Repository Invitation

actionDescriptionSampleRule
repository_invitation.acceptAn invitation to join a repository was accepted.YN
repository_invitation.cancelAn invitation to join a repository was canceled.YN
repository_invitation.createAn invitation to join a repository was sent.YN
repository_invitation.rejectAn invitation to join a repository was declined.YN

repository_invitation.accept

#
Category
repository-invitation

Description

An invitation to join a repository was accepted.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "org_id": 9000341,
  "repo_id": 9000342,
  "actor_id": 9000343,
  "created_at": 1781916075390.0,
  "business_id": 9000005,
  "public_repo": false,
  "actor_is_bot": false,
  "org": "example-org",
  "repo": "user/example-repo",
  "actor": "user",
  "action": "repository_invitation.accept",
  "invitee": "user",
  "inviter": "user",
  "actor_ip": "ip-redacted",
  "business": "example-business",
  "request_id": 9000344,
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
  "actor_location": {
    "country_code": "XX"
  },
  "operation_type": "modify"
}

References #

repository_invitation.cancel

#
Category
repository-invitation

Description

An invitation to join a repository was canceled.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "@timestamp": 1772850805177,
  "_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDA1MA==",
  "action": "repository_invitation.cancel",
  "actor": "user",
  "actor_id": 9000002,
  "business": null,
  "created_at": 1772850805177,
  "invitee": "collaborator01",
  "inviter": "user",
  "operation_type": "remove",
  "org": null,
  "public_repo": false,
  "repo": "user/example-repo-source",
  "repo_id": 9100000003,
  "request_access_security_header": null,
  "request_id": "EBFA:59482:1985CDE:19EF7D9:69AB8E72",
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:147.0) Gecko/20100101 Firefox/147.0"
}

References #

repository_invitation.create

#
Category
repository-invitation

Description

An invitation to join a repository was sent.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "org_id": 9000008,
  "repo_id": 9000112,
  "actor_id": 9000345,
  "created_at": 1783101512233.0,
  "business_id": 9000005,
  "public_repo": false,
  "actor_is_bot": false,
  "org": "example-org",
  "repo": "user/example-repo",
  "actor": "user",
  "action": "repository_invitation.create",
  "invitee": "user",
  "inviter": "user",
  "actor_ip": "ip-redacted",
  "business": "example-business",
  "request_id": 9000346,
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
  "actor_location": {
    "country_code": "XX"
  },
  "operation_type": "create",
  "external_identity_nameid": "user",
  "external_identity_username": "user"
}

References #

repository_invitation.reject

#
Category
repository-invitation

Description

An invitation to join a repository was declined.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "@timestamp": 1783960537608,
  "_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAwMjA=",
  "action": "repository_invitation.reject",
  "actor": "user",
  "actor_id": 9000006,
  "actor_is_bot": false,
  "actor_location": {
    "country_code": "XX"
  },
  "business": "example-business",
  "business_id": 9000003,
  "created_at": 1783960537608,
  "hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMg==",
  "invitee": "user",
  "inviter": "user",
  "operation_type": "modify",
  "org": "example-org",
  "org_id": 9000004,
  "programmatic_access_type": "Personal access token (classic)",
  "public_repo": false,
  "repo": "user/example-repo",
  "repo_id": 9000012,
  "request_access_security_header": null,
  "request_id": "BD5C:3D1F96:F8C4E72:FD9DB46:6A5513D9",
  "token_id": 9000008,
  "token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
  "user_agent": "python-requests/2.34.2"
}

References #