Business Secret Scanning Push Protection Custom Message

action	Description	Sample	Rule
business_secret_scanning_push_protection_custom_message.disable	The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.	N	Y
business_secret_scanning_push_protection_custom_message.enable	The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.	N	N
business_secret_scanning_push_protection_custom_message.update	The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.	N	N

business_secret_scanning_push_protection_custom_message.disable

The custom message triggered by an attempted push to a push-protected repository was disabled for your enterprise.

Documented only in GitHub's enterprise audit log reference, not the organization or user audit log pages.

GitHub Secret Scanning Disabled Or Bypassed source high: Detects when components of GitHub secret scanning is disabled for an enterprise or organization.T1562

GitHub Security Change, includes GitHub Advanced Security source low: The rule alerts when GitHub Security tools (Dependabot, Secret Scanner, etc) are disabled.T1562

The custom message triggered by an attempted push to a push-protected repository was enabled for your enterprise.

Documented only in GitHub's enterprise audit log reference, not the organization or user audit log pages.

The custom message triggered by an attempted push to a push-protected repository was updated for your enterprise.

Documented only in GitHub's enterprise audit log reference, not the organization or user audit log pages.