Secret Scanning
| action | Description | Sample | Rule |
|---|---|---|---|
| secret_ | Secret scanning was disabled for all existing repositories. | N | Y |
| secret_ | Secret scanning was enabled for all existing repositories. | N | N |
secret_scanning.disable
#Description
Secret scanning was disabled for all existing repositories.
Documented on GitHub's enterprise audit log reference. Fields referenced by at least one attached detection rule. This view counts distinct rules and is not a complete event schema. Full rule details for this event, including ATT&CK technique mappings and native queries →Detection Fields #
Name Rules Vendors action2 detection rules Panther, Sigma Detection Rules #
Sigma #
T1685YARA-L #
T1562Panther #
T1562
secret_scanning.enable
#Description
Secret scanning was enabled for all existing repositories.
Documented on GitHub's enterprise audit log reference.