Pull Request Review Comment

actionDescriptionSampleRule
pull_request_review_comment.createA review comment was added to a pull request.YN
pull_request_review_comment.deleteA review comment on a pull request was deleted.YN
pull_request_review_comment.updateA review comment on a pull request was changed.YN

pull_request_review_comment.create

#
Category
pull-request-review-comment

Description

A review comment was added to a pull request.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "org_id": 9000002,
  "actor_id": 9000263,
  "comment_id": 9000267,
  "created_at": 1785219900386.0,
  "business_id": 9000005,
  "actor_is_bot": false,
  "org": "example-org",
  "repo": "user/example-repo",
  "actor": "user",
  "action": "pull_request_review_comment.create",
  "business": "example-business",
  "request_id": 9000266,
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
  "operation_type": "create",
  "external_identity_nameid": "user",
  "external_identity_username": "user"
}

pull_request_review_comment.delete

#
Category
pull-request-review-comment

Description

A review comment on a pull request was deleted.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "org_id": 9000002,
  "repo_id": 9000268,
  "actor_id": 9000202,
  "comment_id": 9000269,
  "created_at": 1785251771778.0,
  "business_id": 9000005,
  "public_repo": false,
  "actor_is_bot": false,
  "org": "example-org",
  "repo": "user/example-repo",
  "actor": "user",
  "action": "pull_request_review_comment.delete",
  "actor_ip": "ip-redacted",
  "business": "example-business",
  "request_id": 9000270,
  "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
  "actor_location": {
    "country_code": "XX"
  },
  "operation_type": "remove",
  "external_identity_nameid": "user",
  "external_identity_username": "user"
}

pull_request_review_comment.update

#
Category
pull-request-review-comment

Description

A review comment on a pull request was changed.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "org_id": 9000008,
  "actor_id": 9000271,
  "comment_id": 9000272,
  "created_at": 1785243312065.0,
  "business_id": 9000005,
  "actor_is_bot": false,
  "org": "example-org",
  "repo": "user/example-repo",
  "actor": "user",
  "action": "pull_request_review_comment.update",
  "business": "example-business",
  "request_id": 9000273,
  "user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
  "operation_type": "modify",
  "external_identity_nameid": "user",
  "external_identity_username": "user"
}

References #