Members Can Delete Repos
| action | Description | Sample | Rule |
|---|---|---|---|
| members_ | An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise. | Y | N |
| members_ | The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise. | Y | N |
| members_ | The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise. | Y | N |
members_can_delete_repos.clear
#Description
An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783955165300,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxMzc=",
"action": "members_can_delete_repos.clear",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783955165300,
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "modify",
"programmatic_access_type": "Personal access token (classic)",
"request_access_security_header": null,
"request_id": "94CE:3FE560:EE08415:F2C573F:6A54FEDD",
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user": "user",
"user_agent": "python-requests/2.34.2",
"user_id": 9000002
}
References #
members_can_delete_repos.disable
#Description
The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"user_id": 9000047,
"actor_id": 9000047,
"created_at": 1781712739740.0,
"business_id": 9000005,
"actor_is_bot": false,
"org": "example-org",
"user": "user",
"actor": "user",
"action": "members_can_delete_repos.disable",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000108,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "modify",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
members_can_delete_repos.enable
#Description
The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783955165027,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxMzg=",
"action": "members_can_delete_repos.enable",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783955165027,
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "modify",
"programmatic_access_type": "Personal access token (classic)",
"request_access_security_header": null,
"request_id": "94CE:3FE560:EE082C9:F2C55DA:6A54FEDC",
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user": "user",
"user_agent": "python-requests/2.34.2",
"user_id": 9000002
}
References #