Skip to content
GitHub Forensics

This tool is not affiliated with, endorsed by or sponsored by GitHub, Inc. or Microsoft Corporation. GitHub and GitHub Actions are trademarks of GitHub, Inc. Other names are trademarks of their respective owners.

Glossary

GitHub audit log

The record of security-relevant actions in a GitHub organization or enterprise: who did what, when, from where and with which credential.

The GitHub audit log lists events that affect an organization or enterprise: member and role changes, repository settings, workflow runs, secrets metadata, keys, apps, and security policies. Each event has an action (for example org.update_member or protected_branch.destroy), an actor, a timestamp and context fields such as repo, actor_location and, when enabled, actor_ip.

Owners on every plan can view and export it (JSON or CSV) for the last 180 days. The API, Git events and streaming require GitHub Enterprise Cloud. See how to export the GitHub audit log and its limitations.

This tool is not affiliated with, endorsed by or sponsored by GitHub, Inc. or Microsoft Corporation. GitHub and GitHub Actions are trademarks of GitHub, Inc. Other names are trademarks of their respective owners.