Security Configuration Default
| action | Description | Sample | Rule |
|---|---|---|---|
| security_ | A default security configuration setting for new repositories was removed. | N | N |
| security_ | A default security configuration setting for new repositories was updated. | Y | N |
security_configuration_default.delete
#Description
A default security configuration setting for new repositories was removed.
Documented on GitHub's enterprise audit log reference.
security_configuration_default.update
#Description
A default security configuration setting for new repositories was updated.
Documented on GitHub's enterprise audit log reference.Example Audit Log Entry #
{
"@timestamp": 1783902041420,
"_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxNDY=",
"action": "security_configuration_default.update",
"actor": "user",
"actor_id": 9000002,
"actor_is_bot": false,
"actor_location": {
"country_code": "XX"
},
"business": "example-business",
"business_id": 9000003,
"created_at": 1783902041420,
"default_for_new_private_repos": false,
"default_for_new_public_repos": true,
"operation_type": "modify",
"request_access_security_header": null,
"request_id": "E166:32DFA7:7B20635:7F48F01:6A542F4F",
"security_configuration_name": "GitHub recommended",
"user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ip-redacted Safari/537.36"
}
References #