Custom Property Definition
| action | Description | Sample | Rule |
|---|---|---|---|
| custom_ | A new custom property definition was created. | Y | N |
| custom_ | A custom property definition was deleted. | Y | N |
| custom_ | A custom property definition was updated. | N | N |
custom_property_definition.create
#Description
A new custom property definition was created.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000040,
"actor_id": 9000041,
"required": false,
"token_id": 9000042,
"created_at": 1781094482768.0,
"business_id": 9000005,
"actor_is_bot": false,
"definition_id": 9000043,
"oauth_application_id": 9000044,
"org": "example-org",
"actor": "user",
"action": "custom_property_definition.create",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000045,
"user_agent": "GitHub CLI 2.93.0",
"value_type": "true_false",
"description": "When true, the CODEOWNERS review ruleset is enforced on this repo.",
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwNg==",
"token_scopes": "admin:org,gist,repo",
"property_name": "example-label-91",
"actor_location": {
"country_code": "XX"
},
"operation_type": "create",
"external_identity_nameid": "user",
"programmatic_access_type": "OAuth access token",
"external_identity_username": "user"
}
References #
custom_property_definition.destroy
#Description
A custom property definition was deleted.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783909297798,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAwODU=",
"action": "custom_property_definition.destroy",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"allowed_values": null,
"business": "example-business",
"business_id": 9000003,
"created_at": 1783909297798,
"default_value": null,
"definition_id": 9000012,
"description": "harness throwaway property",
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "remove",
"org": "example-org",
"org_id": 9000004,
"programmatic_access_type": "Personal access token (classic)",
"property_name": "dw_harn_37cc4485",
"request_access_security_header": null,
"request_id": "D922:2466AB:B206C42:B5CCF57:6A544BB1",
"required": false,
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user_agent": "python-requests/2.34.2",
"value_type": "string"
}
References #
custom_property_definition.update
#Description
A custom property definition was updated.
Documented on GitHub's enterprise audit log reference.