組織の監査ログイベント

組織で記録される監査ログイベントについて学習します。

この記事の内容

注:

この記事には、最新バージョンの GitHub Enterprise Server で使用できるイベントが含まれています。以前のバージョンでは、一部のイベントが使用できない場合があります。
この記事には、組織の監査ログに表示される可能性のあるイベントが含まれています。ユーザーアカウントのセキュリティログ、またはエンタープライズの監査ログに表示できるイベントについては、「セキュリティログのイベント」と「エンタープライズの監査ログイベント」を参照してください。
Webhook は、特定のユースケースの監査ログまたは API ポーリングの代替策として適している場合があります。 Webhook は、リポジトリ、Organization、または Enterprise で特定のイベントが発生したときに GitHub がサーバーに通知する方法です。 Enterprise、Organization、またはリポジトリで特定のイベントが発生したときに学習してログを記録するだけの場合、API や監査ログの検索と比較して、Webhook がより効率的である可能性があります。「Webhook ドキュメント」をご覧ください。

組織の監査ログイベントについて

各監査ログエントリの名前は、イベントのカテゴリと、それに続く操作タイプで構成されます。たとえば、repo.create エントリは repo カテゴリに対する create 操作を意味します。この記事の参照情報は、カテゴリ別にグループ化されています。

アクション	説明
`advisory_credit.accept`	Credit was accepted for a security advisory.
`advisory_credit.create`	Someone was added to the credit section of a security advisory.
`advisory_credit.decline`	Credit was declined for a security advisory.
`advisory_credit.destroy`	Someone was removed from the credit section of a security advisory.

アクション	説明
`auto_approve_personal_access_token_requests.disable`	Triggered when the organization must approve fine-grained personal access tokens before the tokens can access organization resources.
`auto_approve_personal_access_token_requests.enable`	Triggered when fine-grained personal access tokens can access organization resources without prior approval.

アクション	説明
`billing.change_billing_type`	The way the account pays for GitHub was changed.
`billing.change_email`	The billing email address changed.

アクション	説明
`checks.auto_trigger_disabled`	Automatic creation of check suites was disabled on a repository in the organization or enterprise.
`checks.auto_trigger_enabled`	Automatic creation of check suites was enabled on a repository in the organization or enterprise.
`checks.delete_logs`	Logs in a check suite were deleted.

アクション	説明
`codespaces.allow_permissions`	A codespace using custom permissions from its devcontainer.json file was launched.
`codespaces.attempted_to_create_from_prebuild`	An attempt to create a codespace from a prebuild was made.
`codespaces.business_enablement_updated`	Enterprise setting for Codespaces ownership was updated.
`codespaces.connect`	Credentials for a codespace were refreshed.
`codespaces.create`	A codespace was created
`codespaces.destroy`	A user deleted a codespace.
`codespaces.export_environment`	A codespace was exported to a branch on GitHub.
`codespaces.policy_group_created`	Policies were applied to codespaces in an organization or enterprise.
`codespaces.policy_group_deleted`	Policies were removed from codespaces in an organization or enterprise.
`codespaces.policy_group_updated`	Policies were updated for codespaces in an organization or enterprise.
`codespaces.restore`	A codespace was restored.
`codespaces.start_environment`	A codespace was started.
`codespaces.suspend_environment`	A codespace was stopped.
`codespaces.trusted_repositories_access_update`	A personal account's access and security setting for Codespaces were updated.

アクション	説明
`commit_comment.destroy`	A commit comment was deleted.
`commit_comment.update`	A commit comment was updated.

アクション	説明
`copilot.access_revoked`	Copilot access was revoked for the organization or enterprise due to its Copilot subscription ending, an issue with billing the entity, the entity being marked spammy, or the entity being suspended.
`copilot.cfb_org_settings_changed`	Copilot feature settings were changed at the organization level.
`copilot.cfb_seat_added`	A Copilot Business or Copilot Enterprise seat was added for a user and they have received access to GitHub Copilot. This can occur as the result of directly assigning a seat for a user, assigning a seat for a team, or setting the organization to allow access for all members.
`copilot.cfb_seat_assignment_created`	A Copilot Business or Copilot Enterprise seat assignment was newly created for a user or a team, and seats are being created.
`copilot.cfb_seat_assignment_refreshed`	A seat assignment that was previously pending cancellation was re-assigned and the user will retain access to Copilot.
`copilot.cfb_seat_assignment_reused`	A Copilot Business or Copilot Enterprise seat assignment was re-created for a user who already had a seat with no pending cancellation date, and the user will retain access to Copilot.
`copilot.cfb_seat_assignment_unassigned`	A user or team's Copilot Business or Copilot Enterprise seat assignment was unassigned, and the user(s) will lose access to Copilot at the end of the current billing cycle.
`copilot.cfb_seat_cancelled`	A user's Copilot Business or Copilot Enterprise seat was canceled, and the user no longer has access to Copilot.
`copilot.cfb_seat_cancelled_by_staff`	A user's Copilot Business or Copilot Enterprise seat was canceled manually by GitHub staff, and the user no longer has access to Copilot.
`copilot.cfb_seat_management_changed`	The seat management setting was changed at the organization level to either enable or disable Copilot access for all members of the organization, or to enable Copilot access for selected members or teams.
`copilot.content_exclusion_changed`	The excluded paths for GitHub Copilot were updated.
`copilot.knowledge_base_created`	A knowledge base was created in the organization.
`copilot.knowledge_base_deleted`	A knowledge base was deleted from the organization.
`copilot.knowledge_base_updated`	A knowledge base was updated in the organization.
`copilot.plan_changed`	The plan for GitHub Copilot was updated.

アクション	説明
`custom_property_definition.create`	A new custom property definition was created.
`custom_property_definition.destroy`	A custom property definition was deleted.
`custom_property_definition.update`	A custom property definition was updated.

アクション	説明
`custom_property_value.create`	A repository's custom property value was manually set for the first time.
`custom_property_value.destroy`	A repository's custom property value was deleted.
`custom_property_value.update`	A repository's custom property value was updated.

アクション	説明
`dependabot_alerts.disable`	Dependabot alerts were disabled for all existing repositories.
`dependabot_alerts.enable`	Dependabot alerts were enabled for all existing repositories.

アクション	説明
`discussion_post.destroy`	Triggered when a team discussion post is deleted.
`discussion_post.update`	Triggered when a team discussion post is edited.

アクション	説明
`discussion_post_reply.destroy`	Triggered when a reply to a team discussion post is deleted.
`discussion_post_reply.update`	Triggered when a reply to a team discussion post is edited.

アクション	説明
`environment.add_protection_rule`	A GitHub Actions deployment protection rule was created via the API.
`environment.create_actions_secret`	A secret was created for a GitHub Actions environment.
`environment.create_actions_variable`	A variable was created for a GitHub Actions environment.
`environment.delete`	An environment was deleted.
`environment.remove_actions_secret`	A secret was deleted for a GitHub Actions environment.
`environment.remove_actions_variable`	A variable was deleted for a GitHub Actions environment.
`environment.remove_protection_rule`	A GitHub Actions deployment protection rule was deleted via the API.
`environment.update_actions_secret`	A secret was updated for a GitHub Actions environment.
`environment.update_actions_variable`	A variable was updated for a GitHub Actions environment.
`environment.update_protection_rule`	A GitHub Actions deployment protection rule was updated via the API.

アクション	説明
`git.clone`	A repository was cloned.
`git.fetch`	Changes were fetched from a repository.
`git.push`	Changes were pushed to a repository.

アクション	説明
`dependabot_alerts_new_repos.disable`	Dependabot alerts were disabled for all new repositories.
`dependabot_alerts_new_repos.enable`	Dependabot alerts were enabled for all new repositories.

アクション	説明
`dependabot_security_updates.disable`	Dependabot security updates were disabled for all existing repositories.
`dependabot_security_updates.enable`	Dependabot security updates were enabled for all existing repositories.

アクション	説明
`dependabot_security_updates_new_repos.disable`	Dependabot security updates were disabled for all new repositories.
`dependabot_security_updates_new_repos.enable`	Dependabot security updates were enabled for all new repositories.

アクション	説明
`dependency_graph.disable`	The dependency graph was disabled for all existing repositories.
`dependency_graph.enable`	The dependency graph was enabled for all existing repositories.

アクション	説明
`dependency_graph_new_repos.disable`	The dependency graph was disabled for all new repositories.
`dependency_graph_new_repos.enable`	The dependency graph was enabled for all new repositories.

アクション	説明
`enterprise_installation.create`	The GitHub App associated with a GitHub Connect connection was created.
`enterprise_installation.destroy`	The GitHub App associated with a GitHub Connect connection was deleted.

アクション	説明
`hook.active_changed`	A hook's active status was updated.
`hook.config_changed`	A hook's configuration was changed.
`hook.create`	A new hook was added.
`hook.destroy`	A hook was deleted.
`hook.events_changed`	A hook's configured events were changed.

アクション	説明
`integration.create`	A GitHub App was created.
`integration.destroy`	A GitHub App was deleted.
`integration.manager_added`	A member of an enterprise or organization was added as a GitHub App manager.
`integration.manager_removed`	A member of an enterprise or organization was removed from being a GitHub App manager.
`integration.remove_client_secret`	A client secret for a GitHub App was removed.
`integration.revoke_all_tokens`	All user tokens for a GitHub App were requested to be revoked.
`integration.revoke_tokens`	Token(s) for a GitHub App were revoked.
`integration.suspend`	A GitHub App was suspended.
`integration.transfer`	Ownership of a GitHub App was transferred to another user or organization.
`integration.unsuspend`	A GitHub App was unsuspended.

アクション	説明
`integration_installation.create`	A GitHub App was installed.
`integration_installation.destroy`	A GitHub App was uninstalled.
`integration_installation.repositories_added`	Repositories were added to a GitHub App.
`integration_installation.repositories_removed`	Repositories were removed from a GitHub App.
`integration_installation.suspend`	A GitHub App was suspended.
`integration_installation.unsuspend`	A GitHub App was unsuspended.
`integration_installation.version_updated`	Permissions for a GitHub App were updated.

アクション	説明
`integration_installation_request.close`	A request to install a GitHub App was either approved or denied by an owner, or canceled by the member who opened the request.
`integration_installation_request.create`	A member requested that an owner install a GitHub App.

組織の監査ログ イベント

この記事の内容

組織の監査ログイベント

アクション	説明
`ip_allow_list.disable`	An IP allow list was disabled.
`ip_allow_list.disable_for_installed_apps`	An IP allow list was disabled for installed GitHub Apps.
`ip_allow_list.enable`	An IP allow list was enabled.
`ip_allow_list.enable_for_installed_apps`	An IP allow list was enabled for installed GitHub Apps.

アクション	説明
`ip_allow_list_entry.create`	An IP address was added to an IP allow list.
`ip_allow_list_entry.destroy`	An IP address was deleted from an IP allow list.
`ip_allow_list_entry.update`	An IP address or its description was changed.

アクション	説明
`issue_comment.destroy`	A comment on an issue was deleted from the repository.
`issue_comment.update`	A comment on an issue (other than the initial one) changed.

アクション	説明
`issue.destroy`	An issue was deleted from the repository.
`issue.pinned`	An issue was pinned to a repository.
`issue.transfer`	An issue was transferred to another repository.
`issue.unpinned`	An issue was unpinned from a repository.

アクション	説明
`issues.deletes_disabled`	The ability for enterprise members to delete issues was disabled Members cannot delete issues in any organizations in an enterprise.
`issues.deletes_enabled`	The ability for enterprise members to delete issues was enabled Members can delete issues in any organizations in an enterprise.
`issues.deletes_policy_cleared`	An enterprise owner cleared the policy setting for allowing members to delete issues in an enterprise.

アクション	説明
`marketplace_listing.approve`	A listing was approved for inclusion in GitHub Marketplace.
`marketplace_listing.change_category`	A category for a listing for an app in GitHub Marketplace was changed.
`marketplace_listing.create`	A listing for an app in GitHub Marketplace was created.
`marketplace_listing.delist`	A listing was removed from GitHub Marketplace.
`marketplace_listing.redraft`	A listing was sent back to draft state.
`marketplace_listing.reject`	A listing was not accepted for inclusion in GitHub Marketplace.

アクション	説明
`members_can_create_pages.disable`	The ability for members to publish GitHub Pages sites was disabled.
`members_can_create_pages.enable`	The ability for members to publish GitHub Pages sites was enabled.

アクション	説明
`members_can_create_private_pages.disable`	The ability for members to publish private GitHub Pages was disabled Members cannot publish private GitHub Pages in an organization.
`members_can_create_private_pages.enable`	The ability for members to publish private GitHub Pages was enabled Members can publish private GitHub Pages in an organization.

アクション	説明
`members_can_create_public_pages.disable`	The ability for members to publish public GitHub Pages was disabled Members cannot publish public GitHub Pages in an organization.
`members_can_create_public_pages.enable`	The ability for members to publish public GitHub Pages was enabled Members can publish public GitHub Pages in an organization.

アクション	説明
`members_can_delete_repos.clear`	An enterprise owner cleared the policy setting for deleting or transferring repositories in any organizations in an enterprise.
`members_can_delete_repos.disable`	The ability for enterprise members to delete repositories was disabled Members cannot delete or transfer repositories in any organizations in an enterprise.
`members_can_delete_repos.enable`	The ability for enterprise members to delete repositories was enabled Members can delete or transfer repositories in any organizations in an enterprise.