File tree Expand file tree Collapse file tree 2 files changed +2
-20
lines changed
docs/tables/github_audit_log Expand file tree Collapse file tree 2 files changed +2
-20
lines changed Original file line number Diff line number Diff line change @@ -42,7 +42,7 @@ tailpipe collect github_audit_log.my_logs
42
42
43
43
## Query
44
44
45
- ** [ Explore 20 + example queries for this table →] ( https://hub.tailpipe.io/plugins/turbot/github/queries/github_audit_log ) **
45
+ ** [ Explore 16 + example queries for this table →] ( https://hub.tailpipe.io/plugins/turbot/github/queries/github_audit_log ) **
46
46
47
47
### Track enforced branch protection rule changes
48
48
@@ -143,4 +143,4 @@ partition "github_audit_log" "my_logs_issue_comment" {
143
143
file_layout = "%{DATA}.json.gz"
144
144
}
145
145
}
146
- ```
146
+ ```
Original file line number Diff line number Diff line change @@ -87,24 +87,6 @@ having
87
87
setting_changes > 3 ;
88
88
```
89
89
90
- ### Detect bulk member removals
91
-
92
- Flags bulk removal of members, which could indicate malicious intent or unauthorized actions.
93
-
94
- ``` sql
95
- select
96
- actor,
97
- count (* ) as members_removed
98
- from
99
- github_audit_log
100
- where
101
- action = ' org.remove_member'
102
- group by
103
- actor
104
- having
105
- members_removed > 5 ;
106
- ```
107
-
108
90
### Detect disabled security features
109
91
110
92
Monitors for actions that disable critical security features, potentially compromising security.
You can’t perform that action at this time.
0 commit comments