Repository Projects Change
| action | Description | Sample | Rule |
|---|---|---|---|
| repository_ | The repository projects policy was removed for an organization, or all organizations in the enterprise Organization owners can now control their repository projects settings. | Y | N |
| repository_ | Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise. | Y | N |
| repository_ | Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise. | Y | N |
repository_projects_change.clear
#Description
The repository projects policy was removed for an organization, or all organizations in the enterprise Organization owners can now control their repository projects settings.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783955168684,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxMjY=",
"action": "repository_projects_change.clear",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783955168684,
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "modify",
"programmatic_access_type": "Personal access token (classic)",
"request_access_security_header": null,
"request_id": "94CE:3FE560:EE096FB:F2C6A49:6A54FEE0",
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user": "user",
"user_agent": "python-requests/2.34.2",
"user_id": 9000002
}
References #
repository_projects_change.disable
#Description
Repository projects were disabled for a repository, all repositories in an organization, or all organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"repo_id": 9000348,
"user_id": 9000084,
"actor_id": 9000084,
"created_at": 1785260336049.0,
"business_id": 9000005,
"public_repo": false,
"actor_is_bot": false,
"org": "example-org",
"repo": "user/example-repo",
"user": "user",
"actor": "user",
"action": "repository_projects_change.disable",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000349,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "modify",
"external_identity_nameid": "user",
"external_identity_username": "user"
}
References #
repository_projects_change.enable
#Description
Repository projects were enabled for a repository, all repositories in an organization, or all organizations in an enterprise.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783955168423,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxMjc=",
"action": "repository_projects_change.enable",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783955168423,
"hashed_token": "U1lOVEhFVElDX1RPS0VOX0hBU0hfMDAwMQ==",
"operation_type": "modify",
"programmatic_access_type": "Personal access token (classic)",
"request_access_security_header": null,
"request_id": "94CE:3FE560:EE0953D:F2C6886:6A54FEE0",
"token_id": 9000006,
"token_scopes": "admin:enterprise,admin:gpg_key,admin:org,admin:org_hook,admin:public_key,admin:repo_hook,admin:ssh_signing_key,audit_log,codespace,copilot,delete:packages,delete_repo,gist,notifications,project,repo,user,workflow,write:discussion,write:network_configurations,write:packages",
"user": "user",
"user_agent": "python-requests/2.34.2",
"user_id": 9000002
}
References #