Repository Malware Alerts
| action | Description | Sample | Rule |
|---|---|---|---|
| repository_ | Dependabot malware alerts was disabled. | N | N |
| repository_ | Dependabot malware alerts was enabled. | Y | N |
repository_malware_alerts.disable
#Description
Dependabot malware alerts was disabled.
Documented on GitHub's enterprise audit log reference.
repository_malware_alerts.enable
#Description
Dependabot malware alerts was enabled.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"repo_id": 9000062,
"actor_id": 9000063,
"created_at": 1784825553178.0,
"business_id": 9000005,
"public_repo": false,
"actor_is_bot": false,
"org": "example-org",
"repo": "user/example-repo",
"actor": "user",
"action": "repository_malware_alerts.enable",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000347,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "modify",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #