view was created in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":53},{"action":"project_view.delete","description":"A view was deleted in a project board.","docs_reference_links":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","docs_reference_titles":"/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/managing-your-views","fieldsIndex":53},{"action":"project.visibility_private","description":"A project's visibility was changed from public to private.","docs_reference_links":"N/A","fieldsIndex":192},{"action":"project.visibility_public","description":"A project's visibility was changed from private to public.","docs_reference_links":"N/A","fieldsIndex":192},{"action":"protected_branch.authorized_users_teams","description":"The users, teams, or integrations allowed to bypass a branch protection were changed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches","fieldsIndex":193},{"action":"protected_branch.branch_allowances","description":"A protected branch allowance was given to a specific user, team or integration.","docs_reference_links":"N/A","fieldsIndex":194},{"action":"protected_branch.create","description":"Branch protection was enabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.destroy","description":"Branch protection was disabled on a branch.","docs_reference_links":"N/A","fieldsIndex":195},{"action":"protected_branch.dismiss_stale_reviews","description":"Enforcement of dismissing stale pull requests was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":196},{"action":"protected_branch.dismissal_restricted_users_teams","description":"Enforcement of restricting users and/or teams who can dismiss reviews was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":197},{"action":"protected_branch.policy_override","description":"A branch protection requirement was overridden by a repository administrator.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.rejected_ref_update","description":"A branch update attempt was rejected.","docs_reference_links":"N/A","fieldsIndex":198},{"action":"protected_branch.update_admin_enforced","description":"Branch protection was enforced for repository administrators.","docs_reference_links":"N/A","fieldsIndex":199},{"action":"protected_branch.update_allow_deletions_enforcement_level","description":"Branch deletion was enabled or disabled for a protected branch.","docs_reference_links":"N/A","fieldsIndex":200},{"action":"protected_branch.update_allow_force_pushes_enforcement_level","description":"Force pushes were enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":201},{"action":"protected_branch.update_ignore_approvals_from_contributors","description":"Ignoring of approvals from contributors to a pull request was enabled or disabled for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":202},{"action":"protected_branch.update_linear_history_requirement_enforcement_level","description":"Required linear commit history was enabled or disabled for a branch.","docs_reference_links":"N/A","fieldsIndex":203},{"action":"protected_branch.update_lock_allows_fetch_and_merge","description":"Fork syncing was enabled or disabled for a read-only branch","docs_reference_links":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":204},{"action":"protected_branch.update_lock_branch_enforcement_level","description":"The enforcement of a branch lock was updated.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#lock-branch","fieldsIndex":205},{"action":"protected_branch.update_merge_queue_enforcement_level","description":"Enforcement of the merge queue was modified for a branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-merge-queue","fieldsIndex":206},{"action":"protected_branch.update_name","description":"A branch name pattern was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":207},{"action":"protected_branch.update_pull_request_reviews_enforcement_level","description":"Enforcement of required pull request reviews was updated for a branch. Can be 0 (deactivated), 1 (non-admins), or 2 (everyone).","docs_reference_links":"N/A","fieldsIndex":208},{"action":"protected_branch.update_require_code_owner_review","description":"Enforcement of required code owner review was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":209},{"action":"protected_branch.update_require_last_push_approval","description":"Someone other than the person who pushed the last code-modifying commit to the branch must approve pull requests for the branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-pull-request-reviews-before-merging","fieldsIndex":210},{"action":"protected_branch.update_required_approving_review_count","description":"Enforcement of the required number of approvals before merging was updated on a branch.","docs_reference_links":"N/A","fieldsIndex":211},{"action":"protected_branch.update_required_status_checks_enforcement_level","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":212},{"action":"protected_branch.update_signature_requirement_enforcement_level","description":"Enforcement of required commit signing was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":213},{"action":"protected_branch.update_strict_required_status_checks_policy","description":"Enforcement of required status checks was updated for a branch.","docs_reference_links":"N/A","fieldsIndex":214},{"action":"public_key.create","description":"An SSH key was added to a user account or a deploy key was added to a repository.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/adding-a-new-ssh-key-to-your-github-account","fieldsIndex":215},{"action":"public_key.delete","description":"An SSH key was removed from a user account or a deploy key was removed from a repository.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/reviewing-your-ssh-keys","fieldsIndex":216},{"action":"public_key.unverification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":217},{"action":"public_key.unverify","description":"A user account's SSH key or a repository's deploy key was unverified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":218},{"action":"public_key.update","description":"A user account's SSH key or a repository's deploy key was updated.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verification_failure","description":"A user account's SSH key or a repository's deploy key was unable to be verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"public_key.verify","description":"A user account's SSH key or a repository's deploy key was verified.","docs_reference_links":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","docs_reference_titles":"/authentication/connecting-to-github-with-ssh/managing-deploy-keys#deploy-keys","fieldsIndex":215},{"action":"pull_request.close","description":"A pull request was closed without being merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/closing-a-pull-request","docs_reference_titles":"Closing a pull request","fieldsIndex":219},{"action":"pull_request.converted_to_draft","description":"A pull request was converted to a draft.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#converting-a-pull-request-to-a-draft","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.create","description":"A pull request was created.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request","docs_reference_titles":"Creating a pull request","fieldsIndex":221},{"action":"pull_request.create_review_request","description":"A review was requested on a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.in_progress","description":"A pull request was marked as in progress.","docs_reference_links":"N/A","fieldsIndex":223},{"action":"pull_request.indirect_merge","description":"A pull request was considered merged because the pull request's commits were merged into the target branch.","docs_reference_links":"N/A","fieldsIndex":219},{"action":"pull_request.merge","description":"A pull request was merged.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/merging-a-pull-request","docs_reference_titles":"Merging a pull request","fieldsIndex":219},{"action":"pull_request.ready_for_review","description":"A pull request was marked as ready for review.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/changing-the-stage-of-a-pull-request#marking-a-pull-request-as-ready-for-review","docs_reference_titles":"Changing the stage of a pull request","fieldsIndex":220},{"action":"pull_request.rebase","description":"A pull request was rebased.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request.remove_review_request","description":"A review request was removed from a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":222},{"action":"pull_request.reopen","description":"A pull request was reopened after previously being closed.","docs_reference_links":"N/A","fieldsIndex":220},{"action":"pull_request_review_comment.create","description":"A review comment was added to a pull request.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/about-pull-request-reviews","docs_reference_titles":"Pull request reviews","fieldsIndex":224},{"action":"pull_request_review_comment.delete","description":"A review comment on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":225},{"action":"pull_request_review_comment.update","description":"A review comment on a pull request was changed.","docs_reference_links":"N/A","fieldsIndex":226},{"action":"pull_request_review.delete","description":"A review on a pull request was deleted.","docs_reference_links":"N/A","fieldsIndex":227},{"action":"pull_request_review.dismiss","description":"A review on a pull request was dismissed.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/dismissing-a-pull-request-review","docs_reference_titles":"Dismissing a pull request review","fieldsIndex":227},{"action":"pull_request_review.submit","description":"A review on a pull request was submitted.","docs_reference_links":"/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/reviewing-proposed-changes-in-a-pull-request#submitting-your-review","docs_reference_titles":"Reviewing proposed changes in a pull request","fieldsIndex":227},{"action":"repo.access","description":"The visibility of a repository changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/managing-repository-settings/setting-repository-visibility","fieldsIndex":228},{"action":"repo.actions_enabled","description":"GitHub Actions was enabled for a repository.","docs_reference_links":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","docs_reference_titles":"organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization#using-the-audit-log-api","fieldsIndex":229},{"action":"repo.add_member","description":"A collaborator was added to a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/inviting-collaborators-to-a-personal-repository","docs_reference_titles":"Inviting collaborators to a personal repository","fieldsIndex":230},{"action":"repo.add_topic","description":"A topic was added to a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics","fieldsIndex":231},{"action":"repo.advanced_security_disabled","description":"GitHub Advanced Security was disabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.advanced_security_enabled","description":"GitHub Advanced Security was enabled for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository","fieldsIndex":232},{"action":"repo.archived","description":"A repository was archived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.change_merge_setting","description":"Pull request merge options were changed for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.code_quality_disabled","description":"Code Quality was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":234},{"action":"repo.code_quality_enabled","description":"Code Quality was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repo.code_quality_updated","description":"Code Quality was updated for a repository.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repo.code_scanning_ai_findings_disabled","description":"AI-powered findings for code scanning were disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"repo.code_scanning_ai_findings_enabled","description":"AI-powered findings for code scanning were enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":103},{"action":"repo.code_scanning_analysis_deleted","description":"Code scanning analysis for a repository was deleted.","docs_reference_links":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","docs_reference_titles":"/rest/code-scanning#delete-a-code-scanning-analysis-from-a-repository","fieldsIndex":235},{"action":"repo.code_scanning_autofix_disabled","description":"Autofix for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_autofix_enabled","description":"Autofix for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_autofix_third_party_tools_disabled","description":"Autofix for third party tools for code scanning alerts was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_autofix_third_party_tools_enabled","description":"Autofix for third party tools for code scanning alerts was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_configuration_for_branch_deleted","description":"A code scanning configuration for a branch of a repository was deleted.","docs_reference_links":"/code-security/code-scanning/managing-code-scanning-alerts/managing-code-scanning-alerts-for-your-repository#removing-stale-configurations-and-alerts-from-a-branch","docs_reference_titles":"Resolving code scanning alerts","fieldsIndex":237},{"action":"repo.code_scanning_delegated_alert_dismissal_disabled","description":"Prevention of direct alert dismissal for code scanning was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.code_scanning_delegated_alert_dismissal_enabled","description":"Prevention of direct alert dismissal for code scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.codeql_disabled","description":"Code scanning using the default setup was disabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":231},{"action":"repo.codeql_enabled","description":"Code scanning using the default setup was enabled for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":238},{"action":"repo.codeql_updated","description":"Code scanning using the default setup was updated for a repository.","docs_reference_links":"/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning","docs_reference_titles":"Configuring default setup for code scanning","fieldsIndex":238},{"action":"repo.codespaces_trusted_repo_access_granted","description":"GitHub Codespaces was granted trusted repository access to this repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.codespaces_trusted_repo_access_revoked","description":"GitHub Codespaces trusted repository access to this repository was revoked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.config.disable_collaborators_only","description":"The interaction limit for collaborators only was disabled.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":234},{"action":"repo.config.disable_contributors_only","description":"The interaction limit for prior contributors only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":239},{"action":"repo.config.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only was disabled in a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":234},{"action":"repo.config.enable_collaborators_only","description":"The interaction limit for collaborators only was enabled in a repository Users that are not collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":32},{"action":"repo.config.enable_contributors_only","description":"The interaction limit for prior contributors only was enabled in a repository Users that are not prior contributors, collaborators or organization members were unable to interact with a repository for a set duration.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":103},{"action":"repo.config.enable_sockpuppet_disallowed","description":"The interaction limit for existing users was enabled in a repository New users aren't able to interact with a repository for a set duration Existing users of the repository, contributors, collaborators or organization members are able to interact with a repository.","docs_reference_links":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","docs_reference_titles":"/communities/moderating-comments-and-conversations/limiting-interactions-in-your-repository","fieldsIndex":18},{"action":"repo.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-a-repository","fieldsIndex":32},{"action":"repo.create","description":"A repository was created.","docs_reference_links":"/repositories/creating-and-managing-repositories/creating-a-new-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/creating-a-new-repository","fieldsIndex":240},{"action":"repo.create_actions_secret","description":"A GitHub Actions secret was created for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.create_actions_variable","description":"A GitHub Actions variable was created for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.create_integration_secret","description":"A Codespaces or Dependabot secret was created for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.destroy","description":"A repository was deleted.","docs_reference_links":"/repositories/creating-and-managing-repositories/deleting-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/deleting-a-repository","fieldsIndex":240},{"action":"repo.download_zip","description":"A source code archive of a repository was downloaded as a ZIP file.","docs_reference_links":"/repositories/working-with-files/using-files/downloading-source-code-archives","docs_reference_titles":"/repositories/working-with-files/using-files/downloading-source-code-archives","fieldsIndex":233},{"action":"repo.immutable_releases_settings_disabled","description":"The setting for immutable releases was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.immutable_releases_settings_enabled","description":"The setting for immutable releases was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_cname","description":"A GitHub Pages custom domain was modified in a repository.","docs_reference_links":"N/A","fieldsIndex":243},{"action":"repo.pages_create","description":"A GitHub Pages site was created.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_destroy","description":"A GitHub Pages site was deleted.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_disabled","description":"HTTPS redirects were disabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_https_redirect_enabled","description":"HTTPS redirects were enabled for a GitHub Pages site.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_private","description":"A GitHub Pages site visibility was changed to private.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_public","description":"A GitHub Pages site visibility was changed to public.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.pages_soft_delete","description":"A GitHub Pages site was soft-deleted because its owner's plan changed.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.pages_soft_delete_restore","description":"A GitHub Pages site that was previously soft-deleted was restored.","docs_reference_links":"N/A","fieldsIndex":233},{"action":"repo.pages_source","description":"A GitHub Pages source was modified.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.register_self_hosted_runner","description":"A new self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":245},{"action":"repo.remove_actions_secret","description":"A GitHub Actions secret was deleted for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":246},{"action":"repo.remove_actions_variable","description":"A GitHub Actions variable was deleted for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":246},{"action":"repo.remove_integration_secret","description":"A Codespaces or Dependabot secret was deleted for a repository.","docs_reference_links":"N/A","fieldsIndex":247},{"action":"repo.remove_member","description":"A collaborator was removed from a repository.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/removing-a-collaborator-from-a-personal-repository","docs_reference_titles":"Removing a collaborator from a personal repository","fieldsIndex":233},{"action":"repo.remove_self_hosted_runner","description":"A self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":32},{"action":"repo.remove_topic","description":"A topic was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repo.rename","description":"A repository was renamed.","docs_reference_links":"/repositories/creating-and-managing-repositories/renaming-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/renaming-a-repository","fieldsIndex":248},{"action":"repo.rename_branch","description":"A branch was renamed.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-branches-in-your-repository/renaming-a-branch","fieldsIndex":249},{"action":"repo.restore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.self_hosted_runner_offline","description":"The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"repo.self_hosted_runner_online","description":"The runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"repo.self_hosted_runner_updated","description":"The runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":150},{"action":"repo.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":233},{"action":"repo.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository","fieldsIndex":233},{"action":"repo.set_actions_fork_pr_approvals_policy","description":"The setting for requiring approvals for workflows from public forks was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-required-approval-for-workflows-from-public-forks","fieldsIndex":250},{"action":"repo.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-forks-of-private-repositories","fieldsIndex":250},{"action":"repo.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#configuring-the-retention-period-for-github-actions-artifacts-and-logs-in-your-repository","fieldsIndex":251},{"action":"repo.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#setting-the-permissions-of-the-github_token-for-your-repository","fieldsIndex":252},{"action":"repo.set_fork_pr_workflows_policy","description":"Triggered when the policy for workflows on private repository forks is changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#enabling-workflows-for-private-repository-forks","fieldsIndex":250},{"action":"repo.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for a repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-github-actions-settings-for-a-repository#preventing-github-actions-from-creating-or-approving-pull-requests","fieldsIndex":253},{"action":"repo.staff_unlock","description":"An enterprise owner or GitHub staff (with permission from a repository administrator) temporarily unlocked the repository.","docs_reference_links":"N/A","fieldsIndex":236},{"action":"repo.transfer","description":"A user accepted a request to receive a transferred repository.","docs_reference_links":"/repositories/creating-and-managing-repositories/transferring-a-repository","docs_reference_titles":"/repositories/creating-and-managing-repositories/transferring-a-repository","fieldsIndex":254},{"action":"repo.transfer_outgoing","description":"A repository was transferred to another repository network.","docs_reference_links":"N/A","fieldsIndex":255},{"action":"repo.transfer_start","description":"A user sent a request to transfer a repository to another user or organization.","docs_reference_links":"N/A","fieldsIndex":244},{"action":"repo.unarchived","description":"A repository was unarchived.","docs_reference_links":"/repositories/archiving-a-github-repository","docs_reference_titles":"/repositories/archiving-a-github-repository","fieldsIndex":233},{"action":"repo.update_actions_access_settings","description":"The setting to control how a repository was used by GitHub Actions workflows in other repositories was changed.","docs_reference_links":"N/A","fieldsIndex":256},{"action":"repo.update_actions_secret","description":"A GitHub Actions secret was updated for a repository.","docs_reference_links":"/actions/security-guides/using-secrets-in-github-actions#creating-secrets-for-a-repository","docs_reference_titles":"Using secrets in GitHub Actions","fieldsIndex":241},{"action":"repo.update_actions_settings","description":"A repository administrator changed GitHub Actions policy settings for a repository.","docs_reference_links":"N/A","fieldsIndex":257},{"action":"repo.update_actions_variable","description":"A GitHub Actions variable was updated for a repository.","docs_reference_links":"/actions/learn-github-actions/variables#creating-configuration-variables-for-a-repository","docs_reference_titles":"Store information in variables","fieldsIndex":241},{"action":"repo.update_default_branch","description":"The default branch for a repository was changed.","docs_reference_links":"N/A","fieldsIndex":232},{"action":"repo.update_integration_secret","description":"A Codespaces or Dependabot secret was updated for a repository.","docs_reference_links":"N/A","fieldsIndex":242},{"action":"repo.update_member","description":"A user's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":258},{"action":"repository_advisory.close","description":"Someone closed a security advisory.","docs_reference_links":"/code-security/security-advisories/working-with-repository-security-advisories/about-repository-security-advisories","docs_reference_titles":"Repository security advisories","fieldsIndex":32},{"action":"repository_advisory.create_confidential_comment","description":"Someone created a confidential comment on a repository security advisory.","docs_reference_links":"N/A","fieldsIndex":259},{"action":"repository_advisory.cve_request","description":"Someone requested a CVE (Common Vulnerabilities and Exposures) number from GitHub for a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.github_broadcast","description":"GitHub made a security advisory public in the GitHub Advisory Database.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"repository_advisory.github_withdraw","description":"GitHub withdrew a security advisory that was published in error.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"repository_advisory.open","description":"Someone opened a draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.publish","description":"Someone published a security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.read_confidential_comments","description":"Confidential comments on a repository security advisory were read by someone.","docs_reference_links":"N/A","fieldsIndex":260},{"action":"repository_advisory.reopen","description":"Someone reopened as draft security advisory.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_advisory.update","description":"Someone edited a draft or published security advisory.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"repository_branch_protection_evaluation.disable","description":"Branch protections were disabled for the repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_branch_protection_evaluation.enable","description":"Branch protections were enabled for this repository.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule","fieldsIndex":15},{"action":"repository_code_security.disable","description":"Code security was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_code_security.enable","description":"Code security was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_content_analysis.disable","description":"Data use settings were disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_content_analysis.enable","description":"Data use settings were enabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":0},{"action":"repository_dependency_graph_autosubmit.disable","description":"Automatic dependency submission was disabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph_autosubmit.enable","description":"Automatic dependency submission was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_graph.disable","description":"The dependency graph was disabled for a private repository.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-fea, tures-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-private-repositories","fieldsIndex":231},{"action":"repository_dependency_graph.enable","description":"The dependency graph was enabled for a private repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_dependency_updates_self_hosted.disabled","description":"Dependency updates on self-hosted runners was disabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":234},{"action":"repository_dependency_updates_self_hosted.enabled","description":"Dependency updates on self-hosted runners was enabled.","docs_reference_links":"code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/managing-dependabot-on-self-hosted-runners","docs_reference_titles":"Configuring Dependabot on self-hosted runners","fieldsIndex":231},{"action":"repository_image.create","description":"An image to represent a repository was uploaded.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_image.destroy","description":"An image to represent a repository was deleted.","docs_reference_links":"N/A","fieldsIndex":261},{"action":"repository_invitation.accept","description":"An invitation to join a repository was accepted.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_invitation.cancel","description":"An invitation to join a repository was canceled.","docs_reference_links":"N/A","fieldsIndex":263},{"action":"repository_invitation.create","description":"An invitation to join a repository was sent.","docs_reference_links":"N/A","fieldsIndex":263},{"action":"repository_invitation.reject","description":"An invitation to join a repository was declined.","docs_reference_links":"N/A","fieldsIndex":262},{"action":"repository_limit.reached","description":"An organization has reached their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":264},{"action":"repository_limit.warning","description":"An organization is approaching their repository limit.","docs_reference_links":"repositories/creating-and-managing-repositories/repository-limits","docs_reference_titles":"repositories/creating-and-managing-repositories/repository-limits","fieldsIndex":265},{"action":"repository_malware_alerts.disable","description":"Dependabot malware alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_malware_alerts.enable","description":"Dependabot malware alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_projects_change.clear","description":"The repository projects policy was removed for an organization, or all organizations in the enterprise Organization owners can now control their repository projects settings.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise","docs_reference_titles":"Enforcing policies for projects in your enterprise","fieldsIndex":15},{"action":"repository_projects_change.disable","description":"Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_projects_change.enable","description":"Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":32},{"action":"repository_ruleset.create","description":"A repository ruleset was created.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository","fieldsIndex":266},{"action":"repository_ruleset.destroy","description":"A repository ruleset was deleted.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#deleting-a-ruleset","fieldsIndex":266},{"action":"repository_ruleset.update","description":"A repository ruleset was edited.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/managing-rulesets-for-a-repository#editing-a-ruleset","fieldsIndex":267},{"action":"repository_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the repository level","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#allowing-validity-checks-for-partner-patterns-in-a-repository","fieldsIndex":231},{"action":"repository_secret_scanning_custom_pattern.create","description":"A custom pattern was created for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":18},{"action":"repository_secret_scanning_custom_pattern.delete","description":"A custom pattern was removed from secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#removing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":18},{"action":"repository_secret_scanning_custom_pattern.publish","description":"A custom pattern was published for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":236},{"action":"repository_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":236},{"action":"repository_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-a-repository","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":236},{"action":"repository_secret_scanning_custom_pattern.update","description":"Changes to a custom pattern were saved and a dry run was executed for secret scanning in a repository.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#editing-a-custom-pattern","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":18},{"action":"repository_secret_scanning.disable","description":"Secret scanning was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":231},{"action":"repository_secret_scanning.enable","description":"Secret scanning was enabled for a repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.disabled","description":"Metadata for secret scanning alerts has been disabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_extended_metadata.enabled","description":"Metadata for secret scanning alerts has been enabled at the repository level","docs_reference_links":"/code-security/secret-scanning/enabling-secret-scanning-features/enabling-extended-metadata-checks-for-your-repository","docs_reference_titles":"Enabling extended metadata checks for your repository","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the repository level","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the repository level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.add","description":"A role or team was added to the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":103},{"action":"repository_secret_scanning_push_protection_bypass_list.disable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Specific roles or teams\" to \"Anyone with write access\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.enable","description":"Push protection settings for \"Users who can bypass push protection for secret scanning\" changed from \"Anyone with write access\" to \"Specific roles or teams\" at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection_bypass_list.remove","description":"A role or team was removed from the push protection bypass list at the repository level.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#enabling-delegated-bypass-for-push-protection","docs_reference_titles":"Push protection","fieldsIndex":236},{"action":"repository_secret_scanning_push_protection.disable","description":"Secret scanning push protection was disabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_secret_scanning_push_protection.enable","description":"Secret scanning push protection was enabled for a repository.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning","docs_reference_titles":"Push protection","fieldsIndex":231},{"action":"repository_security_configuration.applied","description":"A code security configuration was applied to a repository.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_configuration.failed","description":"A code security configuration failed to attach to the repository.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_configuration.removed","description":"A code security configuration was removed from a repository.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_configuration.removed_by_settings_change","description":"A code security configuration was removed due to a change in repository or enterprise settings.","docs_reference_links":"N/A","fieldsIndex":268},{"action":"repository_security_updates.disable","description":"Dependabot security updates was disabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_security_updates.enable","description":"Dependabot security updates was enabled.","docs_reference_links":"/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates","docs_reference_titles":"Configuring Dependabot security updates","fieldsIndex":231},{"action":"repository_visibility_change.clear","description":"The repository visibility change setting was cleared for an organization or enterprise.","docs_reference_links":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-changes-to-repository-visibility","docs_reference_titles":"/organizations/managing-organization-settings/restricting-repository-visibility-changes-in-your-organization, Enforcing repository management policies in your enterprise","fieldsIndex":15},{"action":"repository_visibility_change.disable","description":"The ability for enterprise members to update a repository's visibility was disabled. Members are unable to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"repository_visibility_change.enable","description":"The ability for enterprise members to update a repository's visibility was enabled. Members are able to change repository visibilities in an organization, or all organizations in an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"repository_vulnerability_alert.assign","description":"A user was assigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":269},{"action":"repository_vulnerability_alert.auto_dismiss","description":"A Dependabot alert was automatically dismissed because its metadata matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":270},{"action":"repository_vulnerability_alert.auto_reopen","description":"A previously auto-dismissed Dependabot alert was automatically reopened because its metadata no longer matches an enabled Dependabot rule.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/using-alert-rules-to-prioritize-dependabot-alerts","docs_reference_titles":"Dependabot auto-triage rules","fieldsIndex":270},{"action":"repository_vulnerability_alert.create","description":"GitHub created a Dependabot alert because the repository uses a vulnerable dependency.","docs_reference_links":"/code-security/dependabot/dependabot-alerts/about-dependabot-alerts","docs_reference_titles":"Dependabot alerts","fieldsIndex":271},{"action":"repository_vulnerability_alert.dismiss","description":"A Dependabot alert was manually dismissed.","docs_reference_links":"N/A","fieldsIndex":272},{"action":"repository_vulnerability_alert.reintroduce","description":"A Dependabot alert was automatically reopened because the repository resumed use of a vulnerable dependency.","docs_reference_links":"N/A","fieldsIndex":271},{"action":"repository_vulnerability_alert.reopen","description":"A Dependabot alert was manually reopened.","docs_reference_links":"N/A","fieldsIndex":269},{"action":"repository_vulnerability_alert.resolve","description":"Changes were pushed to update and resolve a Dependabot alert in a project dependency.","docs_reference_links":"N/A","fieldsIndex":271},{"action":"repository_vulnerability_alert.unassign","description":"A user was unassigned to a Dependabot alert.","docs_reference_links":"N/A","fieldsIndex":269},{"action":"repository_vulnerability_alert.withdraw","description":"A Dependabot alert was withdrawn.","docs_reference_links":"N/A","fieldsIndex":273},{"action":"repository_vulnerability_alerts.authorized_users_teams","description":"The list of people or teams authorized to receive Dependabot alerts for the repository was updated.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#granting-access-to-security-alerts","fieldsIndex":236},{"action":"repository_vulnerability_alerts_auto_dismissal.disable","description":"Automatic dismissal of low-impact Dependabot alerts was disabled for the repository.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"repository_vulnerability_alerts_auto_dismissal.enable","description":"Automatic dismissal of low-impact Dependabot alerts was enabled for the repository.","docs_reference_links":"N/A","fieldsIndex":231},{"action":"repository_vulnerability_alerts.disable","description":"Dependabot alerts was disabled.","docs_reference_links":"N/A","fieldsIndex":274},{"action":"repository_vulnerability_alerts.enable","description":"Dependabot alerts was enabled.","docs_reference_links":"N/A","fieldsIndex":274},{"action":"required_status_check.create","description":"A status check was marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":275},{"action":"required_status_check.destroy","description":"A status check was no longer marked as required for a protected branch.","docs_reference_links":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","docs_reference_titles":"/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches#require-status-checks-before-merging","fieldsIndex":275},{"action":"restrict_notification_delivery.disable","description":"Email notification restrictions for an organization or enterprise were disabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":276},{"action":"restrict_notification_delivery.enable","description":"Email notification restrictions for an organization or enterprise were enabled.","docs_reference_links":"/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/restricting-email-notifications-for-your-organization, /admin/policies/enforcing-policies-for-your-enterprise/restricting-email-notifications-for-your-enterprise","docs_reference_titles":"Restricting email notifications for your organization, Restricting email notifications for your enterprise","fieldsIndex":277},{"action":"role.create","description":"A new custom repository role was created.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":278},{"action":"role.destroy","description":"A custom repository role was deleted.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":279},{"action":"role.update","description":"A custom repository role was edited.","docs_reference_links":"/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/managing-custom-repository-roles-for-an-organization","docs_reference_titles":"Managing custom repository roles for an organization","fieldsIndex":280},{"action":"sandbox.add_port","description":"A forwarded port was added to a sandbox.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.create","description":"A sandbox was created.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.delete","description":"A sandbox was deleted.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.generate_token","description":"A token was generated for a sandbox.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.remove_port","description":"A forwarded port was removed from a sandbox.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.resume","description":"A sandbox was resumed.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"sandbox.stop","description":"A sandbox was stopped.","docs_reference_links":"N/A","fieldsIndex":281},{"action":"secret_scanning_alert.assign","description":"A user was assigned to a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.create","description":"GitHub detected a secret and created a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.delete","description":"A secret scanning alert was deleted by GitHub. Note that deletions from custom patterns are not logged.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":283},{"action":"secret_scanning_alert.metadata_create","description":"Metadata was added to a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.metadata_remove","description":"Metadata was removed from a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.public_leak","description":"A secret scanning alert was leaked in a public repo.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.reopen","description":"A secret scanning alert was reopened.","docs_reference_links":"N/A","fieldsIndex":284},{"action":"secret_scanning_alert.report","description":"A leaked secret was reported to the secret's provider by secret scanning.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning/resolving-alerts","docs_reference_titles":"Resolving alerts from secret scanning","fieldsIndex":285},{"action":"secret_scanning_alert.resolve","description":"A secret scanning alert was resolved.","docs_reference_links":"N/A","fieldsIndex":284},{"action":"secret_scanning_alert.revoke","description":"A secret scanning alert was revoked.","docs_reference_links":"N/A","fieldsIndex":286},{"action":"secret_scanning_alert.unassign","description":"A user was unassigned from a secret scanning alert.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":282},{"action":"secret_scanning_alert.validate","description":"A secret scanning alert was validated.","docs_reference_links":"/code-security/secret-scanning/managing-alerts-from-secret-scanning","docs_reference_titles":"Manage secret scanning alerts","fieldsIndex":287},{"action":"secret_scanning_closure_request.approve","description":"A request to close a secret scanning alert was approved by a user.","docs_reference_links":"N/A","fieldsIndex":288},{"action":"secret_scanning_closure_request.cancel","description":"N/A","docs_reference_links":"A reqeust to close a secret scanning alert was canceled by a user.","docs_reference_titles":"A, reqeust, to, close, a, secret, scanning, alert, was, canceled, by, a, user.","fieldsIndex":289},{"action":"secret_scanning_closure_request.create","description":"N/A","docs_reference_links":"A user requested to close a secret scanning alert.","docs_reference_titles":"A, user, requested, to, close, a, secret, scanning, alert.","fieldsIndex":290},{"action":"secret_scanning_closure_request.deny","description":"A request to close a secret scanning alert was denied by a user.","docs_reference_links":"N/A","fieldsIndex":288},{"action":"secret_scanning.disable","description":"Secret scanning was disabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":11},{"action":"secret_scanning.enable","description":"Secret scanning was enabled for all existing repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.disable","description":"Secret scanning was disabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_new_repos.enable","description":"Secret scanning was enabled for all new repositories.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":53},{"action":"secret_scanning_push_protection.bypass","description":"Triggered when a user bypasses the push protection on a secret detected by secret scanning.","docs_reference_links":"/code-security/secret-scanning/protecting-pushes-with-secret-scanning#bypassing-push-protection-for-a-secret","docs_reference_titles":"Push protection","fieldsIndex":291},{"action":"secret_scanning_push_protection_request.approve","description":"A request to bypass secret scanning push protection was approved by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":292},{"action":"secret_scanning_push_protection_request.cancel","description":"A user canceled a request to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":293},{"action":"secret_scanning_push_protection_request.complete","description":"A user pushed a commit containing a secret for which there is an approved secret scanning push protection bypass request.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":293},{"action":"secret_scanning_push_protection_request.deny","description":"A request to bypass secret scanning push protection was denied by a user.","docs_reference_links":"/code-security/secret-scanning/push-protection-for-repositories-and-organizations#managing-requests-to-bypass-push-protection","docs_reference_titles":"Push protection","fieldsIndex":294},{"action":"secret_scanning_push_protection_request.request","description":"A user requested to bypass secret scanning push protection.","docs_reference_links":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","docs_reference_titles":"/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line","fieldsIndex":295},{"action":"secret_scanning_scan.completed","description":"A secret scanning scan has completed on this repository.","docs_reference_links":"/code-security/secret-scanning/about-secret-scanning","docs_reference_titles":"Secret scanning","fieldsIndex":296},{"action":"security_configuration.create","description":"A security configuration was created","docs_reference_links":"N/A","fieldsIndex":297},{"action":"security_configuration_default.delete","description":"A default security configuration setting for new repositories was removed.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"security_configuration_default.update","description":"A default security configuration setting for new repositories was updated.","docs_reference_links":"N/A","fieldsIndex":298},{"action":"security_configuration.delete","description":"A security configuration was deleted","docs_reference_links":"N/A","fieldsIndex":297},{"action":"security_configuration_policy.update","description":"A security configuration policy was updated","docs_reference_links":"N/A","fieldsIndex":299},{"action":"security_configuration.update","description":"A security configuration was updated","docs_reference_links":"N/A","fieldsIndex":300},{"action":"sponsors.agreement_sign","description":"A GitHub Sponsors agreement was signed on behalf of an organization.","docs_reference_links":"N/A","fieldsIndex":301},{"action":"sponsors.custom_amount_settings_change","description":"Custom amounts for GitHub Sponsors were enabled or disabled, or the suggested custom amount was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":301},{"action":"sponsors.fiscal_host_change","description":"The fiscal host for a GitHub Sponsors listing was updated.","docs_reference_links":"N/A","fieldsIndex":302},{"action":"sponsors.invoiced_agreement_sign","description":"An agreement for invoiced billing for GitHub Sponsors was signed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/paying-for-github-sponsors-by-invoice","fieldsIndex":0},{"action":"sponsors.repo_funding_links_file_action","description":"The FUNDING file in a repository was changed.","docs_reference_links":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","docs_reference_titles":"/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/displaying-a-sponsor-button-in-your-repository","fieldsIndex":303},{"action":"sponsors.sponsor_sponsorship_cancel","description":"A sponsorship was canceled.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Downgrading a sponsorship","fieldsIndex":304},{"action":"sponsors.sponsor_sponsorship_create","description":"A sponsorship was created, by sponsoring an account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":305},{"action":"sponsors.sponsor_sponsorship_payment_complete","description":"After you sponsor an account and a payment has been processed, the sponsorship payment was marked as complete.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/about-sponsorships-fees-and-taxes","fieldsIndex":305},{"action":"sponsors.sponsor_sponsorship_preference_change","description":"The option to receive email updates from a sponsored account was changed.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","docs_reference_titles":"/sponsors/sponsoring-open-source-contributors/managing-your-sponsorship","fieldsIndex":304},{"action":"sponsors.sponsor_sponsorship_tier_change","description":"A sponsorship was upgraded or downgraded.","docs_reference_links":"/billing/managing-billing-for-github-sponsors/upgrading-a-sponsorship, /billing/managing-billing-for-github-sponsors/downgrading-a-sponsorship","docs_reference_titles":"Upgrading a sponsorship, Downgrading a sponsorship","fieldsIndex":305},{"action":"sponsors.sponsored_developer_approve","description":"A GitHub Sponsors account was approved.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":302},{"action":"sponsors.sponsored_developer_create","description":"A GitHub Sponsors account was created.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":306},{"action":"sponsors.sponsored_developer_disable","description":"A GitHub Sponsors account was disabled.","docs_reference_links":"N/A","fieldsIndex":302},{"action":"sponsors.sponsored_developer_profile_update","description":"The profile for GitHub Sponsors account was edited.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/editing-your-profile-details-for-github-sponsors","fieldsIndex":306},{"action":"sponsors.sponsored_developer_redraft","description":"A GitHub Sponsors account was returned to draft state from approved state.","docs_reference_links":"N/A","fieldsIndex":302},{"action":"sponsors.sponsored_developer_request_approval","description":"An application for GitHub Sponsors was submitted for approval.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":302},{"action":"sponsors.sponsored_developer_tier_description_update","description":"The description for a sponsorship tier was changed.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/managing-your-sponsorship-tiers","fieldsIndex":307},{"action":"sponsors.sponsors_patreon_user_create","description":"A Patreon account was linked to a user account for use with GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/enabling-sponsorships-through-patreon#linking-your-patreon-account-to-your-github-account","fieldsIndex":308},{"action":"sponsors.sponsors_patreon_user_destroy","description":"A Patreon account for use with GitHub Sponsors was unlinked from a user account.","docs_reference_links":"/sponsors/sponsoring-open-source-contributors/unlinking-your-patreon-account-from-your-github-account","docs_reference_titles":"Unlinking your Patreon account from GitHub","fieldsIndex":308},{"action":"sponsors.update_tier_repository","description":"A GitHub Sponsors tier changed access for a repository.","docs_reference_links":"N/A","fieldsIndex":307},{"action":"sponsors.update_tier_welcome_message","description":"The welcome message for a GitHub Sponsors tier for an organization was updated.","docs_reference_links":"N/A","fieldsIndex":307},{"action":"sponsors.withdraw_agreement_signature","description":"A signature was withdrawn from a GitHub Sponsors agreement that applies to an organization.","docs_reference_links":"N/A","fieldsIndex":301},{"action":"ssh_certificate_authority.create","description":"An SSH certificate authority for an organization or enterprise was created.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":309},{"action":"ssh_certificate_authority.destroy","description":"An SSH certificate authority for an organization or enterprise was deleted.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":309},{"action":"ssh_certificate_requirement.disable","description":"The requirement for members to use SSH certificates to access an organization resources was disabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"ssh_certificate_requirement.enable","description":"The requirement for members to use SSH certificates to access an organization resources was enabled.","docs_reference_links":"/organizations/managing-git-access-to-your-organizations-repositories/managing-your-organizations-ssh-certificate-authorities, /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise#managing-ssh-certificate-authorities-for-your-enterprise","docs_reference_titles":"Managing your organization's SSH certificate authorities, Enforcing policies for security settings in your enterprise","fieldsIndex":15},{"action":"staff.dependabot_debug_credentials_generated","description":"Dependabot encrypted config was read.","docs_reference_links":"N/A","fieldsIndex":188},{"action":"staff.set_domain_token_expiration","description":"The verification code expiry time for an organization or enterprise domain was set.","docs_reference_links":"N/A","fieldsIndex":310},{"action":"staff.unverify_domain","description":"An organization or enterprise domain was unverified.","docs_reference_links":"N/A","fieldsIndex":311},{"action":"staff.verify_domain","description":"An organization or enterprise domain was verified.","docs_reference_links":"N/A","fieldsIndex":312},{"action":"sub_issues.parent_issue_add","description":"A parent issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"sub_issues.parent_issue_remove","description":"A parent issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"sub_issues.sub_issue_add","description":"A sub-issue was added to an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"sub_issues.sub_issue_remove","description":"A sub-issue was removed from an issue.","docs_reference_links":"N/A","fieldsIndex":90},{"action":"team.add_member","description":"A member of an organization was added to a team.","docs_reference_links":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/adding-organization-members-to-a-team","fieldsIndex":313},{"action":"team.add_repository","description":"A team was given access and permissions to a repository.","docs_reference_links":"N/A","fieldsIndex":314},{"action":"team.add_to_organization","description":"A team was added to an organization.","docs_reference_links":"N/A","fieldsIndex":315},{"action":"team.change_parent_team","description":"A child team was created or a child team's parent was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","docs_reference_titles":"/organizations/organizing-members-into-teams/moving-a-team-in-your-organizations-hierarchy","fieldsIndex":313},{"action":"team.change_privacy","description":"A team's privacy level was changed.","docs_reference_links":"/organizations/organizing-members-into-teams/changing-team-visibility","docs_reference_titles":"/organizations/organizing-members-into-teams/changing-team-visibility","fieldsIndex":313},{"action":"team.create","description":"A new team is created.","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team.demote_maintainer","description":"A user was demoted from a team maintainer to a team member.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member","fieldsIndex":313},{"action":"team.destroy","description":"A team was deleted.","docs_reference_links":"N/A","fieldsIndex":313},{"action":"team_group_mapping.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"team_group_mapping.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"team_group_mapping.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":112},{"action":"team.members_limit_warning","description":"A team is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team.organization_assignments_limit_reached","description":"A team has reached its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team.organization_assignments_limit_warning","description":"A team is approaching its organization assignments limit.","docs_reference_links":"N/A","fieldsIndex":316},{"action":"team.promote_maintainer","description":"A user was promoted from a team member to a team maintainer.","docs_reference_links":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","docs_reference_titles":"/organizations/organizing-members-into-teams/assigning-the-team-maintainer-role-to-a-team-member#promoting-an-organization-member-to-team-maintainer","fieldsIndex":313},{"action":"team.remove_from_organization","description":"A team was removed from an organization.","docs_reference_links":"N/A","fieldsIndex":315},{"action":"team.remove_member","description":"An organization member was removed from a team.","docs_reference_links":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","docs_reference_titles":"/organizations/organizing-members-into-teams/removing-organization-members-from-a-team","fieldsIndex":313},{"action":"team.remove_repository","description":"A repository was removed from a team's control.","docs_reference_links":"N/A","fieldsIndex":317},{"action":"team.rename","description":"A team's name was changed.","docs_reference_links":"N/A","fieldsIndex":318},{"action":"team_sync_tenant.disabled","description":"Team synchronization with a tenant was disabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.enabled","description":"Team synchronization with a tenant was enabled.","docs_reference_links":"/organizations/managing-saml-single-sign-on-for-your-organization/managing-team-synchronization-for-your-organization, /admin/identity-and-access-management/using-saml-for-enterprise-iam/managing-team-synchronization-for-organizations-in-your-enterprise","docs_reference_titles":"Managing team synchronization for your organization, Managing team synchronization for organizations in your enterprise","fieldsIndex":15},{"action":"team_sync_tenant.update_okta_credentials","description":"The Okta credentials for team synchronization with a tenant were changed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"team.update_repository_permission","description":"A team's permission to a repository was changed.","docs_reference_links":"N/A","fieldsIndex":319},{"action":"user_content_edit.delete","description":"Triggered when a user content edit is deleted.","docs_reference_links":"N/A","fieldsIndex":320},{"action":"vulnerability_alert_rule.create","description":"A Dependabot rule was created.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"vulnerability_alert_rule.delete","description":"A Dependabot rule was deleted.","docs_reference_links":"N/A","fieldsIndex":322},{"action":"vulnerability_alert_rule.disable","description":"A Dependabot rule was disabled for a single repository or disabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"vulnerability_alert_rule.enable","description":"A Dependabot rule was enabled for a single repository or enabled by default for an organization.","docs_reference_links":"N/A","fieldsIndex":323},{"action":"vulnerability_alert_rule.force_disable","description":"A Dependabot rule was enabled for an organization and cannot be disabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":324},{"action":"vulnerability_alert_rule.force_enable","description":"A Dependabot rule was disabled for an organization and cannot be enabled for its repositories.","docs_reference_links":"N/A","fieldsIndex":324},{"action":"vulnerability_alert_rule.update","description":"A Dependabot rule's conditions, actions, or metadata changed.","docs_reference_links":"N/A","fieldsIndex":321},{"action":"workflows.actions_policy_violation","description":"A workflow run produced one or more workflow execution protection policy violations.","docs_reference_links":"N/A","fieldsIndex":325},{"action":"workflows.approve_workflow_job","description":"A workflow job was approved.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":326},{"action":"workflows.bypass_protection_rules","description":"N/A","docs_reference_links":"N/A","fieldsIndex":327},{"action":"workflows.cancel_workflow_run","description":"A workflow run was cancelled.","docs_reference_links":"/actions/managing-workflow-runs/canceling-a-workflow","docs_reference_titles":"Canceling a workflow run","fieldsIndex":328},{"action":"workflows.comment_workflow_job","description":"N/A","docs_reference_links":"N/A","fieldsIndex":329},{"action":"workflows.completed_workflow_run","description":"A workflow status changed to completed. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/monitoring-and-troubleshooting-workflows/viewing-workflow-run-history","docs_reference_titles":"Viewing workflow run history","fieldsIndex":330},{"action":"workflows.created_workflow_run","description":"A workflow run was create. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/learn-github-actions/understanding-github-actions#create-an-example-workflow","docs_reference_titles":"Understanding GitHub Actions","fieldsIndex":331},{"action":"workflows.debugger_session_completed","description":"An Actions job with the debugger enabled completed its debug session. Includes the repository, ref, workflow file, actor, and session duration.","docs_reference_links":"N/A","fieldsIndex":332},{"action":"workflows.debugger_session_started","description":"An Actions job with the debugger enabled started a debug session. Includes the repository, ref, workflow file, and actor.","docs_reference_links":"N/A","fieldsIndex":333},{"action":"workflows.delete_workflow_run","description":"A workflow run was deleted.","docs_reference_links":"/actions/managing-workflow-runs/deleting-a-workflow-run","docs_reference_titles":"Deleting a workflow run","fieldsIndex":334},{"action":"workflows.disable_workflow","description":"A workflow was disabled.","docs_reference_links":"N/A","fieldsIndex":335},{"action":"workflows.enable_workflow","description":"A workflow was enabled, after previously being disabled by disable_workflow.","docs_reference_links":"N/A","fieldsIndex":335},{"action":"workflows.pin_workflow","description":"A workflow was pinned.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"workflows.prepared_workflow_job","description":"A workflow job was started. Includes the list of secrets that were provided to the job. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/using-workflows/events-that-trigger-workflows","docs_reference_titles":"Events that trigger workflows","fieldsIndex":337},{"action":"workflows.reject_workflow_job","description":"A workflow job was rejected.","docs_reference_links":"/actions/managing-workflow-runs/reviewing-deployments","docs_reference_titles":"Reviewing deployments","fieldsIndex":338},{"action":"workflows.rerun_workflow_run","description":"A workflow run was re-run.","docs_reference_links":"/actions/managing-workflow-runs/re-running-workflows-and-jobs","docs_reference_titles":"Re-running workflows and jobs","fieldsIndex":339},{"action":"workflows.unpin_workflow","description":"A workflow was unpinned after previously being pinned.","docs_reference_links":"N/A","fieldsIndex":336},{"action":"account_recovery_token.confirm","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"account_recovery_token.recover","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"billing.update_bill_cycle_day","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.add_admin","description":"An enterprise owner was added to an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":13},{"action":"business.add_billing_manager","description":"A billing manager was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.add_member","description":"A member was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":340},{"action":"business.add_support_entitlee","description":"A support entitlement was added to a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":341},{"action":"business.remove_admin","description":"An enterprise owner was removed from an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/inviting-people-to-manage-your-enterprise","docs_reference_titles":"Inviting people to manage your enterprise","fieldsIndex":13},{"action":"business.remove_billing_manager","description":"A billing manager was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":13},{"action":"business.remove_member","description":"A member was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"business.remove_support_entitlee","description":"A support entitlement was removed from a member of an enterprise.","docs_reference_links":"/admin/user-management/managing-users-in-your-enterprise/managing-support-entitlements-for-your-enterprise","docs_reference_titles":"Managing support entitlements for your enterprise","fieldsIndex":13},{"action":"business.security_center_export_code_scanning_metrics","description":"A CSV export was requested on the \"CodeQL pull request alerts\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.security_center_export_coverage","description":"A CSV export was requested on the \"Coverage\" page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"business.security_center_export_overview_dashboard","description":"A CSV export was requested on the \"Overview Dashboard\" page.","docs_reference_links":"N/A","fieldsIndex":147},{"action":"business.security_center_export_risk","description":"A CSV export was requested on the \"Risk\" page.","docs_reference_links":"N/A","fieldsIndex":148},{"action":"business.set_actions_cache_retention_policy","description":"The cache retention policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":343},{"action":"business.set_actions_cache_storage_policy","description":"The cache storage policy for GitHub Actions was set for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":343},{"action":"business.set_actions_fork_pr_approvals_policy","description":"The policy for requiring approvals for workflows from public forks was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":344},{"action":"business.set_actions_private_fork_pr_approvals_policy","description":"The policy for requiring approval for fork pull request workflows from collaborators without write access to private repos was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-private-repositories","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":344},{"action":"business.set_actions_retention_limit","description":"The retention period for GitHub Actions artifacts and logs was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-artifact-and-log-retention-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":345},{"action":"business.set_default_workflow_permissions","description":"The default permissions granted to the GITHUB_TOKEN when running workflows were changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-workflow-permissions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":346},{"action":"business.set_fork_pr_workflows_policy","description":"The policy for fork pull request workflows was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#enforcing-a-policy-for-fork-pull-requests-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":344},{"action":"business.set_workflow_permission_can_approve_pr","description":"The policy for allowing GitHub Actions to create and approve pull requests was changed for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise#preventing-github-actions-from-creating-or-approving-pull-requests","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":347},{"action":"gist.create","description":"A gist was created.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"gist.destroy","description":"A gist was deleted.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"gist.visibility_change","description":"The visibility of a gist was updated.","docs_reference_links":"N/A","fieldsIndex":348},{"action":"git_signing_ssh_public_key.create","description":"An SSH key was added to a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":349},{"action":"git_signing_ssh_public_key.delete","description":"An SSH key was removed from a user account as a Git commit signing key.","docs_reference_links":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","docs_reference_titles":"/authentication/managing-commit-signature-verification/telling-git-about-your-signing-key","fieldsIndex":350},{"action":"gpg_key.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":351},{"action":"gpg_key.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":352},{"action":"marketplace_listing_plan.create","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"marketplace_listing_plan.publish","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"marketplace_listing_plan.retire","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"marketplace_listing_plan.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":353},{"action":"mcp_registry.allowlist_add_server","description":"A server was added to an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":354},{"action":"mcp_registry.allowlist_create","description":"An MCP registry allowlist was created.","docs_reference_links":"N/A","fieldsIndex":355},{"action":"mcp_registry.allowlist_delete","description":"An MCP registry allowlist was deleted.","docs_reference_links":"N/A","fieldsIndex":356},{"action":"mcp_registry.allowlist_remove_server","description":"A server was removed from an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":354},{"action":"mcp_registry.allowlist_set_server_entries","description":"Entries were set for a server in an MCP registry allowlist.","docs_reference_links":"N/A","fieldsIndex":357},{"action":"mcp_registry.allowlist_update","description":"An MCP registry allowlist was updated.","docs_reference_links":"N/A","fieldsIndex":358},{"action":"mcp_registry.settings_update","description":"An MCP policy setting for the business was updated.","docs_reference_links":"N/A","fieldsIndex":359},{"action":"oauth_access.create","description":"An OAuth access token was generated.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, /authentication/keeping-your-account-and-data-secure/creating-a-personal-access-token","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps, Managing your personal access tokens","fieldsIndex":360},{"action":"oauth_access.destroy","description":"An OAuth access token was deleted.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authorizing-oauth-apps","fieldsIndex":361},{"action":"oauth_access.regenerate","description":"An OAuth access token was regenerated.","docs_reference_links":"N/A","fieldsIndex":360},{"action":"oauth_access.revoke","description":"An OAuth access token was revoked.","docs_reference_links":"N/A","fieldsIndex":362},{"action":"oauth_access.update","description":"An OAuth access token was updated.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"oauth_authorization.create","description":"An authorization for an OAuth application was created.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":360},{"action":"oauth_authorization.destroy","description":"An authorization for an OAuth application was deleted.","docs_reference_links":"/apps/using-github-apps/reviewing-your-authorized-integrations","docs_reference_titles":"Reviewing and revoking authorization of GitHub Apps","fieldsIndex":363},{"action":"oauth_authorization.update","description":"An authorization for an OAuth application was updated.","docs_reference_links":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","docs_reference_titles":"/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps","fieldsIndex":364},{"action":"passkey.register","description":"A new passkey was added.","docs_reference_links":"N/A","fieldsIndex":365},{"action":"passkey.remove","description":"A new passkey was removed.","docs_reference_links":"N/A","fieldsIndex":365},{"action":"personal_access_token.create","description":"Triggered when you create a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":366},{"action":"personal_access_token.credential_regenerated","description":"Triggered when you regenerate a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":367},{"action":"personal_access_token.credential_revoked","description":"A fine-grained personal access token was revoked by GitHub Advanced Security.","docs_reference_links":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","docs_reference_titles":"/code-security/getting-started/github-security-features#secret-scanning-alerts-for-users","fieldsIndex":368},{"action":"personal_access_token.destroy","description":"Triggered when you delete a fine-grained personal access token.","docs_reference_links":"N/A","fieldsIndex":369},{"action":"personal_access_token.update","description":"A fine-grained personal access token was updated.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens#fine-grained-personal-access-tokens","fieldsIndex":370},{"action":"repo.temporary_access_granted","description":"Temporary access was enabled for a repository.","docs_reference_links":"/admin/user-management/managing-repositories-in-your-enterprise/accessing-user-owned-repositories-in-your-enterprise","docs_reference_titles":"Accessing user-owned repositories in your enterprise","fieldsIndex":103},{"action":"security_key.register","description":"A security key was registered for an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"security_key.remove","description":"A security key was removed from an account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"social_identity.linked","description":"A user linked a social identity to their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"social_identity.unlinked","description":"A user unlinked a social identity from their account.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"social_identity.unlinked_all","description":"A user unlinked all social identities from their account.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"sponsors.sponsored_developer_update_newsletter_send","description":"Triggered when you send an email update to your sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/contacting-your-sponsors","fieldsIndex":15},{"action":"sponsors.waitlist_join","description":"You join the waitlist to join GitHub Sponsors.","docs_reference_links":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","docs_reference_titles":"/sponsors/receiving-sponsorships-through-github-sponsors/setting-up-github-sponsors-for-your-personal-account","fieldsIndex":306},{"action":"successor_invitation.accept","description":"Triggered when you accept a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.cancel","description":"Triggered when you cancel a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.create","description":"Triggered when you create a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":0},{"action":"successor_invitation.decline","description":"Triggered when you decline a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":371},{"action":"successor_invitation.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"successor_invitation.revoke","description":"Triggered when you revoke a succession invitation.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-access-to-your-personal-repositories/maintaining-ownership-continuity-of-your-personal-accounts-repositories","docs_reference_titles":"Maintaining ownership continuity of your personal account's repositories","fieldsIndex":371},{"action":"trusted_device.register","description":"A new trusted device was added.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"trusted_device.remove","description":"A trusted device was removed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.abort","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.complete","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.ignore","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_approve","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.staff_decline","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_account_recovery.start","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_account_recovery.two_factor_destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.add_factor","description":"A secondary authentication factor was added to a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.disabled","description":"Two-factor authentication was disabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/disabling-two-factor-authentication-for-your-personal-account","docs_reference_titles":"Disabling two-factor authentication for your personal account","fieldsIndex":15},{"action":"two_factor_authentication.enabled","description":"Two-factor authentication was enabled for a user account.","docs_reference_links":"https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"Configuring two-factor authentication","fieldsIndex":15},{"action":"two_factor_authentication.password_reset_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.recovery_codes_regenerated","description":"Two factor recovery codes were regenerated for a user account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"two_factor_authentication.remove_factor","description":"A secondary authentication factor was removed from a user account.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication","fieldsIndex":15},{"action":"two_factor_authentication.sign_in_fallback_sms","description":"A one-time password code was sent to a user account fallback phone number.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"two_factor_authentication.update_fallback","description":"The two-factor authentication fallback for a user account was changed.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.add_email","description":"An email address was added to a user account.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-email-preferences/adding-an-email-address-to-your-github-account","docs_reference_titles":"Adding an email address to your GitHub account","fieldsIndex":372},{"action":"user.async_delete","description":"An asynchronous job was started to destroy a user account, eventually triggering a user.delete event.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.audit_log_export","description":"Audit log entries were exported.","docs_reference_links":"N/A","fieldsIndex":114},{"action":"user.block_user","description":"A user was blocked by another user.","docs_reference_links":"N/A","fieldsIndex":116},{"action":"user.change_password","description":"A user changed their password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.codespaces_trusted_repo_access_granted","description":"Triggered when you allow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":18},{"action":"user.codespaces_trusted_repo_access_revoked","description":"Triggered when you disallow the codespaces you create for a repository to access other repositories owned by your personal account.","docs_reference_links":"/codespaces/managing-codespaces-for-your-organization/managing-repository-access-for-your-organizations-codespaces","docs_reference_titles":"Managing access to other repositories within your codespace","fieldsIndex":119},{"action":"user.create","description":"A new user account was created.","docs_reference_links":"N/A","fieldsIndex":373},{"action":"user.create_integration_secret","description":"A user secret for Codespaces was created.","docs_reference_links":"N/A","fieldsIndex":374},{"action":"user.creation_rate_limit_exceeded","description":"The rate of creation of user accounts, applications, issues, pull requests or other resources exceeded the configured rate limits, or too many users were followed too quickly.","docs_reference_links":"N/A","fieldsIndex":16},{"action":"user.delete","description":"A user account was destroyed by an asynchronous job.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.demote","description":"A site administrator was demoted to an ordinary user account.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.destroy","description":"A user deleted his or her account, triggering user.async_delete.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.device_verification_failure","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_requested","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.device_verification_success","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.disable_collaborators_only","description":"The interaction limit for collaborators only was disabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.disable_contributors_only","description":"The interaction limit for prior contributors only was disabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.disable_sockpuppet_disallowed","description":"The interaction limit for existing users only was disabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user_email.confirm_claim","description":"An enterprise managed user claimed an email address.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_email.mark_as_unclaimed","description":"N/A","docs_reference_links":"An enterprise managed user unclaimed an email address.","docs_reference_titles":"An, GitHub Help Documentation, managed, user, unclaimed, an, email, address.","fieldsIndex":15},{"action":"user.enable_collaborators_only","description":"The interaction limit for collaborators only was enabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.enable_contributors_only","description":"The interaction limit for prior contributors only was enabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.enable_sockpuppet_disallowed","description":"The interaction limit for existing users only was enabled for a personal account.","docs_reference_links":"N/A","fieldsIndex":375},{"action":"user.failed_login","description":"A user tried to sign in with an incorrect username, password, or two-factor authentication code.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.forgot_password","description":"A user requested a password reset.","docs_reference_links":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","docs_reference_titles":"/authentication/keeping-your-account-and-data-secure/updating-your-github-access-credentials","fieldsIndex":376},{"action":"user.grant_github_developer","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.hide_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now hidden.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.login","description":"A user signed in.","docs_reference_links":"N/A","fieldsIndex":377},{"action":"user.logout","description":"A user signed out.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.new_device_used","description":"A user signed in from a new device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.promote","description":"An ordinary user account was promoted to a site administrator.","docs_reference_links":"N/A","fieldsIndex":371},{"action":"user.recreate","description":"A user's account was restored.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.remove_email","description":"An email address was removed from a user account.","docs_reference_links":"N/A","fieldsIndex":372},{"action":"user.remove_integration_secret","description":"A user secret for Codespaces was deleted.","docs_reference_links":"N/A","fieldsIndex":378},{"action":"user.rename","description":"A username was changed.","docs_reference_links":"N/A","fieldsIndex":379},{"action":"user.reset_password","description":"A user reset their account password.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_session.country_change","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.show_private_contributions_count","description":"A user changed the visibility of their private contributions. The number of contributions to private repositories on the user's profile are now shown.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/managing-contribution-settings-on-your-profile/showing-your-private-contributions-and-achievements-on-your-profile","docs_reference_titles":"Manage visibility settings for private contributions","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device","description":"A user signed in from an unrecognized device.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.sign_in_from_unrecognized_device_and_location","description":"A user signed in from an unrecognized device and location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user_status.destroy","description":"Triggered when you clear the status on your profile.","docs_reference_links":"N/A","fieldsIndex":380},{"action":"user_status.update","description":"Triggered when you set or change the status on your profile.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-github-profile/customizing-your-profile/personalizing-your-profile#setting-a-status","docs_reference_titles":"Personalize your profile","fieldsIndex":381},{"action":"user.suspend","description":"A user account was suspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.toggle_warn_private_email","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.two_factor_challenge_failure","description":"A 2FA challenge issued for a user account failed.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_challenge_success","description":"A 2FA challenge issued for a user account succeeded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recover","description":"A user used their 2FA recovery codes.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_downloaded","description":"A user downloaded 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_printed","description":"A user printed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_recovery_codes_viewed","description":"A user viewed 2FA recovery codes for their account.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.two_factor_requested","description":"A user was prompted for a two-factor authentication code.","docs_reference_links":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","docs_reference_titles":"/authentication/securing-your-account-with-two-factor-authentication-2fa/accessing-github-using-two-factor-authentication","fieldsIndex":15},{"action":"user.unblock_user","description":"A user was unblocked by another user.","docs_reference_links":"N/A","fieldsIndex":116},{"action":"user.unsuspend","description":"A user account was unsuspended.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"user.update_integration_secret","description":"A user secret for Codespaces was updated.","docs_reference_links":"N/A","fieldsIndex":374},{"action":"user.update_new_repository_default_branch_setting","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"api.request","description":"An API request was made to an endpoint for the enterprise, or an enterprise owned resource. This event is only included if API Request Events is enabled in the enterprise's audit log settings. This event is only available via audit log streaming.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/streaming-the-audit-log-for-your-enterprise#enabling-audit-log-streaming-of-api-requests","docs_reference_titles":"Streaming the audit log for your enterprise","fieldsIndex":382},{"action":"audit_log_streaming.check","description":"A manual check of the endpoint configured for audit log streaming was performed.","docs_reference_links":"N/A","fieldsIndex":383},{"action":"audit_log_streaming.create","description":"An endpoint was added for audit log streaming.","docs_reference_links":"N/A","fieldsIndex":384},{"action":"audit_log_streaming.destroy","description":"An audit log streaming endpoint was deleted.","docs_reference_links":"N/A","fieldsIndex":385},{"action":"audit_log_streaming.update","description":"An endpoint configuration was updated for audit log streaming, such as the stream was paused, enabled, or disabled.","docs_reference_links":"N/A","fieldsIndex":386},{"action":"business.add_disallowed_two_factor_method","description":"An enterprise prevented access to resources by users with the given two-factor method.","docs_reference_links":"N/A","fieldsIndex":387},{"action":"business.add_organization","description":"An organization was added to an enterprise.","docs_reference_links":"N/A","fieldsIndex":388},{"action":"business_advanced_security.disabled","description":"GitHub Advanced Security was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.disabled_for_new_repos","description":"GitHub Advanced Security was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.disabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was disabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.enabled","description":"GitHub Advanced Security was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_repos","description":"GitHub Advanced Security was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_advanced_security.enabled_for_new_user_namespace_repos","description":"GitHub Advanced Security was enabled for new user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.advanced_security_metered_usage_lock","description":"Enablement for Advanced Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.advanced_security_metered_usage_unlock","description":"Enablement for Advanced Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.advanced_security_policy_update","description":"An enterprise owner created, updated, or removed a policy for GitHub Advanced Security.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise","docs_reference_titles":"Enforcing policies for code security and analysis for your enterprise","fieldsIndex":389},{"action":"business.advanced_security_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business_advanced_security.user_namespace_repos_disabled","description":"GitHub Advanced Security was disabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_advanced_security.user_namespace_repos_enabled","description":"GitHub Advanced Security was enabled for user namespace repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business.audit_log_export","description":"An export of the enterprise audit log was created. If the export included a query, the log will list the query used and the number of audit log entries matching that query.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":114},{"action":"business.audit_log_git_event_export","description":"An export of the enterprise's Git events was created.","docs_reference_links":"admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/exporting-audit-log-activity-for-your-enterprise","docs_reference_titles":"Exporting audit log activity for your enterprise","fieldsIndex":115},{"action":"business.cancel_admin_invitation","description":"An invitation for someone to be an owner of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.cancel_billing_manager_invitation","description":"An invitation for someone to be an billing manager of an enterprise was canceled.","docs_reference_links":"N/A","fieldsIndex":391},{"action":"business.cancel_trial","description":"The trial of GitHub Enterprise Cloud was canceled.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.change_seats_plan_type","description":"The seats plan type was changed for an enterprise.","docs_reference_links":"N/A","fieldsIndex":392},{"action":"business.clear_actions_settings","description":"An enterprise owner or site administrator cleared GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":393},{"action":"business.clear_default_repository_permission","description":"An enterprise owner cleared the base repository permission policy setting for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":343},{"action":"business.clear_disallowed_two_factor_methods","description":"Cleared two-factor authentication restrictions for an enterprise.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.clear_members_can_create_repos","description":"An enterprise owner cleared a restriction on repository creation in organizations in the enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":394},{"action":"business.code_quality_access_policy_update","description":"The policy for Code Quality access was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_quality_enablement_policy_update","description":"The policy for Code Quality enablement was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_scanning_ai_findings_policy_update","description":"The policy for Code scanning AI findings was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_scanning_autofix_policy_update","description":"The policy for Code scanning autofix was updated for an enterprise.","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.code_scanning_autofix_third_party_tools_policy_update","description":"The policy for Code scanning autofix third party tools was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":389},{"action":"business.code_security_enablement_policy_update","description":"The policy for Code Security enablement was updated for an enterprise.","docs_reference_links":"/code-security/getting-started/github-security-features#available-with-github-code-security","docs_reference_titles":"/code-security/getting-started/github-security-features#available-with-github-code-security","fieldsIndex":389},{"action":"business.code_security_metered_usage_lock","description":"Enablement for Code Security features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.code_security_metered_usage_unlock","description":"Enablement for Code Security features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.connect_usage_metrics_export","description":"Server statistics were exported for the enterprise.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/analyzing-how-your-team-works-with-server-statistics/exporting-server-statistics","docs_reference_titles":"Exporting Server Statistics","fieldsIndex":341},{"action":"business.convert_trial","description":"The enterprise account on a trial of GitHub Enterprise Cloud was upgraded to a paid enterprise account.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.create","description":"An enterprise was created.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.create_trial","description":"A trial of GitHub Enterprise Cloud began.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.delete","description":"The enterprise was deleted.","docs_reference_links":"/admin/overview/deleting-an-enterprise-account","docs_reference_titles":"Deleting an enterprise account","fieldsIndex":341},{"action":"business.delete_custom_image","description":"A custom image was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":343},{"action":"business.delete_custom_image_version","description":"A custom image version was deleted for an enterprise.","docs_reference_links":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","docs_reference_titles":"/actions/how-tos/manage-runners/larger-runners/use-custom-images","fieldsIndex":343},{"action":"business_dependabot_alerts.disable","description":"Dependabot alerts were disabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts.enable","description":"Dependabot alerts were enabled for your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business_dependabot_alerts_new_repos.disable","description":"Dependabot alerts were disabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_dependabot_alerts_new_repos.enable","description":"Dependabot alerts were enabled for new repositories in your enterprise.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"business.dependabot_alerts_repo_admin_enablement_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.disable_oidc","description":"OIDC single sign-on was disabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.disable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was disabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.disable_saml","description":"SAML single sign-on was disabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.disable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was disabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.disable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was disabled.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.enable_app_delegated_credential_authorizations","description":"App-delegated credential authorizations were enabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enable_oidc","description":"OIDC single sign-on was enabled for an enterprise.","docs_reference_links":"/admin/identity-and-access-management/using-enterprise-managed-users-for-iam/configuring-oidc-for-enterprise-managed-users","docs_reference_titles":"Configuring OIDC for Enterprise Managed Users","fieldsIndex":15},{"action":"business.enable_open_scim","description":"SCIM provisioning for custom integrations that use the REST API was enabled for the enterprise.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enable_saml","description":"SAML single sign-on was enabled for an enterprise.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.enable_source_ip_disclosure","description":"Display of IP addresses within audit log events for the enterprise was enabled.","docs_reference_links":"/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/displaying-ip-addresses-in-the-audit-log-for-your-enterprise","docs_reference_titles":"Displaying IP addresses in the audit log for your enterprise","fieldsIndex":15},{"action":"business.enable_two_factor_requirement","description":"The requirement for members to have two-factor authentication enabled to access an enterprise was enabled.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.enterprise_server_license_download","description":"A GitHub Enterprise Server license was downloaded.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.enterprise_teams_limit_reached","description":"An enterprise has reached its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.enterprise_teams_limit_warning","description":"An enterprise is approaching its enterprise teams limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.expire_trial","description":"The trial of GitHub Enterprise Cloud expired.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.github_models_billing_disabled","description":"GitHub Models billing was disabled for the business.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.github_models_billing_enabled","description":"GitHub Models billing was enabled for the business.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.import_license_usage","description":"License usage information was imported from a GitHub Enterprise Server instance to an enterprise account on GitHub.com.","docs_reference_links":"/billing/managing-your-license-for-github-enterprise/syncing-license-usage-between-github-enterprise-server-and-github-enterprise-cloud#manually-uploading-github-enterprise-server-license-usage","docs_reference_titles":"Syncing license usage from GitHub Enterprise Server to Cloud","fieldsIndex":340},{"action":"business.invite_admin","description":"An invitation for someone to be an enterprise owner of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.invite_billing_manager","description":"An invitation for someone to be a billing manager of an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.invite_unaffiliated_member","description":"An invitation for someone to join an enterprise was sent.","docs_reference_links":"N/A","fieldsIndex":390},{"action":"business.members_can_update_protected_branches.clear","description":"An enterprise owner unset a policy for whether members of an enterprise can update protected branches on repositories for individual organizations. Organization owners can choose whether to allow updating protected branches settings.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.members_can_update_protected_branches.disable","description":"The ability for enterprise members to update branch protection rules was disabled. Only enterprise owners can update protected branches.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.members_can_update_protected_branches.enable","description":"The ability for enterprise members to update branch protection rules was enabled. Enterprise owners and members can update protected branches.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.members_limit_reached","description":"An enterprise has reached its members limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.members_limit_warning","description":"An enterprise is approaching its members limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.organizations_limit_reached","description":"An enterprise has reached its organizations limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.organizations_limit_warning","description":"An enterprise is approaching its organizations limit.","docs_reference_links":"N/A","fieldsIndex":396},{"action":"business.proxy_security_header_disabled","description":"The proxy security header was disabled for an enterprise. All users on the network can now access GitHub, unless blocked by other means.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_enabled","description":"The proxy security header was enabled for an enterprise. When the header is provided in requests, only Enterprise Managed Users matching the header will be able to access GitHub.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business.proxy_security_header_unsatisfied","description":"A user outside the enterprise tried to access GitHub while the proxy security header was enabled and provided in the request.","docs_reference_links":"N/A","fieldsIndex":343},{"action":"business.recovery_code_failed","description":"An enterprise owner failed to sign into a enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":397},{"action":"business.recovery_code_used","description":"An enterprise owner successfully signed into an enterprise with an external identity provider (IdP) using a recovery code.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/accessing-your-enterprise-account-if-your-identity-provider-is-unavailable","docs_reference_titles":"Accessing your enterprise account if your identity provider is unavailable","fieldsIndex":341},{"action":"business.recovery_codes_downloaded","description":"An enterprise owner downloaded the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.recovery_codes_generated","description":"An enterprise owner generated the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.recovery_codes_printed","description":"An enterprise owner printed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.recovery_codes_viewed","description":"An enterprise owner viewed the enterprise's SSO recovery codes.","docs_reference_links":"/admin/identity-and-access-management/managing-recovery-codes-for-your-enterprise/downloading-your-enterprise-accounts-single-sign-on-recovery-codes","docs_reference_titles":"Downloading your enterprise account's single sign-on recovery codes","fieldsIndex":341},{"action":"business.remove_disallowed_two_factor_method","description":"Removed a two-factor authentication method restriction for an enterprise.","docs_reference_links":"N/A","fieldsIndex":398},{"action":"business.remove_organization","description":"An organization was removed from an enterprise.","docs_reference_links":"N/A","fieldsIndex":342},{"action":"business.rename_slug","description":"The slug for the enterprise URL was renamed.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.restore","description":"The deleted enterprise was restored.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.revoke_external_identity","description":"The external identity for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.revoke_sso_session","description":"The SAML single sign-on session for a member in an enterprise was revoked.","docs_reference_links":"N/A","fieldsIndex":341},{"action":"business.secret_protection_metered_usage_lock","description":"Enablement for Secret Protection features on new repositories has been locked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business.secret_protection_metered_usage_unlock","description":"Enablement for Secret Protection features on new repositories has been unlocked for this enterprise.","docs_reference_links":"N/A","fieldsIndex":120},{"action":"business_secret_scanning_automatic_validity_checks.disabled","description":"Automatic partner validation checks have been disabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_automatic_validity_checks.enabled","description":"Automatic partner validation checks have been enabled at the business level","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise#managing-advanced-security-features","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.create","description":"An enterprise-level custom pattern was created for secret scanning.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":11},{"action":"business_secret_scanning_custom_pattern.delete","description":"An enterprise-level custom pattern was removed from secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern.publish","description":"An enterprise-level custom pattern was published for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_custom_pattern_push_protection.disabled","description":"Push protection for a custom pattern for secret scanning was disabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern_push_protection.enabled","description":"Push protection for a custom pattern for secret scanning was enabled for your enterprise.","docs_reference_links":"/code-security/secret-scanning/defining-custom-patterns-for-secret-scanning#defining-a-custom-pattern-for-an-enterprise-account","docs_reference_titles":"Defining custom patterns for secret scanning","fieldsIndex":0},{"action":"business_secret_scanning_custom_pattern.update","description":"Changes to an enterprise-level custom pattern were saved and a dry run was executed for secret scanning.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning.disable","description":"Secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning.disabled_for_new_repos","description":"Secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning.enable","description":"Secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning.enabled_for_new_repos","description":"Secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_generic_secrets.disabled","description":"Generic secrets have been disabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_generic_secrets.enabled","description":"Generic secrets have been enabled at the business level","docs_reference_links":"N/A","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.disabled","description":"Secret scanning for non-provider patterns was disabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_non_provider_patterns.enabled","description":"Secret scanning for non-provider patterns was enabled at the enterprise level.","docs_reference_links":"/code-security/secret-scanning/secret-scanning-patterns#non-provider-patterns","docs_reference_titles":"Supported secret scanning patterns","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.disable","description":"The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.enable","description":"The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection_custom_message.update","description":"The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":15},{"action":"business_secret_scanning_push_protection.disable","description":"Push protection for secret scanning was disabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":0},{"action":"business_secret_scanning_push_protection.disabled_for_new_repos","description":"Push protection for secret scanning was disabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection.enable","description":"Push protection for secret scanning was enabled for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection.enabled_for_new_repos","description":"Push protection for secret scanning was enabled for new repositories in your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":11},{"action":"business_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed","description":"The push protection setting was updated for a secret type for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":145},{"action":"business_secret_scanning_push_protection_pattern_configuration.updated","description":"The push protection pattern configuration was updated for your enterprise.","docs_reference_links":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","docs_reference_titles":"/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise","fieldsIndex":146},{"action":"business.secret_scanning_repo_admin_settings_policy_update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":389},{"action":"business.sso_response","description":"A SAML single sign-on (SSO) response was generated when a member attempted to authenticate with your enterprise. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"N/A","fieldsIndex":399},{"action":"business.trial_email_verification_failed","description":"A trial email verification attempt failed for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.trial_email_verification_requested","description":"A trial email verification resend was requested for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.trial_email_verification_sent","description":"A trial email verification was sent for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.trial_email_verified","description":"The trial email was successfully verified for a GitHub Enterprise Cloud trial.","docs_reference_links":"/admin/overview/setting-up-a-trial-of-github-enterprise-cloud","docs_reference_titles":"Setting up a trial of GitHub Enterprise Cloud","fieldsIndex":341},{"action":"business.update_actions_settings","description":"An enterprise owner or site administrator updated GitHub Actions policy settings for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise","docs_reference_titles":"Enforcing policies for GitHub Actions in your enterprise","fieldsIndex":400},{"action":"business.update_default_repository_permission","description":"The base repository permission setting was updated for all organizations in an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-base-repository-permissions","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":401},{"action":"business.update_emu_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":402},{"action":"business.update_member_repository_creation_permission","description":"The repository creation setting was updated for an enterprise.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-repository-creation","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":403},{"action":"business.update_member_repository_invitation_permission","description":"The policy setting for enterprise members inviting outside collaborators to repositories was updated.","docs_reference_links":"/admin/policies/enforcing-policies-for-your-enterprise/enforcing-repository-management-policies-in-your-enterprise#enforcing-a-policy-for-inviting-outside-collaborators-to-repositories","docs_reference_titles":"Enforcing repository management policies in your enterprise","fieldsIndex":404},{"action":"business.update_repo_self_hosted_runners_policy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":405},{"action":"business.update_saml_provider_settings","description":"The SAML single sign-on provider settings for an enterprise were updated.","docs_reference_links":"N/A","fieldsIndex":395},{"action":"business.update_unaffiliated_users_policy","description":"The policy for removing user accounts when removing the last organization membership was updated.","docs_reference_links":"/admin/enforcing-policies/enforcing-policies-for-your-enterprise/control-offboarding","docs_reference_titles":"Controlling user offboarding with the unaffiliated users policy","fieldsIndex":406},{"action":"business.upgrade_from_organization","description":"The organization was upgraded to an enterprise account.","docs_reference_links":"/billing/managing-the-plan-for-your-github-account/upgrading-your-accounts-plan#upgrading-your-organizations-plan","docs_reference_titles":"Upgrading your account's plan","fieldsIndex":341},{"action":"copilot.cfb_enterprise_org_enablement_changed","description":"The Copilot enablement policy changed at the enterprise level to either allow or disable access for all organizations, or to allow access for selected organizations.","docs_reference_links":"N/A","fieldsIndex":407},{"action":"copilot.cfb_enterprise_settings_changed","description":"Copilot feature settings were changed at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.clickwrap_save_event","description":"The GitHub Copilot Product Terms or Pre-Release Preview Terms were accepted.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.enterprise_enablement_changed","description":"Copilot access was enabled or disabled at the enterprise level.","docs_reference_links":"N/A","fieldsIndex":407},{"action":"enterprise.configure_self_hosted_jit_runner","description":"A new just-in-time GitHub Actions self-hosted runner was configured","docs_reference_links":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","docs_reference_titles":"/rest/actions/self-hosted-runners#create-configuration-for-a-just-in-time-runner-for-an-enterprise","fieldsIndex":11},{"action":"enterprise_domain.approve","description":"A domain was approved for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#approving-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise_domain.create","description":"A domain was added to an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise_domain.destroy","description":"A domain was removed from an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#removing-an-approved-or-verified-domain","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise_domain.verify","description":"A domain was verified for an enterprise.","docs_reference_links":"/admin/configuration/configuring-your-enterprise/verifying-or-approving-a-domain-for-your-enterprise#verifying-a-domain-for-your-enterprise-account","docs_reference_titles":"Verifying or approving a domain for your enterprise","fieldsIndex":165},{"action":"enterprise.register_self_hosted_runner","description":"A new GitHub Actions self-hosted runner was registered.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/adding-self-hosted-runners#adding-a-self-hosted-runner-to-a-repository","docs_reference_titles":"Adding self-hosted runners","fieldsIndex":15},{"action":"enterprise.remove_self_hosted_runner","description":"A GitHub Actions self-hosted runner was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":11},{"action":"enterprise_role.assign","description":"An enterprise role was assigned to a user or enterprise team.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":408},{"action":"enterprise_role.create","description":"A custom enterprise role was created in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":409},{"action":"enterprise_role.destroy","description":"A custom enterprise role was deleted in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":409},{"action":"enterprise_role.revoke","description":"A user or enterprise team was unassigned an enterprise role.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":408},{"action":"enterprise_role.update","description":"A custom enterprise role was edited in an enterprise.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-users-in-your-enterprise/roles-in-an-enterprise","docs_reference_titles":"Abilities of roles in an enterprise","fieldsIndex":410},{"action":"enterprise.runner_group_created","description":"A GitHub Actions self-hosted runner group was created.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/removing-self-hosted-runners#removing-a-runner-from-a-repository","docs_reference_titles":"Removing self-hosted runners","fieldsIndex":411},{"action":"enterprise.runner_group_removed","description":"A GitHub Actions self-hosted runner group was removed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#removing-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":412},{"action":"enterprise.runner_group_renamed","description":"A GitHub Actions self-hosted runner group was renamed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":142},{"action":"enterprise.runner_group_runner_removed","description":"The REST API was used to remove a GitHub Actions self-hosted runner from a group.","docs_reference_links":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","docs_reference_titles":"/rest/actions#remove-a-self-hosted-runner-from-a-group-for-an-organization","fieldsIndex":413},{"action":"enterprise.runner_group_runners_added","description":"A GitHub Actions self-hosted runner was added to a group.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#moving-a-self-hosted-runner-to-a-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":412},{"action":"enterprise.runner_group_runners_updated","description":"A GitHub Actions runner group's list of members was updated.","docs_reference_links":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","docs_reference_titles":"/rest/actions#set-self-hosted-runners-in-a-group-for-an-organization","fieldsIndex":412},{"action":"enterprise.runner_group_updated","description":"The configuration of a GitHub Actions self-hosted runner group was changed.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/managing-access-to-self-hosted-runners-using-groups#changing-the-access-policy-of-a-self-hosted-runner-group","docs_reference_titles":"Managing access to self-hosted runners using groups","fieldsIndex":411},{"action":"enterprise.runner_group_visiblity_updated","description":"The visibility of a GitHub Actions self-hosted runner group was updated via the REST API.","docs_reference_links":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","docs_reference_titles":"/rest/actions#update-a-self-hosted-runner-group-for-an-organization","fieldsIndex":144},{"action":"enterprise.self_hosted_runner_offline","description":"The GitHub Actions runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"enterprise.self_hosted_runner_online","description":"The GitHub Actions runner application was started. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/monitoring-and-troubleshooting-self-hosted-runners#checking-the-status-of-a-self-hosted-runner","docs_reference_titles":"Monitoring and troubleshooting self-hosted runners","fieldsIndex":149},{"action":"enterprise.self_hosted_runner_updated","description":"The GitHub Actions runner application was updated. This event is not included in the JSON/CSV export.","docs_reference_links":"/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners#about-self-hosted-runners","docs_reference_titles":"Self-hosted runners","fieldsIndex":150},{"action":"enterprise_team.add_member","description":"A new member was added to the enterprise team or an IdP group linked to an enterprise team, or an IdP group was linked to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"enterprise_team.copilot_assignment","description":"A license for GitHub Copilot was assigned to an enterprise team.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"enterprise_team.copilot_unassignment","description":"A license for GitHub Copilot was unassigned from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"enterprise_team.create","description":"A new enterprise team was created.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"enterprise_team.destroy","description":"An enterprise team was deleted.","docs_reference_links":"N/A","fieldsIndex":415},{"action":"enterprise_team.remove_member","description":"A member was removed from the enterprise team or an IdP group linked to an enterprise team, or an IdP group was unlinked from an enterprise team.","docs_reference_links":"N/A","fieldsIndex":414},{"action":"enterprise_team.rename","description":"The name of an enterprise team was changed.","docs_reference_links":"N/A","fieldsIndex":416},{"action":"external_group.add_member","description":"A user was added to an external group.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.delete","description":"An external group was deleted.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_group.link","description":"An external group was linked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":419},{"action":"external_group.provision","description":"An external group was created.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_group.remove_member","description":"A user was removed from an external group.","docs_reference_links":"N/A","fieldsIndex":417},{"action":"external_group.scim_api_failure","description":"Failed external group SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":420},{"action":"external_group.scim_api_success","description":"Successful external group SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":421},{"action":"external_group.unlink","description":"An external group was unlinked to a GitHub team.","docs_reference_links":"N/A","fieldsIndex":419},{"action":"external_group.update","description":"An external group was updated.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_group.update_display_name","description":"An external group's display name was updated.","docs_reference_links":"N/A","fieldsIndex":418},{"action":"external_identity.deprovision","description":"An external identity was deprovisioned, suspending the linked GitHub user.","docs_reference_links":"N/A","fieldsIndex":422},{"action":"external_identity.provision","description":"An external identity was created and linked to a GitHub user.","docs_reference_links":"N/A","fieldsIndex":422},{"action":"external_identity.scim_api_failure","description":"Failed external identity SCIM API request.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":423},{"action":"external_identity.scim_api_success","description":"Successful external identity SCIM API request. Excludes GET API requests.","docs_reference_links":"/rest/scim/scim","docs_reference_titles":"REST API endpoints for SCIM","fieldsIndex":424},{"action":"external_identity.update","description":"An external identity was updated.","docs_reference_links":"N/A","fieldsIndex":422},{"action":"ip_allow_list.disable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.disable_user_level_enforcement","description":"IP allow list user level enforcement was disabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.enable_idp_ip_allowlist_for_web","description":"Identity Provider based IP allow list for web interactions was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_skip_idp_ip_allowlist_app_access","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"ip_allow_list.enable_user_level_enforcement","description":"IP allow list user level enforcement was enabled.","docs_reference_links":"N/A","fieldsIndex":11},{"action":"ip_allow_list.update_ip_allowlist_configuration","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"organization_custom_property_definition.create","description":"A new organization custom property definition was created.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":425},{"action":"organization_custom_property_definition.destroy","description":"An organization custom property definition was deleted.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":425},{"action":"organization_custom_property_definition.update","description":"An organization custom property definition was updated.","docs_reference_links":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","docs_reference_titles":"/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/managing-custom-properties-for-organization-in-your-enterprise","fieldsIndex":426},{"action":"personal_access_token.access_restriction_reset","description":"The configured restriction for access to resources via personal access tokens was reset and delegated to organizations.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"personal_access_token.auto_approve_grant_requests_reset","description":"Triggered when the enterprise delegates to the organizations when to require approval for fine-grained personal access tokens before the tokens can access organization resources.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.disable","description":"SSO lockdown for users was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_lockdown.enable","description":"SSO lockdown for users was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.disable","description":"Automatic redirects for users to single sign-on (SSO) was disabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"sso_redirect.enable","description":"Automatic redirects for users to single sign-on (SSO) was enabled.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.user_access_reinstated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"copilot.user_access_revoked","description":"N/A","docs_reference_links":"N/A","fieldsIndex":427},{"action":"discussion_post.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":428},{"action":"discussion_post_reply.destroy","description":"N/A","docs_reference_links":"N/A","fieldsIndex":429},{"action":"discussion_post_reply.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":430},{"action":"discussion_post.update","description":"N/A","docs_reference_links":"N/A","fieldsIndex":428},{"action":"oauth_application.suspend","description":"N/A","docs_reference_links":"N/A","fieldsIndex":431},{"action":"oauth_application.unsuspend","description":"An OAuth application was unsuspended for a user or organization account.","docs_reference_links":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","docs_reference_titles":"/apps/oauth-apps/building-oauth-apps/authenticating-to-the-rest-api-with-an-oauth-app#registering-your-app","fieldsIndex":107},{"action":"org.async_delete","description":"A user initiated a background job to delete an organization.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.recreate","description":"An organization was restored.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"org.transform","description":"A user account was converted into an organization.","docs_reference_links":"/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-your-personal-account/converting-a-user-into-an-organization","docs_reference_titles":"Converting a user into an organization","fieldsIndex":432},{"action":"repo.collaborators_only","description":"N/A","docs_reference_links":"N/A","fieldsIndex":433},{"action":"repo.disk_archive","description":"A repository was archived on disk.","docs_reference_links":"/repositories/archiving-a-github-repository/archiving-repositories","docs_reference_titles":"/repositories/archiving-a-github-repository/archiving-repositories","fieldsIndex":0},{"action":"repo.hide_from_discovery","description":"N/A","docs_reference_links":"N/A","fieldsIndex":434},{"action":"repo.noindex","description":"N/A","docs_reference_links":"N/A","fieldsIndex":434},{"action":"repo.override_unlock","description":"The repository was unlocked.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"repo.pages_build","description":"N/A","docs_reference_links":"N/A","fieldsIndex":435},{"action":"repo.require_login","description":"N/A","docs_reference_links":"N/A","fieldsIndex":433},{"action":"team_discussions.clear","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.disable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"team_discussions.enable","description":"N/A","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.correct_password_from_unrecognized_device","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_device_and_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.correct_password_from_unrecognized_location","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.flag_as_large_scale_contributor","description":"A user account was flagged as a large scale contributor. Only contributions from public repositories the user owns will be shown in their contribution graph, in order to prevent timeouts.","docs_reference_links":"N/A","fieldsIndex":367},{"action":"user.minimize_comment","description":"A comment made by a user was minimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"user.partial_two_factor_email_followup","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.remove_large_scale_contributor_flag","description":"A user account was no longer flagged as a large scale contributor.","docs_reference_links":"N/A","fieldsIndex":0},{"action":"user.report_abuse","description":"N/A","docs_reference_links":"N/A","fieldsIndex":236},{"action":"user.report_content","description":"Triggered when you report an issue or pull request, or a comment on an issue, pull request, or commit.","docs_reference_links":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","docs_reference_titles":"/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam","fieldsIndex":0},{"action":"user.sign_in_from_unrecognized_location","description":"A user signed in from an unrecognized location.","docs_reference_links":"N/A","fieldsIndex":15},{"action":"user.unminimize_comment","description":"A comment made by a user was unminimized.","docs_reference_links":"N/A","fieldsIndex":53},{"action":"copilot.knowledge_base_created","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_deleted","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"copilot.knowledge_base_updated","description":"N/A","docs_reference_links":"N/A","fieldsIndex":15},{"action":"actions_policy.evaluate","description":"N/A","docs_reference_links":"N/A","fieldsIndex":245}] \ No newline at end of file diff --git a/src/audit-logs/data/shared/fields-pool.json b/src/audit-logs/data/shared/fields-pool.json index 3b674d198961..dd3bc48368cf 100644 --- a/src/audit-logs/data/shared/fields-pool.json +++ b/src/audit-logs/data/shared/fields-pool.json @@ -1 +1 @@ -[["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actions_cache_id","actions_cache_key","actions_cache_scope","actions_cache_version","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","alert_recipient_user_ids","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_type","user_programmatic_access_name","uuid"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","old_alert_enabled","old_budget_limit_type","old_expires_at","old_pricing_target_id","old_pricing_target_type","old_target_amount","old_target_id","old_target_type","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","resource_id","resource_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","dismissal_approver_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","dismissal_request_id","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","origin_repository"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enablement","operation_type","organization_names"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","plan","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_settings","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","excluded_paths","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","custom_instructions","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_plan","operation_type","owner","owner_type","plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_plan","operation_type","owner","owner_type","scheduled_plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_config","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_access","oauth_application_id","old_access","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","user_programmatic_access_name","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","oauth_application_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","old_value_type","operation_type","property_name","required","user_programmatic_access_name","values_editable_by","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","public_repo","user_programmatic_access_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","definition_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","access_level","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","old_message","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","approvers","approvers_was","can_admins_bypass","environment_id","environment_name","new_value","old_value","prevent_self_review"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","external_id","repository_public","transport_protocol","transport_protocol_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","active_was","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","events_were","hook_id","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic","trigger_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_added","repositories_added_names","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_removed","repositories_removed_names","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","reason","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","requester","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","manager","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","requester","requester_id","transfer_from","transfer_from_id","transfer_from_type","transfer_to","transfer_to_id","transfer_to_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","integration","ip_allow_list_entry","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","pull_request_id","pull_request_title","pull_request_url","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","old_color","old_description","old_enabled","old_issue_type_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","assignment_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","check_response_timeout_minutes","created_at","max_entries_to_build","max_entries_to_merge","merge_method","merging_strategy","min_entries_to_merge","min_entries_to_merge_wait_minutes","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitation_id","oauth_application_id","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","permission","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","query_phrase"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end","operation_type","start"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","initiated_from","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","invitee_email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enablement","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitation_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","manager","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","push_protection_setting","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end_date","filename","operation_type","query","requested_at","start_date"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","filename","operation_type","query","requested_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_id","runner_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","runner_group_name","runner_id","runner_name","source_version","target_version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","from_business","operation_type","to_business"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","old_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_permission","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","oauth_application_id","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","organization_role_id","organization_role_name","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain","operation_type","owner","owner_type","state"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","exempt_administrators","old_token_expiration","operation_type","token_expiration"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_token_expiration","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","owner","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type","project_id","project_number","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","collaborator","collaborator_type","created_at","old_project_role","operation_type","project_id","project_name","project_role","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","created_at","name","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","allow_deletions_enforcement_level","allow_force_pushes_enforcement_level","authorized_actor_names","created_at","create_protected","dismiss_stale_reviews_on_push","enforcement_level","ignore_approvals_from_contributors","linear_history_requirement_enforcement_level","lock_allows_fetch_and_merge","lock_branch_enforcement_level","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","required_approving_review_count","required_deployments_enforcement_level","required_review_thread_resolution_enforcement_level","required_status_checks_enforcement_level","require_code_owner_review","require_last_push_approval","signature_requirement_enforcement_level","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","dismiss_stale_reviews_on_push","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","authorized_actors_only","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","after","before","branch","compliant_pull_request_ids","created_at","deploy_key_fingerprint","oauth_application_id","operation_type","overridden_codes","public_repo","reasons","referrer","rule_suite_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_deletions_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_force_pushes_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ignore_approvals_from_contributors","name","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","linear_history_requirement_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","lock_allows_fetch_and_merge","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement_level","lock_branch_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_code_owner_review","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_last_push_approval","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_approving_review_count","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_status_checks_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","signature_requirement_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","fingerprint","key","operation_type","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","agent_session_id","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","reviewer","reviewer_id","reviewer_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","pull_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","review_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","previous_visibility","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","name","oauth_application_id","operation_type","public_repo","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","category","created_at","oauth_application_id","operation_type","public_repo","tool","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","category","created_at","operation_type","public_repo","tool"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","languages","oauth_application_id","operation_type","public_repo","query_suite","threat_model","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","request_category","request_method","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cname","created_at","oauth_application_id","old_cname","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_branch","new_branch","oauth_application_id","old_branch","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_user","operation_type","owner","public_repo","repo_was","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_nwo","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_policy","operation_type","policy","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","public_repo","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_base_role","old_permission","old_repo_base_role","old_repo_permission","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","content_type","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","oauth_application_id","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","ruleset_bypass_actors","ruleset_conditions","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_rules","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","ruleset_bypass_actors_added","ruleset_bypass_actors_deleted","ruleset_bypass_actors_updated","ruleset_conditions_added","ruleset_conditions_deleted","ruleset_conditions_updated","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_old_enforcement","ruleset_old_name","ruleset_rules_added","ruleset_rules_deleted","ruleset_rules_updated","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","repository_security_configuration_failure_reason","repository_security_configuration_state","security_configuration_id","security_configuration_name","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","dismiss_comment","dismiss_reason","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","context","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","reason","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","multi_repo","number","oauth_application_id","operation_type","publicly_leaked","public_repo","resolution","secret_type","secret_type_display_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","report_result","secret_type","secret_type_display_name","secret_type_provider"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","current_validity","multi_repo","number","previous_validity","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","comment","created_at","number","operation_type","public_repo","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","push_protection_bypass_reason","request_reviewer","request_reviewer_comment","request_reviewer_id","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","comment","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","custom_pattern_name","custom_pattern_scope","operation_type","public_repo","secret_types","source","source_slug","started_at","type","type_slug"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_for_new_private_repos","default_for_new_public_repos","oauth_application_id","operation_type","security_configuration_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement","oauth_application_id","operation_type","security_configuration_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","patreon_email","patreon_username"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","openssh_public_key","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type","token_expires_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","name_was","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_permission","old_repo_base_role","old_repo_permission","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","deleted_at","deleted_by","deleted_by_id","deleted_content","editor","editor_id","operation_type","user_content_id","user_content_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed","created_at","event_name","integration_installation_id","operation_type","public_repo","ruleset_ids","violations"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","topic","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cancelled_at","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","completed_at","conclusion","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_attempt","run_number","started_at","topic","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_number","started_at","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","calling_workflow_refs","calling_workflow_shas","created_at","environment_name","imposer_repo","is_hosted_runner","job_name","job_workflow_ref","operation_type","runner_group_id","runner_group_name","runner_id","runner_labels","runner_name","runner_owner_type","secrets_passed","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","check_run_id","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","rerun_type","run_attempt","run_number","started_at","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","gist","gist_id","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","bullets","created_at","description","has_free_trial","marketplace_listing","marketplace_listing_plan","monthly_price_in_cents","operation_type","yearly_price_in_cents"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","server_id","server_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_description","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","entries","server_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name","old_allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","block_local_servers","mcp_policy","old_block_local_servers","old_mcp_policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","nickname","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","pat_field_changed","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","passkey_nickname"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","query_string","rate_limit_remaining","request_body","request_method","route","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_result","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_enabled","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","new_azure_blob_container","new_event_hub_instance","new_gc_bucket","new_s3_arn_role","new_s3_bucket","new_splunk_domain","new_splunk_port","old_azure_blob_container","old_event_hub_instance","old_gc_bucket","old_s3_arn_role","old_s3_bucket","old_splunk_domain","old_splunk_port","operation_type","reason","secrets_updated","ssl_verify"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","organization_upgrade"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","invitation_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","seats_plan_type","seats_plan_type_was"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","old_permission","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_emu_repo_runners_policy","old_emu_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_repo_runners_policy","old_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","remove_existing_unaffiliated_users","users_removed_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","old_role_permissions","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","scim_user_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","operation_type","property_name","required","values_editable_by"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","visibility"]] \ No newline at end of file +[["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actions_cache_id","actions_cache_key","actions_cache_scope","actions_cache_version","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","alert_recipient_user_ids","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_type","user_programmatic_access_name","uuid"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","old_alert_enabled","old_budget_limit_type","old_expires_at","old_pricing_target_id","old_pricing_target_type","old_target_amount","old_target_id","old_target_type","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","resource_id","resource_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","dismissal_approver_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","dismissal_request_id","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","origin_repository"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enablement","operation_type","organization_names"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","plan","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_settings","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","excluded_paths","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","custom_instructions","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_plan","operation_type","owner","owner_type","plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_plan","operation_type","owner","owner_type","scheduled_plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_config","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_access","oauth_application_id","old_access","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","user_programmatic_access_name","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","oauth_application_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","old_value_type","operation_type","property_name","required","user_programmatic_access_name","values_editable_by","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","public_repo","user_programmatic_access_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","definition_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","access_level","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","old_message","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","approvers","approvers_was","can_admins_bypass","environment_id","environment_name","new_value","old_value","prevent_self_review"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","external_id","repository_public","transport_protocol","transport_protocol_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","active_was","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","events_were","hook_id","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic","trigger_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_added","repositories_added_names","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_removed","repositories_removed_names","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","reason","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","requester","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","events_added","events_removed","events_unchanged","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","manager","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","requester","requester_id","transfer_from","transfer_from_id","transfer_from_type","transfer_to","transfer_to_id","transfer_to_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","integration","ip_allow_list_entry","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","pull_request_id","pull_request_title","pull_request_url","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","old_color","old_description","old_enabled","old_issue_type_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","assignment_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","check_response_timeout_minutes","created_at","max_entries_to_build","max_entries_to_merge","merge_method","merging_strategy","min_entries_to_merge","min_entries_to_merge_wait_minutes","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitation_id","oauth_application_id","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","permission","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","query_phrase"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end","operation_type","start"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","initiated_from","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","invitee_email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enablement","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitation_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","oauth_application_id","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","manager","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","push_protection_setting","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end_date","filename","operation_type","query","requested_at","start_date"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","filename","operation_type","query","requested_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_id","runner_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","runner_group_name","runner_id","runner_name","source_version","target_version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_workflow_permissions_value","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name","workflow_permission_can_approve_pr_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","from_business","oauth_application_id","operation_type","to_business"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","old_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_permission","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","oauth_application_id","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","organization_role_id","organization_role_name","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain","operation_type","owner","owner_type","state"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","exempt_administrators","old_token_expiration","operation_type","token_expiration"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_token_expiration","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","owner","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type","project_id","project_number","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","collaborator","collaborator_type","created_at","old_project_role","operation_type","project_id","project_name","project_role","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","created_at","name","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","allow_deletions_enforcement_level","allow_force_pushes_enforcement_level","authorized_actor_names","created_at","create_protected","dismiss_stale_reviews_on_push","enforcement_level","ignore_approvals_from_contributors","linear_history_requirement_enforcement_level","lock_allows_fetch_and_merge","lock_branch_enforcement_level","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","required_approving_review_count","required_deployments_enforcement_level","required_review_thread_resolution_enforcement_level","required_status_checks_enforcement_level","require_code_owner_review","require_last_push_approval","signature_requirement_enforcement_level","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","dismiss_stale_reviews_on_push","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","authorized_actors_only","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","after","before","branch","compliant_pull_request_ids","created_at","deploy_key_fingerprint","oauth_application_id","operation_type","overridden_codes","public_repo","reasons","referrer","rule_suite_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_deletions_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_force_pushes_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ignore_approvals_from_contributors","name","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","linear_history_requirement_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","lock_allows_fetch_and_merge","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement_level","lock_branch_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_code_owner_review","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_last_push_approval","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_approving_review_count","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_status_checks_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","signature_requirement_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","agent_session_id","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","reviewer","reviewer_id","reviewer_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","pull_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","review_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","previous_visibility","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","name","oauth_application_id","operation_type","public_repo","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","category","created_at","oauth_application_id","operation_type","public_repo","tool","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","category","created_at","operation_type","public_repo","tool"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","languages","oauth_application_id","operation_type","public_repo","query_suite","threat_model","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","request_category","request_method","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cname","created_at","oauth_application_id","old_cname","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_branch","new_branch","oauth_application_id","old_branch","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_workflow_permissions_value","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility","workflow_permission_can_approve_pr_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_user","operation_type","owner","public_repo","repo_was","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_nwo","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_policy","operation_type","policy","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","public_repo","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_base_role","old_permission","old_repo_base_role","old_repo_permission","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","repository_advisory","repository_advisory_comment_id","repository_advisory_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","confidential_comment_count","created_at","operation_type","public_repo","repository_advisory","repository_advisory_id","surface"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","content_type","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","oauth_application_id","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","ruleset_bypass_actors","ruleset_conditions","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_rules","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","ruleset_bypass_actors_added","ruleset_bypass_actors_deleted","ruleset_bypass_actors_updated","ruleset_conditions_added","ruleset_conditions_deleted","ruleset_conditions_updated","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_old_enforcement","ruleset_old_name","ruleset_rules_added","ruleset_rules_deleted","ruleset_rules_updated","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","repository_security_configuration_failure_reason","repository_security_configuration_state","security_configuration_id","security_configuration_name","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","dismiss_comment","dismiss_reason","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","reason","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","context","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sandbox_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","reason","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","multi_repo","number","oauth_application_id","operation_type","publicly_leaked","public_repo","resolution","secret_type","secret_type_display_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","report_result","secret_type","secret_type_display_name","secret_type_provider"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","current_validity","multi_repo","number","previous_validity","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","comment","created_at","number","operation_type","public_repo","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","push_protection_bypass_reason","request_reviewer","request_reviewer_comment","request_reviewer_id","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","comment","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","custom_pattern_name","custom_pattern_scope","operation_type","public_repo","secret_types","source","source_slug","started_at","topic","type","type_slug"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_for_new_private_repos","default_for_new_public_repos","oauth_application_id","operation_type","security_configuration_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement","oauth_application_id","operation_type","security_configuration_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","patreon_email","patreon_username"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","openssh_public_key","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type","token_expires_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","name_was","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_permission","old_repo_base_role","old_repo_permission","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","deleted_at","deleted_by","deleted_by_id","deleted_content","editor","editor_id","operation_type","user_content_id","user_content_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed","created_at","event_name","integration_installation_id","operation_type","public_repo","ruleset_ids","violations"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","topic","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cancelled_at","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","completed_at","conclusion","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_attempt","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_number","started_at","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","operation_type","started_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","started_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","calling_workflow_refs","calling_workflow_shas","created_at","environment_name","imposer_repo","is_hosted_runner","job_name","job_workflow_ref","operation_type","runner_group_id","runner_group_name","runner_id","runner_labels","runner_name","runner_owner_type","secrets_passed","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","check_run_id","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","rerun_type","run_attempt","run_number","started_at","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","limit","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","default_workflow_permissions_value","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","workflow_permission_can_approve_pr_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","gist","gist_id","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","bullets","created_at","description","has_free_trial","marketplace_listing","marketplace_listing_plan","monthly_price_in_cents","operation_type","yearly_price_in_cents"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","server_id","server_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_description","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","entries","server_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name","old_allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","block_local_servers","mcp_policy","old_block_local_servers","old_mcp_policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_name","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","nickname","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","pat_field_changed","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","passkey_nickname"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","query_string","rate_limit_remaining","request_body","request_method","route","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_result","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_enabled","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","new_azure_blob_container","new_datadog_site","new_event_hub_instance","new_gc_bucket","new_s3_arn_role","new_s3_bucket","new_splunk_domain","new_splunk_port","oauth_application_id","old_azure_blob_container","old_datadog_site","old_event_hub_instance","old_gc_bucket","old_s3_arn_role","old_s3_bucket","old_splunk_domain","old_splunk_port","operation_type","reason","secrets_updated","ssl_verify"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","organization_upgrade"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","seats_plan_type","seats_plan_type_was"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","old_permission","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_emu_repo_runners_policy","old_emu_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","remove_existing_unaffiliated_users","users_removed_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","old_role_permissions","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","large_group_warning","message","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","large_group_warning","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","scim_user_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","operation_type","property_name","required","values_editable_by"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"]] \ No newline at end of file diff --git a/src/audit-logs/data/version-index.json b/src/audit-logs/data/version-index.json index 6bdbcdd62f2f..c97b12622d41 100644 --- a/src/audit-logs/data/version-index.json +++ b/src/audit-logs/data/version-index.json @@ -1 +1 @@ -{"fpt":{"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,869,870,871,872,873,874,875,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,797,798,799,801,804,805,806,807,809,811]},"ghec":{"enterprise":[0,1,2,3,4,5,6,962,7,963,964,965,966,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,815,816,817,967,968,818,969,970,971,972,973,974,975,976,977,978,979,980,981,982,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,819,820,1046,821,1047,822,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,1094,1095,55,56,57,58,59,60,61,62,63,1096,65,1097,68,69,70,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,1098,1099,1100,1101,1102,109,110,1103,1104,1105,1106,1107,1108,1109,1110,1111,1112,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1143,1144,1145,155,156,1146,1147,1148,157,158,159,1149,160,161,162,163,168,169,170,174,175,176,177,178,179,180,181,182,183,184,846,185,847,848,186,849,850,851,852,187,188,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,236,237,238,239,240,241,242,245,246,247,248,249,250,251,252,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,274,275,276,277,278,279,280,281,284,285,286,287,289,290,291,292,293,294,295,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,322,323,324,325,326,327,328,329,330,331,334,335,336,337,338,339,340,341,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,389,390,391,392,394,395,396,397,398,399,400,402,403,1150,1151,1152,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,1153,439,440,441,1154,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,493,494,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,1155,1156,1157,1158,759,760,761,766,767,768,769,770,771,772,773,777,778,779,780,781,782,783,784,785,786,787,788,789,925,926,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,869,870,871,872,873,874,875,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,797,798,799,801,804,805,806,807,809,811]},"ghes-3.17":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,13,14,22,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1079,823,824,825,826,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1159,1160,76,77,78,79,80,81,82,83,84,85,86,87,88,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,702,705,707,708,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,769,770,771,772,773,1177,1178,1179,780,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,1191,1192,1193,69,70,1159,1160,76,77,78,79,80,81,82,83,84,85,86,87,88,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,168,169,170,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,247,248,249,250,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,396,397,398,399,400,401,402,403,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,702,704,705,706,707,708,710,711,712,713,714,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,769,770,771,772,773,1177,1178,1179,774,775,776,780,782,783,784,785,786,787,788,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,13,14,22,24,815,823,824,825,826,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1159,1160,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.18":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,13,14,22,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1079,823,824,825,826,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,702,705,707,708,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,769,770,771,772,773,1177,1178,1179,780,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,1191,1192,1193,69,70,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,247,248,249,250,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,369,370,371,372,373,374,375,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,396,397,398,399,400,401,402,403,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,702,704,705,706,707,708,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,769,770,771,772,773,1177,1178,1179,774,775,776,780,782,783,784,785,786,787,788,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,13,14,22,24,815,823,824,825,826,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.19":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,10,11,12,13,14,20,21,22,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,1177,1178,1179,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,1191,1192,1193,69,70,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,247,248,249,250,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,1177,1178,1179,774,775,776,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,24,815,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.20":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,10,11,12,13,14,20,21,22,23,24,815,816,968,969,970,971,972,973,974,977,978,979,980,987,988,990,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1031,1032,1033,819,1047,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,1161,1162,1163,1164,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,662,663,664,665,666,667,668,669,670,671,672,673,680,681,682,683,684,685,686,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,1177,1178,1179,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,69,70,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,93,94,95,96,97,98,99,100,101,102,103,104,105,1161,1162,1163,1164,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,247,248,249,250,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,632,633,634,635,636,637,638,639,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,660,661,662,663,664,665,666,667,668,669,670,671,672,673,676,677,678,680,681,682,683,684,685,686,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,1177,1178,1179,774,775,776,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,73,74,75,76,77,78,85,86,87,88,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.21":{"enterprise":[0,1,812,813,814,2,962,7,963,964,965,966,10,11,12,13,14,20,21,22,23,24,815,816,817,968,818,969,970,971,972,973,974,977,978,979,980,987,988,990,991,992,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1022,1023,1031,1032,1033,1034,1035,1036,819,820,821,1047,822,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,304,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,662,663,664,665,666,667,668,669,670,671,672,673,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,777,778,779,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]},"ghes-3.22":{"enterprise":[0,1,812,813,814,2,1194,962,7,963,964,965,966,10,11,12,13,14,20,21,22,23,24,815,816,817,968,818,969,970,971,972,973,974,977,978,979,980,987,988,990,991,992,993,994,995,996,1001,1008,1009,1010,1012,1014,1015,1017,1019,1020,1022,1023,1031,1032,1033,1034,1035,1036,819,820,821,1047,822,1048,1051,1054,1055,1056,1057,1058,1059,1060,1061,1062,1063,1064,1065,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,823,824,825,826,827,828,829,830,831,832,833,834,1080,1085,1086,1088,1089,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,106,107,108,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,1109,1110,1111,1113,1114,1115,1116,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,111,112,113,114,115,116,117,118,119,120,121,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,835,836,837,122,123,124,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,1145,155,156,1148,157,158,159,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,1165,219,1166,858,859,860,220,221,223,224,225,226,227,228,229,230,231,232,1167,238,239,240,241,242,247,248,249,250,255,256,265,266,267,268,269,270,271,272,274,281,284,286,287,289,290,291,292,294,295,297,298,299,300,301,302,303,304,310,1168,317,320,323,324,325,326,327,331,334,335,337,338,339,340,344,345,346,347,348,349,350,351,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,1169,389,391,394,397,398,399,402,403,1150,1151,1152,404,405,409,410,411,412,426,427,428,429,430,431,432,861,862,433,434,435,436,437,438,1153,439,440,441,1154,863,864,865,866,442,443,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,541,542,543,544,545,546,547,548,549,550,551,1170,554,555,556,557,558,559,560,561,562,563,564,565,1171,566,1172,1173,1174,1175,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,1176,588,589,590,591,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,620,621,622,623,632,633,634,635,636,637,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,662,663,664,665,666,667,668,669,670,671,672,673,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,696,697,701,702,705,707,708,709,710,715,716,717,718,719,720,723,724,725,726,727,728,729,730,731,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,754,755,756,757,759,760,761,762,763,764,765,883,884,885,886,887,888,766,767,768,769,770,771,772,773,777,778,779,780,781,782,783,784,785,786,788,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,789,1180,1181,1182,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,1183,931,932,933,934,935,1184,936,1185,937,938,939,940,1186,941,1187,1188,942,943,944,945,946,1189,947,948,949,950,951,952,953,954,955,956,957,958,1190,959,960,961,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"organization":[0,1,2,1194,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,798,799,800,801,802,803,804,805,806,807,808,809,810,811],"user":[0,1,812,813,814,2,1194,7,10,11,12,13,14,20,21,22,23,24,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830,831,832,833,834,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,71,73,74,75,76,77,78,85,86,87,88,89,90,91,92,94,95,96,97,98,99,100,101,102,111,112,113,114,115,116,117,118,119,120,121,835,836,837,838,839,125,126,127,840,841,128,129,130,131,132,133,134,135,136,137,138,139,142,143,144,145,146,147,148,149,150,151,152,164,165,166,167,178,179,180,181,182,842,843,844,845,183,184,846,185,847,848,186,849,850,851,852,199,200,201,202,203,204,205,206,853,854,855,856,857,212,213,214,215,216,217,218,219,858,859,860,223,224,226,227,228,229,323,369,370,371,372,376,377,378,379,380,382,383,384,397,398,399,430,431,432,861,862,433,434,435,436,439,863,864,865,866,444,445,446,867,451,452,453,457,458,459,460,461,462,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,498,507,508,509,510,511,512,513,531,532,533,534,535,536,537,538,541,546,554,555,556,557,558,559,560,561,562,563,564,565,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,588,592,593,594,595,596,597,598,599,600,868,601,602,603,604,605,606,607,608,609,610,611,632,633,634,635,636,637,645,646,647,876,877,878,879,880,732,733,734,736,737,738,739,740,741,742,743,744,745,746,747,748,881,749,750,751,752,882,753,762,763,764,765,883,884,885,886,887,888,889,890,891,892,893,894,895,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,798,799,801,804,805,806,807,809,811]}} \ No newline at end of file +{"fpt":{"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,65,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,154,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,222,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,709,710,711,712,713,714,715,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,814,815,816,818,823,824,825,826,828,830]},"ghec":{"enterprise":[0,1,2,3,4,5,6,975,7,976,977,978,979,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,834,835,836,980,837,981,838,982,983,984,985,986,987,988,989,990,991,992,993,994,995,996,997,998,999,1000,1001,1002,1003,1004,1005,1006,1007,1008,1009,1010,1011,1012,1013,1014,1015,1016,1017,1018,1019,1020,1021,1022,1023,1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,1051,1052,1053,1054,1055,1056,1057,1058,1059,1060,839,840,1061,841,1062,842,1063,1064,1065,1066,1067,1068,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1081,1082,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1096,1097,1098,1099,1100,1101,1102,1103,1104,1105,1106,1107,1108,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,1109,1110,55,56,57,58,59,60,61,62,63,1111,66,1112,69,70,71,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,1113,1114,1115,1116,1117,110,111,1118,1119,1120,1121,1122,1123,1124,1125,1126,1127,1128,1129,1130,1131,1132,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,1158,1159,1160,157,158,1161,1162,1163,159,160,161,1164,162,163,164,165,170,171,172,176,177,178,179,180,181,182,183,184,185,186,866,187,867,868,188,869,870,871,872,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,226,227,228,229,230,231,232,233,234,235,239,240,241,242,243,244,245,248,249,250,251,252,253,254,255,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,277,278,279,280,281,282,283,284,287,288,289,290,292,293,294,295,296,297,298,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,325,326,327,328,329,330,331,332,333,334,337,338,339,340,341,342,343,344,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,392,393,394,395,397,398,399,400,401,402,403,405,406,1165,1166,1167,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,1168,442,443,444,1169,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,496,497,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,1170,1171,1172,1173,776,777,778,783,784,785,786,787,788,789,790,794,795,796,797,798,799,800,801,802,803,804,805,806,938,939,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,542,543,544,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,619,620,621,622,623,624,625,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,709,710,711,712,713,714,715,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,814,815,816,817,818,819,820,821,822,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,835,836,837,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,64,65,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,154,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,222,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,709,710,711,712,713,714,715,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,814,815,816,818,823,824,825,826,828,830]},"ghes-3.17":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,13,14,22,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1094,843,844,845,846,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1174,1175,77,78,79,80,81,82,83,84,85,86,87,88,89,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,717,722,724,725,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,786,787,788,789,790,1192,1193,1194,797,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,1206,1207,1208,70,71,1174,1175,77,78,79,80,81,82,83,84,85,86,87,88,89,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,170,171,172,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,250,251,252,253,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,399,400,401,402,403,404,405,406,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,717,721,722,723,724,725,727,728,729,730,731,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,786,787,788,789,790,1192,1193,1194,791,792,793,797,799,800,801,802,803,804,805,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,13,14,22,24,834,843,844,845,846,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,1174,1175,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.18":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,13,14,22,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1094,843,844,845,846,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,717,722,724,725,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,786,787,788,789,790,1192,1193,1194,797,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,13,14,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,1206,1207,1208,70,71,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,250,251,252,253,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,372,373,374,375,376,377,378,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,399,400,401,402,403,404,405,406,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,717,721,722,723,724,725,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,786,787,788,789,790,1192,1193,1194,791,792,793,797,799,800,801,802,803,804,805,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,13,14,22,24,834,843,844,845,846,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.19":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,10,11,12,13,14,20,21,22,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,1192,1193,1194,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,1206,1207,1208,70,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,250,251,252,253,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,1192,1193,1194,791,792,793,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,24,834,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.20":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,10,11,12,13,14,20,21,22,23,24,834,835,981,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1045,1046,1047,839,1062,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,1176,1177,1178,1179,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,670,671,672,673,674,675,676,677,678,679,680,681,688,689,690,691,692,693,694,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,1192,1193,1194,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,70,71,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,94,95,96,97,98,99,100,101,102,103,104,105,106,1176,1177,1178,1179,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,250,251,252,253,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,640,641,642,643,644,645,646,647,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,668,669,670,671,672,673,674,675,676,677,678,679,680,681,684,685,686,688,689,690,691,692,693,694,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,1192,1193,1194,791,792,793,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,74,75,76,77,78,79,86,87,88,89,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.21":{"enterprise":[0,1,831,832,833,2,975,7,976,977,978,979,10,11,12,13,14,20,21,22,23,24,834,835,836,981,838,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1004,1005,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1036,1037,1045,1046,1047,1048,1049,1050,1051,839,840,841,1062,842,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,72,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,307,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,670,671,672,673,674,675,676,677,678,679,680,681,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,794,795,796,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,66,67,68,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,7,10,11,12,13,14,20,21,22,23,24,834,835,836,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]},"ghes-3.22":{"enterprise":[0,1,831,832,833,2,1209,975,7,976,977,978,979,10,11,12,13,14,20,21,22,23,24,834,835,836,981,838,982,983,984,985,986,987,990,991,992,993,1000,1001,1003,1004,1005,1006,1007,1008,1009,1014,1021,1022,1023,1025,1027,1028,1031,1033,1034,1036,1037,1045,1046,1047,1048,1049,1050,1051,839,840,841,1062,842,1063,1066,1069,1070,1071,1072,1073,1074,1075,1076,1077,1078,1079,1080,1083,1084,1085,1086,1087,1088,1089,1090,1091,1092,1093,1094,843,844,845,846,847,848,849,850,851,852,853,854,1095,1100,1101,1103,1104,25,26,27,28,29,30,31,32,33,34,35,36,37,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,65,72,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,107,108,109,1113,1114,1115,1116,1117,1118,1119,1120,1121,1122,1123,1124,1125,1126,1128,1129,1130,1131,1133,1134,1135,1136,1137,1138,1139,1140,1141,1142,112,113,114,115,116,117,118,119,120,121,122,1143,1144,1145,1146,1147,1148,1149,1150,1151,1152,1153,1154,1155,1156,1157,855,856,857,123,124,125,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,1160,157,158,1163,159,160,161,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,1180,221,1181,878,879,880,223,224,226,227,228,229,230,231,232,233,234,235,1182,241,242,243,244,245,250,251,252,253,258,259,268,269,270,271,272,273,274,275,277,284,287,289,290,292,293,294,295,297,298,300,301,302,303,304,305,306,307,313,1183,320,323,326,327,328,329,330,334,337,338,340,341,342,343,347,348,349,350,351,352,353,354,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,1184,392,394,397,400,401,402,405,406,1165,1166,1167,407,408,412,413,414,415,429,430,431,432,433,434,435,881,882,436,437,438,439,440,441,1168,442,443,444,1169,883,884,885,886,445,446,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,547,548,549,550,551,552,553,554,555,556,557,1185,560,561,562,563,564,565,566,567,568,569,570,571,1186,572,1187,1188,1189,1190,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,1191,594,595,596,597,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,628,629,630,631,640,641,642,643,644,645,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,670,671,672,673,674,675,676,677,678,679,680,681,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,704,705,716,717,722,724,725,726,727,732,733,734,735,736,737,740,741,742,743,744,745,746,747,748,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,771,772,773,774,776,777,778,779,780,781,782,896,897,898,899,900,901,783,784,785,786,787,788,789,790,794,795,796,797,798,799,800,801,802,803,805,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,806,1195,1196,1197,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,1198,944,945,946,947,948,1199,949,1200,950,951,952,953,1201,954,1202,1203,955,956,957,958,959,1204,960,961,962,963,964,965,966,967,968,969,970,971,1205,972,973,974,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"organization":[0,1,2,1209,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261,262,263,264,265,266,267,268,269,270,271,272,273,274,275,276,277,278,279,280,281,282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419,420,421,422,423,424,425,426,427,428,429,430,431,432,433,434,435,436,437,438,439,440,441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,462,463,464,465,466,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509,510,511,512,513,514,515,516,517,518,519,520,521,522,523,524,525,526,527,528,529,530,531,532,533,534,535,536,537,538,539,540,541,545,546,547,548,549,550,551,552,553,554,555,556,557,558,559,560,561,562,563,564,565,566,567,568,569,570,571,572,573,574,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605,606,607,608,609,610,611,612,613,614,615,616,617,618,620,621,622,623,624,626,627,628,629,630,631,632,633,634,635,636,637,638,639,640,641,642,643,644,645,646,647,648,649,650,651,652,653,654,655,656,657,658,659,660,661,662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,700,701,702,703,704,705,706,707,708,716,717,718,719,720,721,722,723,724,725,726,727,728,729,730,731,732,733,734,735,736,737,738,739,740,741,742,743,744,745,746,747,748,749,750,751,752,753,754,755,756,757,758,759,760,761,762,763,764,765,766,767,768,769,770,771,772,773,774,775,776,777,778,779,780,781,782,783,784,785,786,787,788,789,790,791,792,793,794,795,796,797,798,799,800,801,802,803,804,805,806,807,808,809,810,811,812,813,815,816,817,818,819,820,823,824,825,826,827,828,829,830],"user":[0,1,831,832,833,2,1209,7,10,11,12,13,14,20,21,22,23,24,834,835,836,838,839,840,841,842,843,844,845,846,847,848,849,850,851,852,853,854,25,26,27,38,41,42,43,44,48,49,50,51,56,57,58,59,60,61,62,65,72,74,75,76,77,78,79,86,87,88,89,90,91,92,93,95,96,97,98,99,100,101,102,103,112,113,114,115,116,117,118,119,120,121,122,855,856,857,858,859,126,127,128,860,861,129,130,131,132,133,134,135,136,137,138,139,140,143,144,145,146,147,148,149,150,151,152,153,166,167,168,169,180,181,182,183,184,862,863,864,865,185,186,866,187,867,868,188,869,870,871,872,201,202,203,204,205,206,207,208,873,874,875,876,877,214,215,216,217,218,219,220,221,878,879,880,226,227,229,230,231,232,326,372,373,374,375,379,380,381,382,383,385,386,387,400,401,402,433,434,435,881,882,436,437,438,439,442,883,884,885,886,447,448,449,887,454,455,456,460,461,462,463,464,465,467,468,469,470,471,472,473,474,475,476,477,478,479,480,481,482,483,484,485,501,510,511,512,513,514,515,516,534,535,536,537,538,539,540,541,547,552,560,561,562,563,564,565,566,567,568,569,570,571,575,576,577,578,579,580,581,582,583,584,585,586,587,588,589,590,591,592,594,598,599,600,601,602,603,604,605,606,888,607,608,609,610,611,612,613,614,615,616,617,640,641,642,643,644,645,653,654,655,889,890,891,892,893,749,750,751,753,754,755,756,757,758,759,760,761,762,763,764,765,894,766,767,768,769,895,770,779,780,781,782,896,897,898,899,900,901,902,903,904,905,906,907,908,909,910,911,912,913,914,915,916,917,918,919,920,921,922,923,924,925,926,927,928,929,930,931,932,933,934,935,936,937,938,939,940,941,942,943,944,945,946,947,948,949,950,951,952,953,954,955,956,957,958,959,960,961,962,963,964,965,966,967,968,969,970,971,972,973,974,815,816,818,823,824,825,826,828,830]}} \ No newline at end of file diff --git a/src/audit-logs/lib/config.json b/src/audit-logs/lib/config.json index fb0b59f76ac6..be51467822cd 100644 --- a/src/audit-logs/lib/config.json +++ b/src/audit-logs/lib/config.json @@ -9,5 +9,5 @@ "git": "Note: Git events have special access requirements and retention policies that differ from other audit log events. For GitHub Enterprise Cloud, access Git events via the REST API only with 7-day retention. For GitHub Enterprise Server, Git events must be enabled in audit log configuration and are not included in search results.", "sso_redirect": "Note: Automatically redirecting users to sign in is currently in beta for Enterprise Managed Users and subject to change." }, - "sha": "6908656e5a680467a6f235d8b17d8997f1f689ff" + "sha": "c4319c8d16922e13c5d09181a79f260f10475188" } \ No newline at end of file diff --git a/src/cli-docs-auto-maintenance/state/copilot-cli/automation-and-ci.json b/src/cli-docs-auto-maintenance/state/copilot-cli/automation-and-ci.json deleted file mode 100644 index 06b3c4850c81..000000000000 --- a/src/cli-docs-auto-maintenance/state/copilot-cli/automation-and-ci.json +++ /dev/null @@ -1,13 +0,0 @@ -{ - "name": "Automation and CI", - "sha": "7b8276b2bcaafc444a3dcf482a033352ebb3faa1", - "articles": [ - "content/copilot/concepts/agents/copilot-cli/copilot-cli-in-github-actions.md", - "content/copilot/how-tos/copilot-cli/automate-copilot-cli/automate-with-actions.md", - "content/copilot/how-tos/copilot-cli/automate-copilot-cli/index.md", - "content/copilot/how-tos/copilot-cli/automate-copilot-cli/quickstart.md", - "content/copilot/how-tos/copilot-cli/automate-copilot-cli/run-cli-programmatically.md", - "content/copilot/how-tos/copilot-cli/automate-copilot-cli/schedule-prompts.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli-in-actions.md" - ] -} diff --git a/src/cli-docs-auto-maintenance/state/copilot-cli/integrations-and-remote-control.json b/src/cli-docs-auto-maintenance/state/copilot-cli/integrations-and-remote-control.json deleted file mode 100644 index 4eceb5f493f7..000000000000 --- a/src/cli-docs-auto-maintenance/state/copilot-cli/integrations-and-remote-control.json +++ /dev/null @@ -1,88 +0,0 @@ -{ - "name": "Integrations and remote control", - "sha": "7b8276b2bcaafc444a3dcf482a033352ebb3faa1", - "articles": [ - "content/copilot/concepts/agents/copilot-cli/about-remote-control.md", - "content/copilot/concepts/agents/copilot-cli/chronicle.md", - "content/copilot/concepts/agents/copilot-cli/lsp-servers.md", - "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/add-lsp-servers.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/chronicle.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/connecting-vs-code.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/delegate-tasks-to-cca.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/manage-pull-requests.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/steer-remotely.md", - "content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md" - ], - "proposed": [ - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md", - "text": "* Press / (on the **Issues** and **Pull requests** tabs) to filter the list with your own search terms. Type your terms, press Enter to run the search, and Esc to cancel or clear it." - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md", - "text": "To run your own search, press /. An inline search box opens where you can type your search terms, then press Enter to run the search." - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/browse-issues-prs-gists.md", - "text": "Your search terms are added to the qualifiers the tab already applies, so results are always limited to open items in the current repository—and, unless you have pressed a, to items that involve you. Enter plain search terms rath" - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/manage-pull-requests.md", - "text": " /pr automerge Do the same as /pr auto, then merge the pull request once it is green. Find out more No Enter with \"Download default model\" selected to download the default multilingual speech-to-text model." - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md", - "text": "Alternatively, if you want to use the dedicated English or Spanish model:" - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md", - "text": "1. In the voice models picker, use the arrow keys to select the model you want, then press Enter to download it." - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md", - "text": "The default multilingual model handles more than one language, but you can switch to the dedicated English or Spanish model if you prefer. The model you want must be downloaded and activated before you can use it." - }, - { - "article": "content/copilot/how-tos/copilot-cli/use-copilot-cli/voice-input.md", - "text": "1. In the voice models picker, use the arrow keys on your keyboard to select the model you want to use, then press Enter." - } - ], - "rejected": [] -} diff --git a/src/cli-docs-auto-maintenance/state/copilot-cli/setup-and-installation.json b/src/cli-docs-auto-maintenance/state/copilot-cli/setup-and-installation.json deleted file mode 100644 index 1301d70d57bd..000000000000 --- a/src/cli-docs-auto-maintenance/state/copilot-cli/setup-and-installation.json +++ /dev/null @@ -1,106 +0,0 @@ -{ - "name": "Setup and installation", - "sha": "8f269b4e7f4cd58744a6edf8093e55820f6d765c", - "articles": [ - "content/copilot/concepts/agents/copilot-cli/about-copilot-cli.md", - "content/copilot/concepts/agents/copilot-cli/index.md", - "content/copilot/how-tos/copilot-cli/cli-getting-started.md", - "content/copilot/how-tos/copilot-cli/index.md", - "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/configure-copilot-cli.md", - "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/index.md", - "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/install-copilot-cli.md", - "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/troubleshoot-copilot-cli-auth.md" - ], - "proposed": [ - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "When authentication is required, {% data variables.copilot.copilot_cli_short %} supports several methods. The method you use depends on whether you are working interactively or in an automated environment." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "* **OAuth**: The default and recommended method for interactive use. There are two OAuth flows. The browser (web) flow opens your browser to authorize the sign-in and completes it on a local loopback callback. The device code flow displays " - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "| OAuth token (browser or device flow) | `gho_` | Yes | Default method via `copilot login` |" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "> * An environment variable silently overrides a stored OAuth token. If you set `GH_TOKEN` for another tool, the CLI uses that token instead of the OAuth token from `copilot login`. To avoid unexpected behavior, unset environment variables " - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "OAuth is the default authentication method for interactive use. You can authenticate by running `/login` from {% data variables.copilot.copilot_cli_short %} or `copilot login` from your terminal. Both offer a browser (web) flow and a device" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "1. Choose how you want to sign in. The recommended option is listed first, and depends on your environment: the browser flow on a local terminal, or the device code flow in a known remote or headless environment." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "How do you want to sign in? 1. Sign in with your browser (recommended) 2. Sign in with a device code" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "* **Browser**: {% data variables.copilot.copilot_cli_short %} opens your browser so that you can authorize the sign-in. If your browser does not open automatically, the terminal displays a URL that you can visit instead." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "* **Device code**: The CLI displays a one-time user code, and can copy it to your clipboard and open your browser for you." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "```text Waiting for authorization... Enter one-time code: 1234-5678 at https://github.com/login/device Press any key to copy to clipboard and open browser... ```" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "Navigate to the verification URL at `https://github.com/login/device` if your browser did not open automatically, then paste the one-time code in the field on the page." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "On a local desktop, `copilot login` uses the browser flow by default. It opens your browser to authorize the sign-in and captures the result on a local loopback callback." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "```text Opening your browser to authenticate... If it doesn't open automatically, visit: URL Waiting for authorization... ```" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "Known remote or headless environments (including SSH, {% data variables.product.prodname_github_codespaces %}, dev containers, and CI) use the device code flow instead. The CLI displays a one-time code, and copies it to your clipboard and o" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "To authenticate, visit https://github.com/login/device and enter code 1234-5678 Waiting for authorization..." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "To force a particular flow, add the `--web-flow` or `--device-code` option." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/authenticate-copilot-cli.md", - "text": "1. Navigate to the URL displayed in your terminal if your browser did not open automatically. For the device code flow, paste the one-time code in the field on the page." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/troubleshoot-copilot-cli-auth.md", - "text": "export COPILOT_GITHUB_TOKEN=PERSONAL_ACCESS_TOKEN" - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/troubleshoot-copilot-cli-auth.md", - "text": "A token starting with `ghp_` is rejected. If it is the only credential available, {% data variables.copilot.copilot_cli_short %} refuses to start and displays the following error, naming the environment variable that holds the token." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/troubleshoot-copilot-cli-auth.md", - "text": " ```text Error: Classic Personal Access Tokens (ghp_) are not supported by Copilot." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/troubleshoot-copilot-cli-auth.md", - "text": "The GITHUB_TOKEN environment variable contains a classic PAT. Please use a Fine-Grained Personal Access Token or another authentication method." - }, - { - "article": "content/copilot/how-tos/copilot-cli/set-up-copilot-cli/troubleshoot-copilot-cli-auth.md", - "text": "To fix this, you can: • Replace the token in GITHUB_TOKEN with a fine-grained PAT • Unset GITHUB_TOKEN and run 'gh auth login' to authenticate • Unset GITHUB_TOKEN and start 'copilot', then use the '/login' command ```