Skip to content

Commit cfc3780

Browse files
docs-botjules-p
andauthored
Update audit log event data (#54768)
Co-authored-by: Jules <19994093+jules-p@users.noreply.github.com>
1 parent cd8b674 commit cfc3780

4 files changed

Lines changed: 1 addition & 236 deletions

File tree

src/audit-logs/data/ghes-3.16/enterprise.json

Lines changed: 0 additions & 130 deletions
Original file line numberDiff line numberDiff line change
@@ -164,11 +164,6 @@
164164
"description": "The policy for Code scanning autofix was updated for an enterprise.",
165165
"docs_reference_links": "N/A"
166166
},
167-
{
168-
"action": "business.code_scanning_autofix_third_party_tools_policy_update",
169-
"description": "The policy for Code scanning autofix third party tools was updated for an enterprise.",
170-
"docs_reference_links": "N/A"
171-
},
172167
{
173168
"action": "business.create",
174169
"description": "An enterprise was created.",
@@ -364,26 +359,6 @@
364359
"description": "N/A",
365360
"docs_reference_links": "N/A"
366361
},
367-
{
368-
"action": "business.security_center_export_code_scanning_metrics",
369-
"description": "A CSV export was requested on the \"CodeQL pull request alerts\" page.",
370-
"docs_reference_links": "N/A"
371-
},
372-
{
373-
"action": "business.security_center_export_coverage",
374-
"description": "A CSV export was requested on the \"Coverage\" page.",
375-
"docs_reference_links": "N/A"
376-
},
377-
{
378-
"action": "business.security_center_export_overview_dashboard",
379-
"description": "A CSV export was requested on the \"Overview Dashboard\" page.",
380-
"docs_reference_links": "N/A"
381-
},
382-
{
383-
"action": "business.security_center_export_risk",
384-
"description": "A CSV export was requested on the \"Risk\" page.",
385-
"docs_reference_links": "N/A"
386-
},
387362
{
388363
"action": "business.set_actions_fork_pr_approvals_policy",
389364
"description": "The policy for requiring approvals for workflows from public forks was changed for an enterprise.",
@@ -454,36 +429,6 @@
454429
"description": "Logs in a check suite were deleted.",
455430
"docs_reference_links": "N/A"
456431
},
457-
{
458-
"action": "code_scanning.alert_appeared_in_branch",
459-
"description": "Existing code scanning alerts appeared in a branch.",
460-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
461-
},
462-
{
463-
"action": "code_scanning.alert_closed_became_fixed",
464-
"description": "Code scanning alerts were fixed.",
465-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
466-
},
467-
{
468-
"action": "code_scanning.alert_closed_by_user",
469-
"description": "Code scanning alerts were manually dismissed.",
470-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
471-
},
472-
{
473-
"action": "code_scanning.alert_created",
474-
"description": "Code scanning alerts were seen for the first time.",
475-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
476-
},
477-
{
478-
"action": "code_scanning.alert_reappeared",
479-
"description": "Code scanning alerts that were previously fixed reappeared.",
480-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
481-
},
482-
{
483-
"action": "code_scanning.alert_reopened_by_user",
484-
"description": "Code scanning alerts that were previously dismissed were reopened.",
485-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
486-
},
487432
{
488433
"action": "code.search",
489434
"description": "A code search was run targeting an organization. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
@@ -1459,16 +1404,6 @@
14591404
"description": "Autofix for code scanning alerts was enabled for an organization.",
14601405
"docs_reference_links": "N/A"
14611406
},
1462-
{
1463-
"action": "org.code_scanning_autofix_third_party_tools_disabled",
1464-
"description": "Autofix for third party tools for code scanning alerts was disabled for an organization.",
1465-
"docs_reference_links": "N/A"
1466-
},
1467-
{
1468-
"action": "org.code_scanning_autofix_third_party_tools_enabled",
1469-
"description": "Autofix for third party tools for code scanning alerts was enabled for an organization.",
1470-
"docs_reference_links": "N/A"
1471-
},
14721407
{
14731408
"action": "org.codeql_disabled",
14741409
"description": "Code scanning using the default setup was disabled for an organization.",
@@ -1794,11 +1729,6 @@
17941729
"description": "Push protection for secret scanning was enabled for all new repositories in the organization.",
17951730
"docs_reference_links": "/code-security/secret-scanning/push-protection-for-repositories-and-organizations"
17961731
},
1797-
{
1798-
"action": "org.security_center_export_code_scanning_metrics",
1799-
"description": "A CSV export was requested on the CodeQL pull request alerts page.",
1800-
"docs_reference_links": "N/A"
1801-
},
18021732
{
18031733
"action": "org.security_center_export_coverage",
18041734
"description": "A CSV export was requested on the Coverage page.",
@@ -2479,16 +2409,6 @@
24792409
"description": "Autofix for code scanning alerts was enabled for a repository.",
24802410
"docs_reference_links": "N/A"
24812411
},
2482-
{
2483-
"action": "repo.code_scanning_autofix_third_party_tools_disabled",
2484-
"description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
2485-
"docs_reference_links": "N/A"
2486-
},
2487-
{
2488-
"action": "repo.code_scanning_autofix_third_party_tools_enabled",
2489-
"description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
2490-
"docs_reference_links": "N/A"
2491-
},
24922412
{
24932413
"action": "repo.code_scanning_configuration_for_branch_deleted",
24942414
"description": "A code scanning configuration for a branch of a repository was deleted.",
@@ -2959,26 +2879,6 @@
29592879
"description": "Secret scanning push protection was enabled for a repository.",
29602880
"docs_reference_links": "/code-security/secret-scanning/protecting-pushes-with-secret-scanning"
29612881
},
2962-
{
2963-
"action": "repository_security_configuration.applied",
2964-
"description": "A code security configuration was applied to a repository.",
2965-
"docs_reference_links": "N/A"
2966-
},
2967-
{
2968-
"action": "repository_security_configuration.failed",
2969-
"description": "A code security configuration failed to attach to the repository.",
2970-
"docs_reference_links": "N/A"
2971-
},
2972-
{
2973-
"action": "repository_security_configuration.removed",
2974-
"description": "A code security configuration was removed from a repository.",
2975-
"docs_reference_links": "N/A"
2976-
},
2977-
{
2978-
"action": "repository_security_configuration.removed_by_settings_change",
2979-
"description": "A code security configuration was removed due to a change in repository or enterprise settings.",
2980-
"docs_reference_links": "N/A"
2981-
},
29822882
{
29832883
"action": "restrict_notification_delivery.disable",
29842884
"description": "Email notification restrictions for an organization or enterprise were disabled.",
@@ -3054,36 +2954,6 @@
30542954
"description": "A user requested to bypass secret scanning push protection.",
30552955
"docs_reference_links": "/code-security/secret-scanning/working-with-push-protection#requesting-bypass-privileges-when-working-with-the-command-line"
30562956
},
3057-
{
3058-
"action": "security_configuration.create",
3059-
"description": "A security configuration was created",
3060-
"docs_reference_links": "N/A"
3061-
},
3062-
{
3063-
"action": "security_configuration_default.delete",
3064-
"description": "A default security configuration setting for new repositories was removed.",
3065-
"docs_reference_links": "N/A"
3066-
},
3067-
{
3068-
"action": "security_configuration_default.update",
3069-
"description": "A default security configuration setting for new repositories was updated.",
3070-
"docs_reference_links": "N/A"
3071-
},
3072-
{
3073-
"action": "security_configuration.delete",
3074-
"description": "A security configuration was deleted",
3075-
"docs_reference_links": "N/A"
3076-
},
3077-
{
3078-
"action": "security_configuration_policy.update",
3079-
"description": "A security configuration policy was updated",
3080-
"docs_reference_links": "N/A"
3081-
},
3082-
{
3083-
"action": "security_configuration.update",
3084-
"description": "A security configuration was updated",
3085-
"docs_reference_links": "N/A"
3086-
},
30872957
{
30882958
"action": "security_key.register",
30892959
"description": "A security key was registered for an account.",

src/audit-logs/data/ghes-3.16/organization.json

Lines changed: 0 additions & 75 deletions
Original file line numberDiff line numberDiff line change
@@ -84,36 +84,6 @@
8484
"description": "Logs in a check suite were deleted.",
8585
"docs_reference_links": "N/A"
8686
},
87-
{
88-
"action": "code_scanning.alert_appeared_in_branch",
89-
"description": "Existing code scanning alerts appeared in a branch.",
90-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
91-
},
92-
{
93-
"action": "code_scanning.alert_closed_became_fixed",
94-
"description": "Code scanning alerts were fixed.",
95-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
96-
},
97-
{
98-
"action": "code_scanning.alert_closed_by_user",
99-
"description": "Code scanning alerts were manually dismissed.",
100-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
101-
},
102-
{
103-
"action": "code_scanning.alert_created",
104-
"description": "Code scanning alerts were seen for the first time.",
105-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
106-
},
107-
{
108-
"action": "code_scanning.alert_reappeared",
109-
"description": "Code scanning alerts that were previously fixed reappeared.",
110-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
111-
},
112-
{
113-
"action": "code_scanning.alert_reopened_by_user",
114-
"description": "Code scanning alerts that were previously dismissed were reopened.",
115-
"docs_reference_links": "/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning"
116-
},
11787
{
11888
"action": "codespaces.allow_permissions",
11989
"description": "A codespace using custom permissions from its devcontainer.json file was launched.",
@@ -1034,16 +1004,6 @@
10341004
"description": "Autofix for code scanning alerts was enabled for an organization.",
10351005
"docs_reference_links": "N/A"
10361006
},
1037-
{
1038-
"action": "org.code_scanning_autofix_third_party_tools_disabled",
1039-
"description": "Autofix for third party tools for code scanning alerts was disabled for an organization.",
1040-
"docs_reference_links": "N/A"
1041-
},
1042-
{
1043-
"action": "org.code_scanning_autofix_third_party_tools_enabled",
1044-
"description": "Autofix for third party tools for code scanning alerts was enabled for an organization.",
1045-
"docs_reference_links": "N/A"
1046-
},
10471007
{
10481008
"action": "org.codeql_disabled",
10491009
"description": "Code scanning using the default setup was disabled for an organization.",
@@ -1574,11 +1534,6 @@
15741534
"description": "Push protection for secret scanning was enabled for all new repositories in the organization.",
15751535
"docs_reference_links": "/code-security/secret-scanning/push-protection-for-repositories-and-organizations"
15761536
},
1577-
{
1578-
"action": "org.security_center_export_code_scanning_metrics",
1579-
"description": "A CSV export was requested on the CodeQL pull request alerts page.",
1580-
"docs_reference_links": "N/A"
1581-
},
15821537
{
15831538
"action": "org.security_center_export_coverage",
15841539
"description": "A CSV export was requested on the Coverage page.",
@@ -1824,11 +1779,6 @@
18241779
"description": "A custom organization role was edited in an organization.",
18251780
"docs_reference_links": "/organizations/managing-peoples-access-to-your-organization-with-roles/about-custom-organization-roles"
18261781
},
1827-
{
1828-
"action": "organization_wide_project_base_role.update",
1829-
"description": "An organization's default project base role was updated.",
1830-
"docs_reference_links": "N/A"
1831-
},
18321782
{
18331783
"action": "packages.package_deleted",
18341784
"description": "An entire package was deleted.",
@@ -1984,11 +1934,6 @@
19841934
"description": "A project board visibility was changed.",
19851935
"docs_reference_links": "N/A"
19861936
},
1987-
{
1988-
"action": "project_base_role.update",
1989-
"description": "A project's base role was updated.",
1990-
"docs_reference_links": "N/A"
1991-
},
19921937
{
19931938
"action": "project.close",
19941939
"description": "A project board was closed.",
@@ -2379,16 +2324,6 @@
23792324
"description": "Autofix for code scanning alerts was enabled for a repository.",
23802325
"docs_reference_links": "N/A"
23812326
},
2382-
{
2383-
"action": "repo.code_scanning_autofix_third_party_tools_disabled",
2384-
"description": "Autofix for third party tools for code scanning alerts was disabled for a repository.",
2385-
"docs_reference_links": "N/A"
2386-
},
2387-
{
2388-
"action": "repo.code_scanning_autofix_third_party_tools_enabled",
2389-
"description": "Autofix for third party tools for code scanning alerts was enabled for a repository.",
2390-
"docs_reference_links": "N/A"
2391-
},
23922327
{
23932328
"action": "repo.code_scanning_configuration_for_branch_deleted",
23942329
"description": "A code scanning configuration for a branch of a repository was deleted.",
@@ -2989,11 +2924,6 @@
29892924
"description": "Changes were pushed to update and resolve a Dependabot alert in a project dependency.",
29902925
"docs_reference_links": "N/A"
29912926
},
2992-
{
2993-
"action": "repository_vulnerability_alert.withdraw",
2994-
"description": "A Dependabot alert was withdrawn.",
2995-
"docs_reference_links": "N/A"
2996-
},
29972927
{
29982928
"action": "repository_vulnerability_alerts.authorized_users_teams",
29992929
"description": "The list of people or teams authorized to receive Dependabot alerts for the repository was updated.",
@@ -3059,11 +2989,6 @@
30592989
"description": "GitHub detected a secret and created a secret scanning alert.",
30602990
"docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning"
30612991
},
3062-
{
3063-
"action": "secret_scanning_alert.public_leak",
3064-
"description": "A secret scanning alert was leaked in a public repo.",
3065-
"docs_reference_links": "/code-security/secret-scanning/managing-alerts-from-secret-scanning"
3066-
},
30672992
{
30682993
"action": "secret_scanning_alert.reopen",
30692994
"description": "A secret scanning alert was reopened.",

src/audit-logs/data/ghes-3.16/user.json

Lines changed: 0 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -59,26 +59,6 @@
5959
"description": "N/A",
6060
"docs_reference_links": "N/A"
6161
},
62-
{
63-
"action": "business.security_center_export_code_scanning_metrics",
64-
"description": "A CSV export was requested on the \"CodeQL pull request alerts\" page.",
65-
"docs_reference_links": "N/A"
66-
},
67-
{
68-
"action": "business.security_center_export_coverage",
69-
"description": "A CSV export was requested on the \"Coverage\" page.",
70-
"docs_reference_links": "N/A"
71-
},
72-
{
73-
"action": "business.security_center_export_overview_dashboard",
74-
"description": "A CSV export was requested on the \"Overview Dashboard\" page.",
75-
"docs_reference_links": "N/A"
76-
},
77-
{
78-
"action": "business.security_center_export_risk",
79-
"description": "A CSV export was requested on the \"Risk\" page.",
80-
"docs_reference_links": "N/A"
81-
},
8262
{
8363
"action": "business.set_actions_fork_pr_approvals_policy",
8464
"description": "The policy for requiring approvals for workflows from public forks was changed for an enterprise.",
@@ -669,11 +649,6 @@
669649
"description": "An authorization for an OAuth application was deleted.",
670650
"docs_reference_links": "/apps/using-github-apps/reviewing-your-authorized-integrations"
671651
},
672-
{
673-
"action": "oauth_authorization.update",
674-
"description": "An authorization for an OAuth application was updated.",
675-
"docs_reference_links": "/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps"
676-
},
677652
{
678653
"action": "org.add_member",
679654
"description": "A user joined an organization.",
@@ -709,11 +684,6 @@
709684
"description": "A member was removed from an organization, either manually or due to a two-factor authentication requirement.",
710685
"docs_reference_links": "N/A"
711686
},
712-
{
713-
"action": "org.security_center_export_code_scanning_metrics",
714-
"description": "A CSV export was requested on the CodeQL pull request alerts page.",
715-
"docs_reference_links": "N/A"
716-
},
717687
{
718688
"action": "org.security_center_export_coverage",
719689
"description": "A CSV export was requested on the Coverage page.",

src/audit-logs/lib/config.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,5 +3,5 @@
33
"apiOnlyEvents": "This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
44
"apiRequestEvent": "This event is only available via audit log streaming."
55
},
6-
"sha": "e49cd93fda003f6fa50b7e3611dc97dfb5444391"
6+
"sha": "0353ab99ac75a5095a1af7e76cdc0917d7e434e4"
77
}

0 commit comments

Comments
 (0)