Github Hosted Runner
| action | Description | Sample | Rule |
|---|---|---|---|
| github_ | Y | N | |
| github_ | Y | N | |
| github_ | N | N |
github_hosted_runner.create
#Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000008,
"user_id": 9000047,
"actor_id": 9000047,
"created_at": 1783966593442.0,
"business_id": 9000005,
"actor_is_bot": false,
"runner_group_id": 9000080,
"org": "example-org",
"name": "example-label-99",
"user": "user",
"actor": "user",
"action": "github_hosted_runner.create",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000081,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "create",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
github_hosted_runner.destroy
#Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000008,
"user_id": 9000047,
"actor_id": 9000047,
"created_at": 1783967511996.0,
"business_id": 9000005,
"actor_is_bot": false,
"org": "example-org",
"user": "user",
"actor": "user",
"action": "github_hosted_runner.destroy",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000082,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "remove",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
github_hosted_runner.update
#Documented on GitHub's enterprise audit log reference.