Dependabot Security Updates

action	Description	Sample	Rule
dependabot_security_updates.disable	Dependabot security updates were disabled for all existing repositories.	N	Y
dependabot_security_updates.enable	Dependabot security updates were enabled for all existing repositories.	N	N

dependabot_security_updates.disable

Dependabot security updates were disabled for all existing repositories.

Documented on GitHub's enterprise audit log reference.

Fields referenced by at least one attached detection rule. This view counts distinct rules and is not a complete event schema.

Name	Rules	Vendors
`action`	2 detection rules	Panther, Sigma

Outdated Dependency Or Vulnerability Alert Disabled source high: Dependabot performs a scan to detect insecure dependencies, and sends Dependabot alerts. This rule detects when an organization owner disables Dependabot alerts private repositories or Dependabot security updates for all repositories.T1195, T1195.001

GitHub Dependabot Vulnerability Alerts Disabled source high: Detects when vulnerability alerts are disabled for GitHub Dependabot.T1562

GitHub Security Change, includes GitHub Advanced Security source low: The rule alerts when GitHub Security tools (Dependabot, Secret Scanner, etc) are disabled.T1562

Dependabot security updates were enabled for all existing repositories.

Documented on GitHub's enterprise audit log reference.