Integration
| action | Description | Sample | Rule |
|---|---|---|---|
| integration. | A GitHub App was created. | Y | N |
| integration. | A GitHub App was deleted. | Y | N |
| integration. | Y | N | |
| integration. | A member of an enterprise or organization was added as a GitHub App manager. | Y | N |
| integration. | A member of an enterprise or organization was removed from being a GitHub App manager. | N | N |
| integration. | A client secret for a GitHub App was removed. | Y | N |
| integration. | All user tokens for a GitHub App were requested to be revoked. | N | N |
| integration. | Token(s) for a GitHub App were revoked. | N | N |
| integration. | A GitHub App was suspended. | N | N |
| integration. | Ownership of a GitHub App was transferred to another user or organization. | N | N |
| integration. | A GitHub App was unsuspended. | N | N |
| integration. | Y | N |
integration.create
#Description
A GitHub App was created.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"created_at": 1781117893993.0,
"business_id": 9000005,
"org": "example-org",
"name": "example-label-135",
"action": "integration.create",
"business": "example-business",
"request_id": 9000083,
"user_agent": "runs-on-setup",
"integration": "example-label-135",
"operation_type": "create",
"application_client_id": "Iv23xZySlkAppId"
}
References #
integration.destroy
#Description
A GitHub App was deleted.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"actor_id": 9000084,
"created_at": 1781117882718.0,
"business_id": 9000005,
"actor_is_bot": false,
"org": "example-org",
"name": "example-label-135",
"actor": "user",
"action": "integration.destroy",
"business": "example-business",
"request_id": 9000085,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"integration": "example-label-135",
"operation_type": "remove",
"application_client_id": "Iv23xZySlkAppId",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
integration.generate_client_secret
#Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"created_at": 1781118053707.0,
"business_id": 9000005,
"org": "example-org",
"name": "example-label-136",
"action": "integration.generate_client_secret",
"business": "example-business",
"request_id": 9000086,
"user_agent": "runs-on-setup",
"integration": "example-label-136",
"operation_type": "create",
"application_client_id": "Iv23xZySlkAppId"
}
References #
integration.manager_added
#Description
A member of an enterprise or organization was added as a GitHub App manager.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"actor_id": 9000060,
"created_at": 1785181956088.0,
"business_id": 9000005,
"actor_is_bot": false,
"org": "example-org",
"name": "example-label-101",
"actor": "user",
"action": "integration.manager_added",
"manager": "user",
"business": "example-business",
"request_id": 9000087,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"integration": "example-label-101",
"operation_type": "create",
"application_client_id": "Iv23xZySlkAppId",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
integration.manager_removed
#Description
A member of an enterprise or organization was removed from being a GitHub App manager.
Documented on GitHub's enterprise audit log reference.
integration.remove_client_secret
#Description
A client secret for a GitHub App was removed.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"actor_id": 9000084,
"created_at": 1781117882859.0,
"business_id": 9000005,
"actor_is_bot": false,
"org": "example-org",
"name": "example-label-135",
"actor": "user",
"action": "integration.remove_client_secret",
"business": "example-business",
"request_id": 9000085,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"integration": "example-label-135",
"operation_type": "remove",
"application_client_id": "Iv23xZySlkAppId",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
integration.revoke_all_tokens
#Description
All user tokens for a GitHub App were requested to be revoked.
Documented on GitHub's enterprise audit log reference.
integration.revoke_tokens
#Description
Token(s) for a GitHub App were revoked.
Documented on GitHub's enterprise audit log reference.
integration.suspend
#Description
A GitHub App was suspended.
Documented on GitHub's enterprise audit log reference.
integration.transfer
#Description
Ownership of a GitHub App was transferred to another user or organization.
Documented on GitHub's enterprise audit log reference.
integration.unsuspend
#Description
A GitHub App was unsuspended.
Documented on GitHub's enterprise audit log reference.
integration.update
#Example Audit Log Entry #
{
"org_id": 9000040,
"actor_id": 9000084,
"created_at": 1783295134417.0,
"business_id": 9000005,
"actor_is_bot": false,
"org": "example-org",
"name": "example-label-137",
"actor": "user",
"action": "integration.update",
"business": "example-business",
"request_id": 9000088,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"integration": "example-label-137",
"operation_type": "modify",
"application_client_id": "Iv23xZySlkAppId",
"external_identity_nameid": "user",
"external_identity_username": "user"
}