Repository Security Configuration
| action | Description | Sample | Rule |
|---|---|---|---|
| repository_ | A code security configuration was applied to a repository. | Y | N |
| repository_ | A code security configuration failed to attach to the repository. | Y | N |
| repository_ | A code security configuration was removed from a repository. | Y | N |
| repository_ | A code security configuration was removed due to a change in repository or enterprise settings. | Y | N |
repository_security_configuration.applied
#Description
A code security configuration was applied to a repository.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"repo_id": 9000050,
"created_at": 1782501239881.0,
"business_id": 9000005,
"public_repo": false,
"security_configuration_id": 9000360,
"org": "example-org",
"repo": "user/example-repo",
"topic": "example-label-147",
"action": "repository_security_configuration.applied",
"business": "example-business",
"operation_type": "modify",
"security_configuration_name": "example-label-121",
"repository_security_configuration_state": "enforced"
}
repository_security_configuration.failed
#Description
A code security configuration failed to attach to the repository.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"repo_id": 9000361,
"actor_id": 9000263,
"created_at": 1785241543231.0,
"business_id": 9000005,
"public_repo": false,
"actor_is_bot": false,
"security_configuration_id": 9000362,
"org": "example-org",
"repo": "user/example-repo",
"actor": "user",
"topic": "example-label-116",
"action": "repository_security_configuration.failed",
"business": "example-business",
"operation_type": "modify",
"external_identity_nameid": "user",
"external_identity_username": "user",
"security_configuration_name": "example-label-122",
"repository_security_configuration_state": "failed",
"repository_security_configuration_failure_reason": "An enterprise policy prevented modifying advanced security enablement."
}
repository_security_configuration.removed
#Description
A code security configuration was removed from a repository.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000002,
"repo_id": 9000363,
"actor_id": 9000041,
"created_at": 1785251412690.0,
"business_id": 9000005,
"public_repo": false,
"actor_is_bot": false,
"security_configuration_id": 9000360,
"org": "example-org",
"repo": "user/example-repo",
"actor": "user",
"action": "repository_security_configuration.removed",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000364,
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "remove",
"external_identity_nameid": "user",
"external_identity_username": "user",
"security_configuration_name": "example-label-121"
}
repository_security_configuration.removed_by_settings_change
#Description
A code security configuration was removed due to a change in repository or enterprise settings.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"org_id": 9000097,
"repo_id": 9000365,
"actor_id": 9000366,
"created_at": 1783542387508.0,
"business_id": 9000005,
"public_repo": false,
"actor_is_bot": false,
"security_configuration_id": 9000362,
"org": "example-org",
"repo": "user/example-repo",
"actor": "user",
"action": "repository_security_configuration.removed_by_settings_change",
"actor_ip": "ip-redacted",
"business": "example-business",
"request_id": 9000367,
"user_agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36",
"actor_location": {
"country_code": "XX"
},
"operation_type": "modify",
"external_identity_nameid": "user",
"external_identity_username": "user",
"security_configuration_name": "example-label-122",
"repository_security_configuration_state": "removed",
"repository_security_configuration_failure_reason": "An enterprise policy prevented modifying advanced security enablement."
}