Issues
| action | Description | Sample | Rule |
|---|---|---|---|
| issues. | The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise. | Y | N |
| issues. | The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise. | Y | N |
| issues. | An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise. | Y | N |
issues.deletes_disabled
#Description
The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783913189671,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAwNTI=",
"action": "issues.deletes_disabled",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783913189671,
"operation_type": "modify",
"org": "example-org",
"org_id": 9000004,
"request_access_security_header": null,
"request_id": "C4B6:1E91F2:8423201:88A067B:6A545AE3",
"user": "user",
"user_agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/145.0.7632.6 Safari/537.36",
"user_id": 9000002
}
issues.deletes_enabled
#Description
The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783955165571,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxMzY=",
"action": "issues.deletes_enabled",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783955165571,
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "modify",
"programmatic_access_type": "Personal access token (classic)",
"request_access_security_header": null,
"request_id": "94CE:3FE560:EE08593:F2C58C8:6A54FEDD",
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user": "user",
"user_agent": "python-requests/2.34.2",
"user_id": 9000002
}
issues.deletes_policy_cleared
#Description
An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783955165867,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxMzU=",
"action": "issues.deletes_policy_cleared",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783955165867,
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "modify",
"programmatic_access_type": "Personal access token (classic)",
"request_access_security_header": null,
"request_id": "94CE:3FE560:EE08742:F2C5A63:6A54FEDD",
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user": "user",
"user_agent": "python-requests/2.34.2",
"user_id": 9000002
}