diff --git a/.github/workflows/moda-allowed-ips.yml b/.github/workflows/moda-allowed-ips.yml index 9709bb7c191f..98e736cf6265 100644 --- a/.github/workflows/moda-allowed-ips.yml +++ b/.github/workflows/moda-allowed-ips.yml @@ -21,6 +21,8 @@ jobs: - name: Check out the repository uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Update list of allowed IPs + env: + GITHUB_TOKEN: ${{ secrets.DOCS_BOT_PAT_BASE }} run: | echo "Getting a list of Fastly IP addresses...." ips=$( \ @@ -41,10 +43,13 @@ jobs: fi echo "Change found; making a pull request..." + git config --global user.name "docs-bot" + git config --global user.email "77750099+docs-bot@users.noreply.github.com" + branchname=update-allowed-ips-$(date +%s) git checkout -b $branchname git commit -am "Update list of allowed IPs" - git push + git push origin "$branchname" gh pr create \ --title "Update list of allowed IPs" \ --body "This PR updates the list of allowed IPs in Moda. It is automatically generated. diff --git a/content/billing/concepts/product-billing/github-spark.md b/content/billing/concepts/product-billing/github-spark.md deleted file mode 100644 index 835ac506a734..000000000000 --- a/content/billing/concepts/product-billing/github-spark.md +++ /dev/null @@ -1,57 +0,0 @@ ---- -title: GitHub Spark billing -intro: 'Learn how {% data variables.product.prodname_spark %} is billed for users.' -versions: - feature: spark -shortTitle: GitHub Spark -redirect_from: - - /copilot/concepts/copilot-billing/about-billing-for-github-spark - - /copilot/concepts/copilot-billing/billing-for-spark -contentType: concepts -category: - - Understand product costs ---- - -{% data reusables.copilot.spark-business-intro %} - -> [!NOTE] -> {% data reusables.spark.preview-note-spark %} - -## Billing for {% data variables.product.prodname_spark_short %} app creation - -Each prompt to {% data variables.product.prodname_spark_short %} consumes {% data variables.product.prodname_ai_credits_short %} based on token usage and the model used. {% data variables.product.prodname_spark_short %} usage is attributed to a dedicated **{% data variables.product.prodname_spark_short %}** SKU, which allows you to track and set budgets specifically for {% data variables.product.prodname_spark_short %} separately from other {% data variables.product.prodname_copilot_short %} features. See [AUTOTITLE](/copilot/concepts/billing/usage-based-billing-for-organizations-and-enterprises). - -## Managing {% data variables.product.prodname_spark_short %} costs - -You now have more granular options for managing {% data variables.product.prodname_spark_short %} costs: - -### Budget options - -* **Bundled budget**: Combine {% data variables.product.prodname_spark_short %} {% data variables.product.prodname_ai_credits_short %} with other {% data variables.product.prodname_copilot_short %} costs in a single budget for simplified management. -* **Individual product budget**: Set a dedicated budget specifically for {% data variables.product.prodname_spark_short %} for granular cost control. - -For detailed information about setting up budgets, see [AUTOTITLE](/billing/how-tos/set-up-budgets). - -### Analytics and monitoring - -With the dedicated SKU, you can: - -* Track {% data variables.product.prodname_spark_short %} {% data variables.product.prodname_ai_credits_short %} consumption separately from other {% data variables.product.prodname_copilot_short %} features in billing analytics -* Set up alerts when {% data variables.product.prodname_spark_short %} usage approaches budget limits -* Generate reports specifically for {% data variables.product.prodname_spark_short %} usage - -## Billing and limits for {% data variables.product.prodname_spark_short %} app deployment - -You can publish apps created with {% data variables.product.prodname_spark_short %} to a deployment environment. - -Deployed apps do not currently incur any charges. However, {% data variables.product.company_short %} currently **limits usage** of deployed sparks based on criteria including number of HTTP requests, data transfer, and storage. - -* Limits apply to the billable owner, meaning if you own 10 deployed sparks, all 10 will count towards the limits. -* When any limit is reached, the spark is unpublished for the rest of the billing period. - -In the future, a new billing system will allow sparks to continue being deployed once a limit is reached, with additional usage charged to the spark's billable owner. {% data variables.product.company_short %} will publish the limits once they are confirmed following a testing period. This article will be updated when more details are available. - -## Further reading - -* [AUTOTITLE](/copilot/responsible-use/agents) -* [AUTOTITLE](/copilot/tutorials/spark/build-apps-with-spark) diff --git a/content/billing/concepts/product-billing/index.md b/content/billing/concepts/product-billing/index.md index dcd3aabe467f..caf112676886 100644 --- a/content/billing/concepts/product-billing/index.md +++ b/content/billing/concepts/product-billing/index.md @@ -16,7 +16,6 @@ children: - /github-packages - /cloud-and-local-sandboxes - /git-lfs - - /github-spark contentType: concepts --- diff --git a/content/copilot/concepts/index.md b/content/copilot/concepts/index.md index 7d1eb5dcd5dd..9641b5694f44 100644 --- a/content/copilot/concepts/index.md +++ b/content/copilot/concepts/index.md @@ -9,7 +9,6 @@ children: - /chat - /agents - /about-cloud-and-local-sandboxes - - /spark - /copilot-usage-metrics - /prompting - /context diff --git a/content/copilot/concepts/spark.md b/content/copilot/concepts/spark.md deleted file mode 100644 index 32657bb066be..000000000000 --- a/content/copilot/concepts/spark.md +++ /dev/null @@ -1,144 +0,0 @@ ---- -title: About GitHub Spark -shortTitle: Spark -intro: 'Learn about building and deploying intelligent apps with natural language using {% data variables.product.prodname_spark %}.' -versions: - feature: spark -product: '{% data variables.copilot.copilot_pro_plus_short %} and {% data variables.copilot.copilot_enterprise_short %}' -contentType: concepts -category: - - Learn about Copilot ---- - -{% data reusables.copilot.spark-deprecation %} - -## Overview - -{% data reusables.copilot.spark-overview %} - -## Benefits of using {% data variables.product.prodname_spark_short %} - -{% data variables.product.prodname_spark_short %} can provide a wide range of benefits at all stages of app development. - -### Build apps with natural language or code - -You don't need to know how to code to build an app with {% data variables.product.prodname_spark_short %}. You can describe what you want your app to do in natural language, and {% data variables.product.prodname_spark_short %} will generate all the necessary code for you, along with a live, interactive preview of the app. - -If you do want to explore and edit the code, you can simply open the code panel in {% data variables.product.prodname_spark_short %}, or go further and open your app in a {% data variables.product.github %} codespace (a cloud-based development environment). - -See [AUTOTITLE](/codespaces/about-codespaces/what-are-codespaces). - -### Leverage AI capabilities - -{% data variables.product.prodname_spark_short %} is natively integrated with {% data variables.product.prodname_github_models %}, so you can add AI features to your app (for example, summarizing text or suggesting image tags) simply by prompting {% data variables.product.prodname_spark_short %}. {% data variables.product.prodname_spark_short %} will add the required inference components automatically, and you can edit the system prompts that control those capabilities yourself. - -### Managed data store - -If {% data variables.product.prodname_spark_short %} detects the need to store data in your app, it will automatically set up a managed key-value store, so you don't need to worry about setting up and managing a database. The data store runs on Azure (Cosmos DB) and it's intended for small records (up to 512 KB per entry). - -### Built-in security protections - -{% data variables.product.prodname_spark_short %} has built-in authentication, since users need to sign in with their {% data variables.product.github %} account to access your app. You control who has access to your app by setting visibility and data access options. - -### One-click deployment - -{% data variables.product.prodname_spark_short %} comes with a fully integrated runtime environment that allows you to deploy your app in one click. All necessary infrastructure is provisioned automatically, so you don't have to worry about setting up servers or managing deployments. - -All sparks are hosted and deployed by Azure Container Apps (ACA). - -### Fully integrated with {% data variables.product.github %} - -{% data variables.product.prodname_spark_short %} is fully integrated with {% data variables.product.github %}, so you can use familiar tools and workflows to build and manage your app. - -#### Work in {% data variables.product.prodname_github_codespaces %} - -* You can open a {% data variables.product.github %} codespace (a cloud-based development environment) directly from {% data variables.product.prodname_spark_short %}, so you can continue building your app there, with access to {% data variables.product.prodname_copilot_short %} and all your usual development tools. - -* There's automatic syncing between the codespace and {% data variables.product.prodname_spark_short %}, so you can seamlessly switch between the two environments. - -#### Create a repository with two-way syncing - -* You can create a repository for your spark in one click, allowing you to manage your app's code and collaborate with others using standard {% data variables.product.github %} workflows. - -* There's a two-way sync between your spark and the repository, so changes made in either {% data variables.product.prodname_spark_short %} or the main branch of your repository are automatically reflected in both places. Any changes made to your spark prior to repository creation will be added to your repository so you have a full record of all changes and commits made to your spark since its creation. - -#### Invite collaborators - -* If you want to invite others to contribute to building your spark, you can add them as collaborators to your repository. - -#### Leverage standard {% data variables.product.github %} features - -* Once you've created a repository for your spark, you can use all the standard {% data variables.product.github %} features such as pull requests, issues, and project boards to manage your spark development process, as well as leverage {% data variables.product.prodname_actions %} for CI/CD workflows. - -## Enterprise considerations - -If you’re an enterprise admin evaluating {% data variables.product.prodname_spark_short %}, there are specific benefits and controls available at the enterprise level. - -For details about enabling {% data variables.product.prodname_spark_short %} for your enterprise, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-spark). - -### Why enable {% data variables.product.prodname_spark_short %} for your enterprise? - -Enabling {% data variables.product.prodname_spark_short %} empowers your teams to move faster from idea to production while maintaining the security, governance, and cost controls that enterprise admins expect. - -Benefits include: - -* **Centralized control**. {% data variables.product.prodname_spark_short %} is included in the {% data variables.product.prodname_copilot_short %} license and respects existing enterprise access policies. -* **Governance and security**. Built on {% data variables.product.github %} and Azure, sparks inherit enterprise-grade reliability, authentication, and compliance. -* **Transparency and cost management**. {% data variables.product.prodname_spark_short %} consumption draws from {% data variables.product.prodname_ai_credits_short %}, which you can monitor through the {% data variables.product.github %} billing platform. -* **Accelerated innovation**. Teams can validate ideas in hours instead of months, without relying on fragmented toolchains. - -### Billing - -Each prompt to {% data variables.product.prodname_spark_short %} consumes {% data variables.product.prodname_ai_credits_short %}. See [AUTOTITLE](/billing/concepts/product-billing/github-spark). - -### Infrastructure - -The {% data variables.product.prodname_spark_short %} development environment is powered by {% data variables.product.prodname_github_codespaces %}. If your enterprise disables {% data variables.product.prodname_codespaces %}, users can still access the {% data variables.product.prodname_spark_short %} interface but won’t be able to open the underlying codespace. - -All sparks are deployed to Azure Container Apps (ACA). - -## Develop your spark with {% data variables.product.prodname_copilot_short %} - -You can combine the functionality of {% data variables.product.prodname_spark %} with {% data variables.product.prodname_copilot %} to support your app development. - -### {% data variables.product.prodname_copilot_short %} agent mode - -When you open your spark in a {% data variables.product.github %} codespace, you have access to all of {% data variables.product.prodname_copilot_short %}'s capabilities, including {% data variables.copilot.copilot_chat_short %} and {% data variables.product.prodname_copilot_short %} agent mode. - -Agent mode is useful when you have a specific task in mind and want to enable {% data variables.product.prodname_copilot_short %} to autonomously edit your code. In agent mode, {% data variables.product.prodname_copilot_short %} determines which files to make changes to, offers code changes and terminal commands to complete the task, and iterates to remediate issues until the original task is complete. You can take your app's development to the next level, as well as leveraging {% data variables.product.prodname_copilot_short %} to debug and troubleshoot issues in your code. - -See [{% data variables.product.prodname_copilot_short %} agent mode](/copilot/how-tos/chat-with-copilot/chat-in-ide#agent-mode). - -### {% data variables.copilot.copilot_cloud_agent %} - -Once your spark is connected to a {% data variables.product.github %} repository, you can use {% data variables.copilot.copilot_cloud_agent %} to help you to continue to build and maintain your app, while you focus on other things. - -With the cloud agent, you delegate specific tasks to {% data variables.product.prodname_copilot_short %} (either by assigning an issue to {% data variables.product.prodname_copilot_short %}, or prompting {% data variables.product.prodname_copilot_short %} to create a pull request), and {% data variables.product.prodname_copilot_short %} will autonomously work in the background to complete the task. {% data variables.copilot.copilot_cloud_agent %} can fix bugs, refactor code, improve test coverage and more. - -See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/about-cloud-agent). - -## Sharing your spark - -When you're ready to publish your spark, you can choose from the following visibility options: - -* Private to you only -* Visible to members of a specific organization on {% data variables.product.github %} -* Visible to all {% data variables.product.github %} users (may be disabled for certain {% data variables.enterprise.prodname_managed_users %} based on admin configuration) - -You can then share your spark with others, so they can view and interact with your app. The link to your spark remains undiscoverable except for those who have the link. - -Optionally, you can publish your spark as "read-only", meaning you can showcase your app to others without them being able to edit or delete app contents. - -## Limitations of {% data variables.product.prodname_spark_short %} - -{% data variables.product.prodname_spark_short %} uses an opinionated stack (React, TypeScript) for reliability. For best results, you should work within {% data variables.product.prodname_spark_short %}'s SDK and core framework. - -You can add external libraries, but compatibility with {% data variables.product.prodname_spark_short %}'s SDK isn’t guaranteed. You should always test your spark thoroughly after adding any external libraries. - -By default, your spark's data store is shared for all users of the published spark. You should make sure to delete any private or sensitive data from your app prior to making it visible to other users. You can optionally publish your spark as "read-only", meaning you can showcase your app to others without them being able to edit or delete app contents. - -## Further reading - -* [AUTOTITLE](/copilot/responsible-use/agents) -* [AUTOTITLE](/copilot/tutorials/spark/build-apps-with-spark) -* [AUTOTITLE](/copilot/how-tos/troubleshoot-copilot/troubleshoot-spark) diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/index.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/index.md index f81947877d9d..75599766b836 100644 --- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/index.md +++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/index.md @@ -9,7 +9,6 @@ children: - /manage-access - /manage-enterprise-policies - /manage-agents - - /manage-spark - /manage-availability-of-default-models - /enable-custom-models - /review-audit-logs diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-spark.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-spark.md deleted file mode 100644 index 6d265c5e7105..000000000000 --- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-spark.md +++ /dev/null @@ -1,50 +0,0 @@ ---- -title: Managing GitHub Spark in your enterprise -shortTitle: 'Manage {% data variables.product.prodname_spark_short %}' -intro: 'Enable and manage {% data variables.product.prodname_spark %} for your enterprise.' -permissions: Enterprise owners -product: 'Enterprises with a {% data variables.copilot.copilot_enterprise_short %} plan' -versions: - feature: spark -allowTitleToDifferFromFilename: true -contentType: how-tos -category: - - Manage Copilot for a team ---- - -> [!NOTE] -> * {% data reusables.copilot.spark-deprecation %} - -## About {% data variables.product.prodname_spark_short %} - -{% data variables.product.prodname_spark_short %} allows users to build intelligent applications using natural-language prompts. {% data variables.product.prodname_spark_short %} includes advanced controls and built-in design tools for customization. Once published, applications can be shared with teammates or deployed to production. - -For details about benefits, development experience, billing, and enterprise considerations, see [AUTOTITLE](/copilot/concepts/spark#enterprise-considerations). - -> [!NOTE] -> * {% data reusables.spark.preview-note-spark %} -> * {% data reusables.copilot.spark-data-res %} - -## Prerequisites - -To use {% data variables.product.prodname_spark_short %}, your enterprise must be on a {% data variables.copilot.copilot_enterprise_short %} plan. - -## Enabling {% data variables.product.prodname_spark_short %} for your {% data variables.product.prodname_copilot_short %} subscribers - -By default, {% data variables.product.prodname_spark_short %} is **disabled** for users who receive a {% data variables.copilot.copilot_enterprise_short %} license from an enterprise-owned organization. - -You can allow members to use {% data variables.product.prodname_spark_short %} from the "Features & clients" page of the AI Controls tab for your enterprise. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-enterprise-policies#defining-policies-for-your-enterprise). - -{% data reusables.enterprise-accounts.policy-enablement-next-steps %} - -
- -Was this article helpful in enabling and managing {% data variables.product.prodname_spark_short %} for your enterprise? - -Yes No - -
- -## Further reading - -* [AUTOTITLE](/copilot/responsible-use/agents) diff --git a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md index 8c3ca6bdeac2..41c5fd13e32c 100644 --- a/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md +++ b/content/copilot/how-tos/copilot-integrations/integrate-cloud-agent-with-teams.md @@ -53,7 +53,6 @@ You can keep steering from Teams, or continue the work on the agent-generated ar * You must have a {% data variables.product.github %} account with access to {% data variables.product.prodname_copilot_short %} through a paid {% data variables.product.prodname_copilot_short %} plan. * You must have a Teams account. -* You must have Microsoft Public Developer Preview enabled for your Microsoft Teams client, see [Public developer preview for Teams](https://learn.microsoft.com/en-us/microsoftteams/platform/resources/dev-preview/developer-preview-intro) in the Microsoft Learn documentation. {% data reusables.copilot.cloud-agent.cloud-sandboxes-prerequisite-teams %} ## Installing the {% data variables.product.github %} app in Teams diff --git a/content/copilot/how-tos/copilot-sdk/features/cloud-sessions.md b/content/copilot/how-tos/copilot-sdk/features/cloud-sessions.md index d7eb9ea8a64f..b7269d907fc0 100644 --- a/content/copilot/how-tos/copilot-sdk/features/cloud-sessions.md +++ b/content/copilot/how-tos/copilot-sdk/features/cloud-sessions.md @@ -2,10 +2,10 @@ title: Cloud sessions shortTitle: Cloud Sessions intro: >- - Cloud sessions run Copilot work on GitHub-hosted compute through Mission - Control. Use them when your app should create a session that executes remotely - instead of starting a local Copilot CLI session on the user's machine or your - server. + Cloud sessions run {% data variables.product.prodname_copilot_short %} work on {% data variables.product.github %}-hosted compute and appear in the + agents panel on {% data variables.product.github %}. Use them when your app + should create a session that executes remotely instead of starting a local + {% data variables.copilot.copilot_cli %} session on the user's machine or your server. versions: fpt: '*' ghec: '*' @@ -21,7 +21,7 @@ Before creating a cloud session, make sure: * The user has Copilot access with cloud-agent entitlement. * The session can authenticate to GitHub, either with a user token or a logged-in Copilot CLI identity. -* You can associate the session with a GitHub repository. This is optional in the SDK type, but recommended so Mission Control and the cloud agent have repository context. +* You can associate the session with a GitHub repository. This is optional in the SDK type, but recommended so the cloud agent has the correct repository context. * Organization policies allow remote control and viewing sessions from cloud surfaces. ## Creating a cloud session @@ -160,7 +160,7 @@ let session = client.create_session( ## Sending the first prompt -Cloud sessions initialize in two phases: `createSession` resolves as soon as Mission Control has reserved a task, but the remote `copilot-agent` worker takes another second or two to connect and emit `session.start`. If you call `session.send` before that, the runtime's `RemoteSession.send` throws `"Remote session is still starting"` — but the schema wrapper is fire-and-forget and **silently swallows the error** while still returning a fresh `messageId` to your code. The prompt is dropped on the server and never reaches the worker. +Cloud sessions initialize in two phases: `createSession` resolves as soon as the agent has reserved the task, but the remote `copilot-agent` worker takes another second or two to connect and emit `session.start`. If you call `session.send` before that, the runtime's `RemoteSession.send` throws `"Remote session is still starting"`, but the schema wrapper is fire-and-forget and **silently swallows the error** while still returning a fresh `messageId` to your code. The prompt is dropped on the server and never reaches the worker. To send reliably, subscribe to events **before** sending and await the first `session.start` event whose `producer` is `"copilot-agent"`: @@ -196,12 +196,12 @@ A few notes: * Set `streaming: true` on `createSession` so the runtime emits `assistant.message_delta` events. Without it, the only assistant signal you get is the final `assistant.message` — fine for batch use, but the chat will look frozen if you're rendering a live UI. See [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/streaming-events). * Only the **first** `session.send` is sensitive to this race. Subsequent sends on the same session work normally because the runtime keeps `hasSessionStarted` set for the life of the session. -* Apply a timeout (e.g. 60 s) around the `ready` promise so a stuck Mission Control provisioning doesn't hang your app forever. +* Apply a timeout (e.g. 60 s) around the `ready` promise so a stuck session doesn't hang your app forever. * The same pattern works in every SDK language — subscribe to `session.start`, check `producer === "copilot-agent"`, then call `send`. -## Accessing the Mission Control URL +## Accessing the agent session URL -Cloud sessions are inherently remote: once the worker connects, Mission Control publishes the session at `https://github.com/copilot/tasks/{sessionId}` and the runtime emits a `session.info` event with the URL. You do **not** need to call `remote.enable()` — that API is only for promoting a local session to Mission Control. +Cloud sessions are inherently remote: once the worker connects, the session is published to `https://github.com/copilot/tasks/{sessionId}` and the runtime emits a `session.info` event with the URL. You do **not** need to call `remote.enable()`— that API is only for syncing a local session to {% data variables.product.github %}. Capture the URL by subscribing to `session.info` and filtering by `infoType: "remote"`: @@ -230,7 +230,7 @@ The `cloud.repository` object associates the cloud session with a GitHub reposit | `name` | Yes | Repository name. | | `branch` | No | Branch to use for repository context. Omit it to let the runtime choose the default branch or current repository context. | -Repository association is optional in the SDK type, but include it whenever your app knows the target repository. It helps Mission Control display the session in the right context and gives the cloud agent a clearer starting point. +Repository association is optional in the SDK type, but include it whenever your app knows the target repository. It helps the session appear with the right repository context in the agents panel and gives the cloud agent a clearer starting point. Use `branch` when the work should start from a specific branch. If your app is creating sessions from pull requests, issue triage flows, or deployment workflows, pass the branch that matches the user-visible task. @@ -269,15 +269,15 @@ In languages where SDK errors are represented differently, inspect the surfaced ## Integration ID and routing -Cloud sessions are stamped with a `Copilot-Integration-Id` header derived from the `GITHUB_COPILOT_INTEGRATION_ID` environment variable. This integration ID is used by Mission Control for routing, attribution, and integration-specific behavior. +Cloud sessions are stamped with a `Copilot-Integration-Id` header derived from the `GITHUB_COPILOT_INTEGRATION_ID` environment variable. This integration ID is used for routing, attribution, and integration-specific behavior. For multi-user server guidance and full integration ID details, see [AUTOTITLE](/copilot/how-tos/copilot-sdk/setup/multi-tenancy). -Mission Control routes SDK-created cloud sessions to the `copilot-developer-sandbox` agent slug. The name is an internal routing slug for the cloud agent and does not mean the session uses the local Windows sandbox. +SDK-created cloud sessions are routed to the `copilot-developer-sandbox` agent slug. The name is an internal routing slug for the cloud agent and does not mean the session uses the local Windows sandbox. ## Advanced: `COPILOT_MC_BASE_URL` -By default, the runtime derives the Mission Control base URL from the configured Copilot API URL. Set `COPILOT_MC_BASE_URL` only when you need to override that Mission Control endpoint. +By default, the runtime derives the agent session base URL from the configured {% data variables.product.prodname_copilot_short %} API URL. Set `COPILOT_MC_BASE_URL` only when you need to override that session endpoint. This may be required for GitHub Enterprise Server deployments. Confirm the correct value and support status with your GitHub representative before relying on it in production. @@ -290,12 +290,12 @@ COPILOT_MC_BASE_URL="https://example.com/agents" | Capability | Remote sessions | Cloud sessions | |------------|-----------------|----------------| | Execution location | Local machine or your server | GitHub-hosted compute | -| Mission Control role | Shares a local session to GitHub web/mobile | Creates and routes the hosted session | +| Session role | Shares a local session to GitHub web/mobile | Creates and routes the hosted session | | SDK option | `remote: true` on the client or session | `cloud: { ... }` on create session | | Resume path | Standard resume | Standard resume | | Windows sandbox relation | Unrelated | Unrelated | -Use remote sessions when the session should execute where the SDK runtime is already running, but also be accessible from Mission Control. Use cloud sessions when the session should execute on GitHub-hosted compute. +Use remote sessions when the session should execute where the SDK runtime is already running, but also be accessible from the agents panel on {% data variables.product.github %}. Use cloud sessions when the session should execute on GitHub-hosted compute. ## Troubleshooting @@ -305,13 +305,13 @@ Use remote sessions when the session should execute where the SDK runtime is alr | Session creates without repository context | `cloud.repository` was omitted | Pass `owner`, `name`, and optionally `branch` | | Resume ignores a new `cloud` option | `cloud` only applies to new sessions | Resume the existing session normally | | Confusion with sandbox settings | Windows sandbox and cloud sessions are separate | Do not use `SANDBOX=true` for cloud execution | -| `session.send` resolves with a `messageId` but no `assistant.*` events fire and Mission Control shows no prompt | The session.send raced ahead of `session.start` from the remote worker; the runtime swallowed the prompt | Await the first `session.start` event with `producer === "copilot-agent"` before sending. See [Sending the first prompt](#sending-the-first-prompt) | +| `session.send` resolves with a `messageId` but no `assistant.*` events fire and no prompt appears in the session log | The session.send raced ahead of `session.start` from the remote worker; the runtime swallowed the prompt | Await the first `session.start` event with `producer === "copilot-agent"` before sending. See [Sending the first prompt](#sending-the-first-prompt) | | Live UI never updates even though the cloud worker is processing | `streaming` was not set on `createSession`, so only the final `assistant.message` is emitted | Set `streaming: true` on `createSession` and re-launch | -| Cloud session works but no shareable URL appears in your UI | App never subscribed to `session.info` for the URL | Subscribe to `session.info` and filter `infoType === "remote"`. See [Accessing the Mission Control URL](#accessing-the-mission-control-url) | +| Cloud session works but no shareable URL appears in your UI | App never subscribed to `session.info` for the URL | Subscribe to `session.info` and filter `infoType === "remote"`. See [Accessing the agent session URL](#accessing-the-agent-session-url) | ## See also -* [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/remote-sessions): share locally hosted sessions through Mission Control +* [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/remote-sessions): share locally hosted sessions to the agents panel on {% data variables.product.github %} * [AUTOTITLE](/copilot/how-tos/copilot-sdk/features/streaming-events): subscribe to `assistant.*` deltas for live UI rendering * [AUTOTITLE](/copilot/how-tos/copilot-sdk/setup/multi-tenancy): integration IDs and server deployment patterns * [AUTOTITLE](/copilot/how-tos/copilot-sdk/auth): configure GitHub authentication for SDK sessions diff --git a/content/copilot/how-tos/copilot-sdk/features/remote-sessions.md b/content/copilot/how-tos/copilot-sdk/features/remote-sessions.md index e1833393c8c4..86d6c7ac76eb 100644 --- a/content/copilot/how-tos/copilot-sdk/features/remote-sessions.md +++ b/content/copilot/how-tos/copilot-sdk/features/remote-sessions.md @@ -1,11 +1,7 @@ --- title: Remote sessions shortTitle: Remote Sessions -intro: >- - Remote sessions let users access their Copilot session from GitHub web and - mobile via [Mission Control](https://github.com). When enabled, the SDK - connects each session to Mission Control, producing a URL that can be shared - as a link or QR code. +intro: 'Remote sessions sync to {% data variables.product.github %} so users can access locally running {% data variables.product.prodname_copilot_short %} sessions from the agents panel or on mobile. When enabled, the SDK produces a URL to the session log that can be shared as a link or QR code.' versions: fpt: '*' ghec: '*' diff --git a/content/copilot/how-tos/copilot-sdk/setup/multi-tenancy.md b/content/copilot/how-tos/copilot-sdk/setup/multi-tenancy.md index 89201878f19a..b2fda09f2a99 100644 --- a/content/copilot/how-tos/copilot-sdk/setup/multi-tenancy.md +++ b/content/copilot/how-tos/copilot-sdk/setup/multi-tenancy.md @@ -279,7 +279,7 @@ Use per-session tokens for content exclusion, model routing, quota checks, and u ## Integration ID -Partners building branded agents can set an integration ID for Mission Control requests. The runtime reads `GITHUB_COPILOT_INTEGRATION_ID` and stamps it as the `Copilot-Integration-Id` HTTP header on every Mission Control request. +Partners building branded agents can set an integration ID for agent session requests. The runtime reads `GITHUB_COPILOT_INTEGRATION_ID` and stamps it as the `Copilot-Integration-Id` HTTP header on every agent session request. ```bash GITHUB_COPILOT_INTEGRATION_ID=my-product-agent copilot --headless --port 4321 diff --git a/content/copilot/how-tos/troubleshoot-copilot/index.md b/content/copilot/how-tos/troubleshoot-copilot/index.md index 0db17c1bcf70..3e13084651e3 100644 --- a/content/copilot/how-tos/troubleshoot-copilot/index.md +++ b/content/copilot/how-tos/troubleshoot-copilot/index.md @@ -10,7 +10,6 @@ children: - /view-logs - /troubleshoot-firewall-settings - /troubleshoot-network-errors - - /troubleshoot-spark - /troubleshoot-copilot-slowness redirect_from: - /copilot/troubleshooting-github-copilot diff --git a/content/copilot/how-tos/troubleshoot-copilot/troubleshoot-spark.md b/content/copilot/how-tos/troubleshoot-copilot/troubleshoot-spark.md deleted file mode 100644 index e78d54caecf7..000000000000 --- a/content/copilot/how-tos/troubleshoot-copilot/troubleshoot-spark.md +++ /dev/null @@ -1,29 +0,0 @@ ---- -title: Troubleshooting common issues with GitHub Spark -intro: 'This guide describes common issues with {% data variables.product.prodname_spark_short %} and how to resolve them.' -versions: - feature: spark -shortTitle: Troubleshoot Spark -contentType: how-tos -category: - - Troubleshooting Copilot ---- - -> [!NOTE] -> {% data reusables.copilot.spark-deprecation %} - -## Error: "Live preview is interrupted. Try refreshing the page to reconnect." - -There is a known compatibility issue between Apple's Safari browser and the way {% data variables.product.prodname_spark_short %} renders its live preview. - -To resolve the issue, switch to a different browser such as Google Chrome, Microsoft Edge or Mozilla Firefox. - -## Error: "HTTP 413 status code ("Payload Too Large")" - -{% data variables.product.prodname_spark_short %} uses a key-value store for app data. The combined size of the key (the label) and payload (the actual data) must be less than 512kB. If you save data over this limit, you'll get a HTTP 413 status code ("Payload Too Large") error. - -To resolve the error, reduce the size of data you're trying to save, or split the data into smaller records. - -## App fails to build after adding an external library - -{% data variables.product.prodname_spark_short %} uses an opinionated stack (React, TypeScript) for reliability. You can add external libraries to your spark, but compatibility isn’t guaranteed and you should test additions thoroughly. For best results, you should work within {% data variables.product.prodname_spark_short %}'s SDK and core framework. diff --git a/content/copilot/reference/copilot-billing/request-based-billing-legacy/copilot-requests.md b/content/copilot/reference/copilot-billing/request-based-billing-legacy/copilot-requests.md index ccc7b894753d..b44fbe59f402 100644 --- a/content/copilot/reference/copilot-billing/request-based-billing-legacy/copilot-requests.md +++ b/content/copilot/reference/copilot-billing/request-based-billing-legacy/copilot-requests.md @@ -45,7 +45,6 @@ The following {% data variables.product.prodname_copilot_short %} features can u | [{% data variables.product.prodname_copilot_short %} code review](/copilot/how-tos/use-copilot-agents/request-a-code-review/use-code-review) | Each time {% data variables.product.prodname_copilot_short %} reviews a pull request (when assigned as a reviewer) or reviews code in your IDE, **13 premium requests** are consumed. | {% data variables.product.prodname_copilot_short %} premium requests | | [{% data variables.copilot.copilot_cloud_agent %}](/copilot/concepts/agents/cloud-agent/about-cloud-agent) | {% data variables.copilot.copilot_cloud_agent %} uses **one premium request** per session, multiplied by the model's rate. A session begins when you prompt {% data variables.product.prodname_copilot_short %} to undertake a task. In addition, each real-time steering comment made during an active session uses **one premium request** per session, multiplied by the model's rate. | {% data variables.copilot.copilot_cloud_agent %} premium requests | | [{% data variables.copilot.copilot_spaces %}](/copilot/concepts/context/spaces) | {% data variables.copilot.copilot_spaces %} uses **one premium request** per user prompt, multiplied by the model's rate. | {% data variables.product.prodname_copilot_short %} premium requests | -| [{% data variables.product.prodname_spark_short %}](/copilot/tutorials/spark/build-apps-with-spark) | Each prompt to {% data variables.product.prodname_spark_short %} uses a fixed rate of **four premium requests**. | {% data variables.product.prodname_spark_short %} premium requests | | [{% data variables.product.prodname_openai_codex %} {% data variables.product.prodname_vscode %} integration](/copilot/concepts/agents/openai-codex) | While in preview, each prompt to {% data variables.product.prodname_openai_codex %} uses **one premium request** multiplied by the model multiplier rates. | {% data variables.product.prodname_copilot_short %} premium requests | | [Third-party coding agents](/free-pro-team@latest/copilot/concepts/agents/about-third-party-coding-agents) | While in preview, each prompt to a third-party coding agent uses **one premium request**, multiplied by the model's rate. | {% data variables.product.prodname_copilot_short %} premium requests | diff --git a/content/copilot/responsible-use/agents.md b/content/copilot/responsible-use/agents.md index e75a8d5ac80f..6ccf2ca743bb 100644 --- a/content/copilot/responsible-use/agents.md +++ b/content/copilot/responsible-use/agents.md @@ -42,9 +42,6 @@ GitHub Copilot includes several agentic features that go beyond suggestion and c * **Copilot CLI**: A command-line tool that can create and modify files, execute commands, and perform multi-step tasks. All actions require explicit permission prompts and are scoped to the current directory. * **Copilot SDK**: A programmatic library that allows developers to build custom AI-powered applications using Copilot. The SDK communicates with Copilot CLI over JSON-RPC and supports custom agents, MCP server integrations, lifecycle hooks, and session management. * **{% data variables.copilot.github_copilot_app %}**: A desktop application for directing agent sessions across local repositories, git worktrees, and cloud sandboxes. The app uses {% data variables.copilot.copilot_cli %} and {% data variables.copilot.copilot_sdk %} as its foundation and adds a user interface for parallel sessions, quick chats, {% data variables.product.github %} issue and pull request workflows, automations, and canvases. -{% ifversion spark %} -* **GitHub Spark (preview)**: A managed app-building experience where an agent writes code and runs commands in a development environment. Spark provides a managed runtime and can add inference capabilities via the GitHub Models SDK. -{% endif %} These features share common principles—human oversight, review of outputs, and responsible use—but differ in their execution environments, permissions, and data flows. The sections below describe each experience in context. @@ -65,11 +62,6 @@ The following list provides a glossary of key terms related to GitHub Copilot Ag * **JSON-RPC**: The communication protocol used between the Copilot SDK and Copilot CLI. The SDK sends structured requests to the CLI process, which handles model interaction and tool execution. * **Custom agent (SDK)**: A named agent configuration within the SDK that has its own system prompt, scoped tools, and optional MCP servers. The SDK runtime can automatically delegate to sub-agents based on user intent. * **Hooks (SDK)**: Lifecycle callbacks in the Copilot SDK that let developers inject custom logic at specific points during a session, such as before or after tool use, on session start or end, and on error. -{% ifversion spark %} -* **Managed runtime**: The fully managed hosting environment provided by GitHub Spark that scales with your application's needs and eliminates the need to manually manage infrastructure. -* **Spark**: An application built using GitHub Spark. Sparks can range from simple utilities to full-stack web applications and can be deployed to the public internet with configurable visibility. -* **Targeted edit**: A feature in GitHub Spark that allows you to select a specific element within your application and provide a focused prompt to refine its style, substance, or behavior, rather than applying a global change. -{% endif %} ## 3. Key features or capabilities @@ -82,10 +74,6 @@ The key features and capabilities outlined here describe what GitHub Copilot Age * **Automated security scanning**: During code generation, the cloud agent automatically analyzes newly generated code for security vulnerabilities using CodeQL, secret scanning, and dependency analysis, and attempts to resolve any issues before they are introduced. * **External integrations**: The cloud agent can receive information and context from MCP like workIQ and Microsoft 365, and external applications like Microsoft Teams, Linear, Slack, and Jira, enabling teams to assign tasks and track progress directly within their existing workflows. * **Local agentic execution (Copilot CLI)**: Copilot CLI provides a chat-like interface in the terminal that can autonomously create and modify files, execute commands, and perform multi-step tasks. All actions are scoped to the current directory and require explicit permission prompts before the agent modifies files or runs commands. -{% ifversion spark %} -* **Natural language app building (Spark)**: GitHub Spark offers a natural language-centric development environment for creating and deploying full-stack web applications without requiring users to write or deploy code manually. Spark provides a fully managed runtime environment that scales with your application's needs. -* **Inference capabilities (Spark)**: Spark's SDK natively integrates with GitHub Models, allowing you to incorporate model inference into your application. If Spark determines that your application requires inference capabilities, it will add them using the Spark SDK. -{% endif %} ## 4. Intended uses @@ -100,10 +88,6 @@ GitHub Copilot Agents can be used in multiple scenarios across a variety of indu * **Building custom AI applications (SDK)**: The Copilot SDK enables developers to build applications that leverage Copilot for code generation, natural language interaction, and task automation in their own products and workflows. * **Multi-agent orchestration (SDK)**: Using custom agents and sub-agents, developers can build sophisticated workflows where multiple specialized agents collaborate on complex tasks, with automatic delegation based on user intent. * **Extending applications with external tools (SDK)**: The SDK's MCP server support allows developers to connect their applications to external data sources and services, expanding the range of tasks their agents can perform. -{% ifversion spark %} -* **Building and deploying web applications (Spark)**: You can use GitHub Spark to build full-stack web applications using natural language. Spark's integrated runtime environment allows you to deploy these applications to the public internet with configurable visibility based on GitHub account permissions. -* **Rapid prototyping (Spark)**: Spark helps developers, designers, product managers, and other builders rapidly prototype ideas without needing to build applications from scratch or construct complex mockups. Prototypes can be deployed for ease of sharing or remain unpublished. -{% endif %} ## 5. Models and training data @@ -117,10 +101,6 @@ Copilot CLI uses a large language model to reason about tasks, generate code, mo The Copilot SDK communicates with Copilot CLI over JSON-RPC, using the same underlying models and capabilities. Applications built with the SDK use the same models available to the authenticated Copilot user or organization. Developers can also bring their own API keys (BYOK) to use custom model providers. -{% ifversion spark %} -GitHub Spark uses a large language model to power its agent within the development environment. The agent writes code and runs commands to build your application. Spark does not test the prompts you create within your application for inference—you must ensure that your included capabilities act as intended. -{% endif %} - ## 6. Performance ### Differences by experience @@ -165,20 +145,6 @@ The Copilot SDK provides a programmatic interface to Copilot's agentic capabilit 1. **Agent execution**: The language model reasons about the task and may invoke tools, delegate to sub-agents, or connect to MCP servers. Lifecycle hooks fire at each stage, allowing the application to inject custom logic. 1. **Response streaming**: Responses are streamed back to the application, which can present them in any format appropriate for its interface. The SDK provides structured events for text, tool calls, errors, and completion signals. -{% ifversion spark %} - -#### GitHub Spark - -GitHub Spark uses an agent-based approach to build and modify applications. This process can be broken down into a number of steps: - -1. **Input processing**: Input prompts are pre-processed by Copilot, augmented with contextual information from your current Spark inputs—including code from your current application, previous prompts, and any error logs from your development environment—and sent to a large language model-powered agent within your development environment. The system is designed to generate code based on submitted prompts and is not capable of conversational interactions. English is the preferred language for prompts. -1. **Language model analysis**: The prompt is passed through a large language model, which is a neural network trained on a large body of text data. The language model analyzes the input prompt to help the agent reason about the task and leverage necessary tools. -1. **Agent execution**: The agent runs in your development environment, accepting the prompt and additional context, and decides how to update your application. The agent can write code, run commands, and read execution outputs. All actions are taken to ensure functional, accurate code. The only output from the agent is your application code. - -Spark uses frameworks and SDKs that ensure modern design and secure deployments seamlessly integrated into Spark's runtime component. The design framework is flexible and modular, enabling you to modify the theme to match your desired look and feel. Spark's runtime integration uses best practices for web deployments to ensure secure, scalable deployments. - -{% endif %} - ## 7. Limitations Understanding GitHub Copilot agentic features' limitations is crucial to determine they are used within safe and effective boundaries. While we encourage customers to leverage these features in their innovative solutions or applications, it's important to note that they were not designed for every possible scenario. We encourage users to refer to [AUTOTITLE](/free-pro-team@latest/site-policy/github-terms) as well as the following considerations when choosing a use case: @@ -200,12 +166,6 @@ Understanding GitHub Copilot agentic features' limitations is crucial to determi * **Custom agent complexity (SDK)**: Incorrectly configured custom agents, tools, or hooks may produce unexpected behavior. Developers are responsible for testing and validating the behavior of their custom agent configurations. * **MCP server trust (SDK)**: MCP servers connected through the SDK can expose tools and data from external sources. Developers must ensure that connected MCP servers are trustworthy, as malicious or misconfigured servers could introduce harmful behavior or expose sensitive data. * **BYOK model variance (SDK)**: When using bring-your-own-key configurations with third-party model providers, behavior may differ from GitHub-hosted models. Developers are responsible for evaluating the safety and quality of responses from their chosen provider. -{% ifversion spark %} -* **Interpretation of user intent (Spark)**: Spark is not always correct in its interpretation of your intent. You should always use Spark's provided preview to confirm accurate behavior within your application. -* **Limited scope (Spark)**: Spark has been trained on a large body of code and relevant applications but may struggle with complex or truly novel applications. Spark performs best on common and personal application scenarios (for example, productivity tools, learning aids, life management utilities), and when the natural language instruction is provided in English. -* **Public code matches (Spark)**: Spark may generate code that is a match or near match of publicly available code, even if the "Suggestions matching public code" policy is set to "Block." If this happens, Copilot will not provide code references pointing to the original source of the code. -* **Security limitations (Spark)**: While Spark's runtime follows best practices for application deployment, it generates code probabilistically, which can potentially introduce vulnerabilities especially if those vulnerabilities are common in the training set. You should be careful when building applications that manage personal or sensitive data and always review and test the generated application thoroughly. -{% endif %} ## 8. Evaluations @@ -290,16 +250,6 @@ In offline mode, web-based tools such as `web_fetch` and GitHub Code Search are If your model provider configuration is invalid, Copilot CLI exits with an error. It does not fall back to GitHub-hosted models. Common failures, such as connection refused, authentication errors, model not found, and timeouts, produce user-friendly messages with actionable guidance. -{% ifversion spark %} - -### GitHub Spark - -* **Content protections**: Spark has built-in protections against harmful, hateful, or offensive content. -* **Content reporting**: You can report problematic or offensive content via feedback, or report a spark as abuse or spam. Examples of offensive content should be reported to copilot-safety@github.com with the spark's URL. -* **Secure runtime**: Spark's runtime integration uses best practices for web deployments to ensure secure, scalable deployments. - -{% endif %} - ## 10. Best practices for deploying and adopting GitHub Copilot agentic features Responsible AI is a shared commitment between GitHub and its customers. While GitHub builds AI applications with safety, fairness, and transparency at the core, customers play a critical role in deploying and using these technologies responsibly within their own contexts. To support this partnership, we offer the following best practices for deployers and end users to help customers implement responsible AI effectively. @@ -326,12 +276,6 @@ Responsible AI is a shared commitment between GitHub and its customers. While Gi * **Implement safety hooks (SDK)**: Use the SDK's lifecycle hooks to implement guardrails such as content filtering, audit logging, and tool approval workflows in your applications. * **Scope sessions appropriately (SDK)**: Configure each SDK session with only the tools, agents, and permissions required for the task at hand. Avoid granting broad access when narrow scoping is sufficient. * **Review BYOK provider policies (SDK)**: If using bring-your-own-key configurations, ensure your chosen model provider's terms of service and data handling policies meet your organization's requirements. -{% ifversion spark %} -* **Keep Spark prompts specific and on topic**: The more specific you can be about the intended behaviors and interactions, the better the output. Incorporating relevant context such as specific scenarios, mockups, or specifications will help Spark understand your intent. Spark incorporates context from previous prompts, so off-topic prompts may hinder performance on subsequent revisions. -* **Use targeted edits in Spark**: Targeted edits allow you to specify elements within your application for focused refinement. Using targeted edits when possible—rather than global prompts—will result in more accurate changes and fewer side effects. -* **Verify Spark's output**: Always use Spark's provided application preview to verify that your application behaves as intended in different scenarios. If you are comfortable with code, review the generated code to ensure it meets your quality standards. -* **Ensure inference capabilities act as intended (Spark)**: If your Spark application uses inference capabilities via the GitHub Models SDK, you are responsible for testing the prompts you create to ensure they produce appropriate results. -{% endif %} ## 11. Learn more about GitHub Copilot agentic features @@ -345,12 +289,6 @@ For additional guidance on the responsible use of Copilot agentic features, we r * [AUTOTITLE](/copilot/how-tos/copilot-on-github/customize-copilot/configure-mcp-servers) * [AUTOTITLE](/copilot/concepts/agents/copilot-cli/about-copilot-cli) * [AUTOTITLE](/copilot/concepts/agents/github-copilot-app) -{% ifversion spark %} -* [AUTOTITLE](/copilot/tutorials/spark/your-first-spark) -* [AUTOTITLE](/copilot/tutorials/spark/build-apps-with-spark) -* [AUTOTITLE](/billing/concepts/product-billing/github-spark) -* [AUTOTITLE](/free-pro-team@latest/site-policy/github-terms/github-pre-release-license-terms) -{% endif %} * [AUTOTITLE](/free-pro-team@latest/site-policy/github-terms/github-terms-for-additional-products-and-features#github-copilot) * [Copilot Trust Center](https://copilot.github.trust.page/) diff --git a/content/copilot/tutorials/index.md b/content/copilot/tutorials/index.md index a4a3087273e6..2d2804addc0b 100644 --- a/content/copilot/tutorials/index.md +++ b/content/copilot/tutorials/index.md @@ -9,7 +9,6 @@ children: - /customization-library - /cloud-agent - /budgets - - /spark - /customize-code-review - /use-copilot-code-review-across-the-pull-request-lifecycle - /enhance-agent-mode-with-mcp diff --git a/content/copilot/tutorials/spark/build-apps-with-spark.md b/content/copilot/tutorials/spark/build-apps-with-spark.md deleted file mode 100644 index b2455e52b0c3..000000000000 --- a/content/copilot/tutorials/spark/build-apps-with-spark.md +++ /dev/null @@ -1,193 +0,0 @@ ---- -title: Building and deploying AI-powered apps with GitHub Spark -shortTitle: Build and deploy apps -allowTitleToDifferFromFilename: true -intro: 'Learn how to build and deploy an intelligent web app with natural language using {% data variables.product.prodname_spark %}.' -versions: - feature: spark -product: '{% data variables.copilot.copilot_pro_plus_short %}, {% data variables.copilot.copilot_enterprise_short %}' -redirect_from: - - /copilot/tutorials/building-ai-app-prototypes - - /copilot/tutorials/build-apps-with-spark -contentType: tutorials -category: - - Rapid prototyping - - Author and optimize with Copilot ---- - -> [!NOTE] -> {% data reusables.copilot.spark-deprecation %} - -## Introduction - -{% data reusables.copilot.spark-overview %} - -This tutorial will guide you through the full lifecycle of building and deploying an app with {% data variables.product.prodname_spark_short %} and exploring its features. - -> [!NOTE] -> * {% data reusables.spark.preview-note-spark %} -> * The {% data variables.product.prodname_copilot %} setting that blocks suggestions matching public code may not work as intended when using {% data variables.product.prodname_spark_short %}. See [AUTOTITLE](/copilot/how-tos/manage-your-account/manage-policies#enabling-or-disabling-suggestions-matching-public-code). - -### Prerequisites - -* A {% data variables.product.github %} account with {% data variables.copilot.copilot_pro_plus_short %}, {% data variables.copilot.copilot_max_short %}, or {% data variables.copilot.copilot_enterprise_short %} license. - -## Step 1: Create your web app - -For this tutorial, we'll create a simple marketing tool app, where: -* The user enters a description of a product they want to market. -* The app generates marketing copy, and recommends a visual strategy and target audience. - -1. Navigate to https://github.com/spark. -1. In the input field, enter a description of your app. For example: - - ```copilot copy - Build an app called "AI-Powered Marketing Assistant." - - The app should allow users to input a brief description of a product or service. When the user submits their brief, send this information to a generative AI model with a prompt that asks the AI to return the following: - - Persuasive and engaging marketing copy for the product or service. - - A visual strategy for how to present the product/service (e.g., suggested imagery, colors, design motifs, or mood). - - A recommendation for the ideal target audience. - The app should display these three elements clearly and in an organized manner. The app should look modern, fresh and engaging. - ``` - - > [!TIP] - > * Be specific, and provide as many details as possible for the best results. You can ask [{% data variables.copilot.copilot_chat_short %}](https://github.com/copilot?ref_product=copilot&ref_type=engagement&ref_style=text) to refine or suggest improvements to your initial prompt. - > * Alternatively, drop a markdown document into the input field to provide {% data variables.product.prodname_spark_short %} with more context on what you're hoping to build. - -1. Optionally, upload an image to provide {% data variables.product.prodname_spark_short %} with a visual reference for your app. Mocks, sketches, or screenshots all work to provide {% data variables.product.prodname_spark_short %} with an idea of what you want to build. -1. Click **{% octicon "paper-airplane" aria-label="Submit prompt" %}** to build your app. - - > [!NOTE] - > {% data variables.product.prodname_spark_short %} will always generate a Typescript and React app. - -## Step 2: Refine and expand your app - -Once {% data variables.product.prodname_spark_short %} is done generating your app, you can test it out in the live preview window. From here, you can iterate on and expand your app using natural language, visual editing controls, or code. - -1. To make changes to your app using **natural language**, under the "Iterate" tab in the left sidebar, enter your instructions in the main input field, then submit. -1. Optionally, click one of the "Suggestions" directly above the input field in the "Iterate" tab to develop your app. -1. {% data variables.product.prodname_spark_short %} automatically alerts you to detected errors. To fix the errors, click **Fix All** above the input field in the "Iterate" tab. -1. Optionally, click **{% octicon "code" aria-hidden="true" aria-label="code" %} Code** to view and edit the underlying code. The code editing panel has {% data variables.product.prodname_copilot_short %} inline suggestions built in. -1. To make targeted changes to a specific element of your app click the **target icon** in the top right corner then hover over and select an element in the live preview pane. - -## Step 3: Customize the styling of your app - -Next, let's change the styling of your app using {% data variables.product.prodname_spark_short %}'s built-in tools. Alternatively, you can edit the code directly. - -1. Change your app's overall appearance: - * Click the **Theme** tab to adjust typography, colors, border radius, spacing, and other visual elements. - * Choose from pre-generated themes to easily update the overall style your app. -1. To target visual edits at a specific component, click the **target icon**, then select an element of the app in the preview pane. Styling controls related to that specific element will show up in the left sidebar. -1. Optionally, edit styles in code: - * Click **{% octicon "code" aria-label="Code" %}** to open the code editor. - * Modify CSS, Tailwind CSS, or custom variables for fine-grained control (e.g., padding, spacing, fonts, colors). - - > [!TIP] - > You can import custom fonts (like Google Fonts) or add advanced styles directly in the Spark code editor. - > Ask [{% data variables.copilot.copilot_chat_short %}](https://github.com/copilot?ref_product=copilot&ref_type=engagement&ref_style=text) for step-by-step guidance if you're not familiar with styling syntax. - -1. Click the **Assets** tab to upload assets you want to surface in your app. - * Add images, logos, videos, documents or other assets to personalize your app. - * Once uploaded, instruct {% data variables.product.prodname_spark_short %} on how you'd like to incorporate those assets into your app in the "Iterate" tab. - -## Step 4: Store and manage data - -If {% data variables.product.prodname_spark_short %} detects the need to store data in your app, it will automatically set up data storage for you using a key-value store. - -For our marketing app, let's add data storage so that users can save their favorite pieces of marketing copy and easily access them again later: - -1. Use the following instruction in the "Iterate" tab to guide {% data variables.product.prodname_spark_short %}: - - ```copilot copy - Add a "Favorites" page where users can save and view their favorite marketing copy results. - ``` - -1. Interact with the app once it's done generating to test saving and retrieving favorites. -1. Check the "Data" tab to view and edit the stored values. -1. If you explicitly **don't** want {% data variables.product.prodname_spark_short %} to save data, ask {% data variables.product.prodname_spark_short %} to "store data locally" or "don't persist data". - -## Step 5: Refine AI capabilities - -Next, let's iterate on the AI capabilities included in our app, which are powered by {% data variables.product.prodname_github_models %}. - -{% data variables.product.prodname_spark_short %} automatically detects when AI is needed for features in your app. It will auto-generate the prompts for each AI feature, integrate with the best-fit models, and manage API integration and LLM inference on your behalf. - -1. Click the **Prompts** tab. -1. Review the prompts {% data variables.product.prodname_spark_short %} generated to power each of the AI features used in your app. - * In the case of our marketing app there are three separate prompts {% data variables.product.prodname_spark_short %} has generated for us (marketing copy generation, visual strategy recommendation, and target audience recommendation). -1. Click on each prompt to view and edit without needing to go into the code. Make adjustments to better fit your use case. -1. Test the app to see updated results. - -## Step 6: Edit and debug with code and {% data variables.product.prodname_copilot_short %} - -You can view or edit your app’s code directly in {% data variables.product.prodname_spark_short %} or via a synced {% data variables.product.github %} codespace. - -> [!NOTE] -> * {% data variables.product.prodname_spark_short %} uses an opinionated stack (**React**, **TypeScript**) for reliability. -> * For best results, you should **work within {% data variables.product.prodname_spark_short %}'s SDK** and core framework. -> * You can **add external libraries**, but compatibility isn’t guaranteed — you should test thoroughly. -> * Directly editing the React code **lets you add model context**, as long as you follow valid syntax and {% data variables.product.prodname_spark_short %}'s framework. - -1. To edit code in {% data variables.product.prodname_spark_short %}: - * Click **{% octicon "code" aria-hidden="true" aria-label="Code" %} Code**. - * Navigate the file tree and make any edits, with access to Copilot inline suggestions in the editor. Changes are reflected instantly in the live preview window. -1. To make more advanced edits: - * In the top right corner, click **{% octicon "kebab-horizontal" aria-label="More actions" %}**, then click **{% octicon "codespaces" aria-label=“Open codespace” %} Open codespace** (a full-featured cloud IDE) to launch a codespace in a new browser tab. - * Once inside the codespace, click **{% octicon "copilot" aria-hidden="true" aria-label="copilot" %}** to open {% data variables.product.prodname_copilot_short %} to make more advanced changes. - * In the prompt box, select **Agent** mode to enable {% data variables.product.prodname_copilot_short %} to autonomously build, review, and troubleshoot your code. - * Select **Edit** mode for {% data variables.product.prodname_copilot_short %} to review your app's code and suggest improvements and fixes. - * Choose **Ask** mode for {% data variables.product.prodname_copilot_short %} to explain and help you understand the code or any errors you see in {% data variables.product.prodname_spark_short %}. - * Changes you make in the codespace are automatically synced to {% data variables.product.prodname_spark_short %}. - -## Step 7: Deploy and share your app - -{% data variables.product.prodname_spark_short %} comes with a fully integrated runtime environment that allows you to deploy your app in one click. - -> [!NOTE] -> * When you deploy your spark, if you choose to make it visible to other users, note that the data in your app is **shared across all users** who can access your app. Make sure no sensitive data is included in your spark prior to updating visibility settings. -> * You can also choose to share your spark as **read-only** so that other users can view your app's content, but they cannot edit content, delete files or records, or create new items. - -1. In the top right corner, click **Publish**. -1. By default, your spark will be private and only accessible to you. Under "Visibility", choose whether you want your spark to remain private, or make it available to members of a specific organization on {% data variables.product.github %}, or all {% data variables.product.github %} users. - - ![Screenshot of the {% data variables.product.prodname_spark %} publication menu. The "All {% data variables.product.github %} users" visibility option is outlined in orange.](/assets/images/help/copilot/spark-github-user-visibility.png) - -1. Under "Data Access", choose whether you want to give other users read-only or write access to your app. - - Choose **read-only** to let others view your app, without allowing them to create, edit or delete content. - - For example, if you've created a family calendar app and you want users to view the app but you don't want them to be able to create, edit or delete events, choose **read-only** so users can't modify your spark's data store. - -1. Click **Visit site** to be taken to your live, deployed app. Copy your site's URL to share with others. - - When you publish your app, {% data variables.product.prodname_spark_short %} automatically includes cloud-based storage and LLM inference for your application to use as part of the integrated runtime. - - The URL for your spark is generated based on the name of your spark. You can edit the name of your app and {% data variables.product.prodname_spark_short %} will automatically manage re-routing of old URLs to your latest URL. - -## Step 8: Invite collaborators with a repository - -Now that you have a functional, deployed app, you can continue to build and collaborate on your app in the same way you would with any other {% data variables.product.github %} project, by creating and linking a {% data variables.product.github %} repository to your spark. - -1. In the top right corner, click **{% octicon "kebab-horizontal" aria-label="More actions" %}**, then click **{% octicon "repo-push" aria-hidden="true" aria-label="repo-push" %} Create repository**. -1. In dialog box that opens, click **Create**. - -A new, private repository is created under your personal account on {% data variables.product.github %}, with the name of the repository based on the name of your spark. - -Any changes made to your spark prior to repository creation will be added to your repository so you have a full record of all changes and commits made to your spark since its creation. - -There's a two-way sync between your spark and the repository, so changes made in either {% data variables.product.prodname_spark_short %} or the main branch of your repository are automatically reflected in both places. - -You can also create issues in your repository and assign them to {% data variables.copilot.copilot_cloud_agent %} so it can draft pull requests for fixes and improvements. - -## Next steps - -Explore more ideas you can build with {% data variables.product.prodname_spark_short %}: -* **Prototype new ideas quickly**: if you have a specific idea for a feature or app, upload a mockup, sketch, screenshot, or even paste a markdown documentation into {% data variables.product.prodname_spark_short %} and ask {% data variables.product.prodname_spark_short %} to build out your idea. -* **Build internal tools for yourself and your team**: If you have a common workflow or process that currently sits in a document or spreadsheet, explain your workflow or process to {% data variables.product.prodname_spark_short %} and {% data variables.product.prodname_spark_short %} can turn it into an interactive web app. - -## Further reading - -* [AUTOTITLE](/copilot/responsible-use/agents) -* [AUTOTITLE](/billing/concepts/product-billing/github-spark) -* [AUTOTITLE](/free-pro-team@latest/site-policy/github-terms/github-pre-release-license-terms) diff --git a/content/copilot/tutorials/spark/deploy-from-cli.md b/content/copilot/tutorials/spark/deploy-from-cli.md deleted file mode 100644 index af19f519f4de..000000000000 --- a/content/copilot/tutorials/spark/deploy-from-cli.md +++ /dev/null @@ -1,74 +0,0 @@ ---- -title: Deploy your Spark app from the command line -shortTitle: Deploy from CLI -intro: 'Learn how to deploy your {% data variables.product.prodname_spark_short %} app from the command line.' -allowTitleToDifferFromFilename: true -versions: - feature: spark -product: '{% data variables.copilot.copilot_pro_plus_short %}, {% data variables.copilot.copilot_enterprise_short %}' -category: - - Rapid prototyping - - Author and optimize with Copilot -contentType: tutorials ---- - -## Introduction - -> [!NOTE] -> {% data reusables.copilot.spark-deprecation %} - -If you’re developing your spark further in a {% data variables.product.github %} codespace, you can deploy it directly from the command line using the {% data variables.product.prodname_spark_short %} CLI, an extension of the {% data variables.product.prodname_cli %}. - -### Prerequisites - -* **Access to {% data variables.product.prodname_copilot %}**. You need a {% data variables.copilot.copilot_pro_plus_short %}, {% data variables.copilot.copilot_max_short %}, or {% data variables.copilot.copilot_enterprise_short %} license to use {% data variables.product.prodname_spark_short %}. See [AUTOTITLE](/copilot/get-started/what-is-github-copilot#get-access). -* You must have **built a {% data variables.product.prodname_spark_short %} app** (a "spark"). To start building, navigate to [{% data variables.product.prodname_spark_short %}](https://github.com/spark). -* You have **created a repository** for your spark on {% data variables.product.github %}. For instructions, see [AUTOTITLE](/copilot/tutorials/spark/build-apps-with-spark#step-8-invite-collaborators-with-a-repository). - -## Open your spark in a codespace - -The {% data variables.product.prodname_spark_short %} CLI currently only works within a {% data variables.product.github %} codespace. - -1. Navigate to the main page of your spark's repository on {% data variables.product.github %}. -1. Click the **{% octicon "code" aria-hidden="true" aria-label="code" %} Code** button, then click the **Codespaces** tab. -1. Click **{% octicon "plus" aria-label="Create a codespace on main" %}** to create a codespace. The codespace opens in a new browser tab. - -## Install the {% data variables.product.prodname_spark_short %} CLI - -1. In the terminal in your codespace, run the following command to install the {% data variables.product.prodname_spark_short %} CLI: - - ```bash copy - gh extensions install github/gh-runtime-cli - ``` - -1. Once the installation is complete, to verify that the {% data variables.product.prodname_spark_short %} CLI is installed, run: - - ```bash copy - gh runtime-cli version - ``` - -## Build your spark - -1. In the terminal in your codespace, run the following command to install the latest version of the {% data variables.product.prodname_spark_short %} SDK: - - ```bash copy - npm install @github/spark@latest - ``` - -1. Next, run the following command to compile your {% data variables.product.prodname_spark_short %} app. - - ```bash copy - npm run build - ``` - -## Deploy your spark - -1. To deploy your {% data variables.product.prodname_spark_short %} app, run: - - ```bash copy - gh runtime-cli deploy --dir ./dist - ``` - -## Troubleshooting - -If you're being asked to supply the `--app` parameter when deploying your spark, update to the latest version of the {% data variables.product.prodname_spark_short %} SDK by following step 1 in [Build your spark](#build-your-spark). diff --git a/content/copilot/tutorials/spark/index.md b/content/copilot/tutorials/spark/index.md deleted file mode 100644 index b0940c2345ab..000000000000 --- a/content/copilot/tutorials/spark/index.md +++ /dev/null @@ -1,13 +0,0 @@ ---- -title: Building apps with GitHub Spark -shortTitle: Spark -intro: 'Learn how to build and deploy an app using natural language with GitHub Spark.' -versions: - feature: spark -children: - - /your-first-spark - - /prompt-tips - - /build-apps-with-spark - - /deploy-from-cli -contentType: tutorials ---- \ No newline at end of file diff --git a/content/copilot/tutorials/spark/prompt-tips.md b/content/copilot/tutorials/spark/prompt-tips.md deleted file mode 100644 index d9998b550f12..000000000000 --- a/content/copilot/tutorials/spark/prompt-tips.md +++ /dev/null @@ -1,87 +0,0 @@ ---- -title: Write effective prompts and provide useful context for Spark -shortTitle: Prompt tips -intro: 'Learn how to get the best results when you are describing your app idea to {% data variables.product.prodname_spark_short %}.' -allowTitleToDifferFromFilename: true -versions: - feature: spark -product: 'Anyone with a {% data variables.copilot.copilot_pro_plus_short %}, or {% data variables.copilot.copilot_enterprise_short %} license can use {% data variables.product.prodname_spark_short %}.' -contentType: tutorials -category: - - Rapid prototyping - - Learn about Copilot - - Author and optimize with Copilot ---- - -> [!NOTE] -> {% data reusables.copilot.spark-deprecation %} - -## Introduction - -{% data variables.product.prodname_spark_short %} can build a publishable web app from a single natural language prompt. - -There are a couple of ways to improve the prompt and context you send to {% data variables.product.prodname_spark_short %}, to help {% data variables.product.prodname_spark_short %} most effectively turn your app idea into reality. - -To start building with {% data variables.product.prodname_spark_short %}, go to https://github.com/spark. - -## Pair with {% data variables.product.prodname_copilot_short %} to fine-tune your initial {% data variables.product.prodname_spark_short %} prompt - -By providing {% data variables.product.prodname_copilot_short %} with some context and instruction, {% data variables.product.prodname_copilot_short %} can help you refine your initial prompt to {% data variables.product.prodname_spark_short %} so that it best communicates your requirements. - -1. Open [{% data variables.copilot.copilot_chat_short %}](https://github.com/copilot?ref_product=copilot&ref_type=engagement&ref_style=text). -1. Send the following prompt to {% data variables.product.prodname_copilot_short %}, editing the wording to align with your own app idea. - - ```copilot copy - I have a no-code app builder that can build an entire app through a single prompt. It's called GitHub Spark. Let's work together to build a Spark prompt. - - The prompt should focus on adequately describing the features and requirements so I can get an great app that [DESCRIBE APP IDEA]. - - Do not include in the prompt where to place files in the project directory, explain coding standards, tell the agent how to code a feature, or request a README. - - The prompt should use vibrant and specific language to describe the app idea. - - The final prompt should allow the app to be extensible and easily iterated on. - - Ask follow up questions if necessary. - ``` - -1. In a new browser tab, open [{% data variables.product.prodname_spark_short %}](https://github.com/spark). -1. Paste {% data variables.product.prodname_copilot_short %}'s output into {% data variables.product.prodname_spark_short %}'s input field to generate your spark. - -## Upload a markdown document - -To include very detailed requirements in your prompt to {% data variables.product.prodname_spark_short %}, you can drag and drop a markdown file, such as a `README.md`, into {% data variables.product.prodname_spark_short %}'s input field, and then use the following example prompt. - -### Example prompt - -```copilot copy -Build a production-ready app inspired by the requirements outlined in this markdown file. - -Carefully interpret the features, user flows, and design details described, and transform them into a visually engaging, intuitive, and responsive application. - -Prioritize usability, accessibility, and seamless user experience throughout. -``` - -## Upload a sketch or image - -You can sketch out your app idea using a digital tool or by hand. Then, take a photo or screenshot of your design and attach the image into {% data variables.product.prodname_spark_short %}'s input field, together with the following example prompt. - -### Example prompt - -```copilot copy -Build a production-ready app inspired by the attached image. - -Interpret the visual design, layout, and any details shown in the image to create a vibrant, intuitive, and user-friendly experience. - -Prioritize usability, accessibility, and seamless user experience throughout. -``` - -## Be specific with styling requirements - -With {% data variables.product.prodname_spark_short %}, you can reference specific design styles, such as glassmorphic, minimalist, retro, playful. You can also provide details on font styles, color palettes or animation effects, and {% data variables.product.prodname_spark_short %} can create an interface that matches your vision. - -### Example prompt - -```copilot copy -Design my task management app with a glassmorphic style. Use modern, rounded sans-serif fonts for a sleek, contemporary look, and add gentle animations when tasks are completed. -``` diff --git a/content/copilot/tutorials/spark/your-first-spark.md b/content/copilot/tutorials/spark/your-first-spark.md deleted file mode 100644 index 5c5144bf9660..000000000000 --- a/content/copilot/tutorials/spark/your-first-spark.md +++ /dev/null @@ -1,97 +0,0 @@ ---- -title: Your first spark -shortTitle: Your first spark -intro: 'Learn how to build your first {% data variables.product.prodname_spark %} app in minutes, without writing any code.' -versions: - feature: spark -product: 'Anyone with a {% data variables.copilot.copilot_pro_plus_short %} or {% data variables.copilot.copilot_enterprise_short %} license can use {% data variables.product.prodname_spark_short %}.' -redirect_from: - - /copilot/tutorials/building-your-first-app-in-minutes-with-github-spark - - /copilot/tutorials/spark/easy-apps-with-spark -contentType: tutorials -category: - - Rapid prototyping - - Author and optimize with Copilot ---- - -Have you ever had a great idea for an app, but you didn't have the tools to build it? With the help of AI, you can now bring your app ideas to life in minutes using only natural language. In this article, we'll use {% data variables.product.prodname_spark %} to build, improve, and share a word search app without writing a single line of code ourselves. - -> [!NOTE] -> {% data reusables.copilot.spark-deprecation %} - - -## Creating a prototype of your app - -> [!NOTE] -> {% data reusables.spark.preview-note-spark %} - -Let's start by generating an initial, basic version of our app that we can build on later. - -1. Navigate to https://github.com/spark. -1. Send the following prompt to generate the first iteration of your app: - - ```copilot copy - Please create a word search game. The game should take in a set of words from the user, then create a word search puzzle containing those words, as well as a word bank listing the words. Words in the puzzle can be horizontal, vertical, diagonal, forwards, and backwards, and are "found" when the user clicks and drags their mouse across them. Once all words are found, give the user the option to create a new puzzle. - ``` - -1. Watch as {% data variables.product.prodname_spark_short %} builds your app in real time! You'll know the app is done generating when the preview appears. -1. To test your app, create and solve a puzzle using the preview. - -## Improving your app - -Just like that, we have a working app! However, it still needs some tweaks. Let's give {% data variables.product.prodname_spark_short %} some additional prompts to polish our project. - -1. At the left side of the page, in the **Iterate** tab, send the following prompt: - - ```copilot copy - Please add a leaderboard and a timer to the game. The timer should start when the user generates a new puzzle, then stop when all words are found. The user should then be able to enter their name, and their name, time, and the number of words in their puzzle should be displayed on the leaderboard. The leaderboard should be sortable in ascending and descending order by each of the three categories. - ``` - -1. Once the app is updated, create and solve another puzzle to see the new features in action. -1. Get creative and make your own improvements to the app! If you're feeling stuck, pick one of the suggestions {% data variables.product.prodname_spark_short %} provides above the prompt text box. You can also make changes using the visual editing controls in the "Theme", "Data", and "Prompts" tabs, without ever having to touch code. - -## Debugging your app - -While you're building your app, you may encounter some errors. Often, {% data variables.product.prodname_spark_short %} will identify these issues and list them in an "Errors" pop up above the prompt text box. To fix the errors, click **Fix all**. - -![Screenshot of errors identified by {% data variables.product.prodname_spark %}. The "Fix all" button is outlined in orange.](/assets/images/help/copilot/spark-fix-all-errors.png) - -If you find an error that {% data variables.product.prodname_spark_short %} itself didn't flag, write a prompt to fix it. For best results, provide a detailed description of the error, as well as the ideal fixed state. For example, if you notice that adding words over a certain number of characters causes the puzzle to render incorrectly, send the following prompt: - -```copilot copy -Please prevent users from entering words longer than the number of rows or columns in the puzzle. Additionally, add an option to change the size of a puzzle. If the user tries to enter a word that's longer than the current size of the puzzle, display an error message telling them that provided words must be less than or equal to the size of the puzzle. -``` - -## Sharing your app - -Now that you're happy with your app, let's publish it so you can share it with others. You can also choose to share your spark as **read-only** so that other users can view your app's content, but they cannot edit content, delete files or records, or create new items. - -> [!NOTE] -> * If you make your spark accessible to all {% data variables.product.github %} users, all users will be able to access and edit the data stored in your spark. Make sure to delete any private or sensitive data from your app prior to making it visible to other users. **This option is not available for {% data variables.enterprise.prodname_managed_users %}** - -1. In the top-right corner of the page, click **Publish**. -1. By default, your spark is published as private and only accessible to you. To let other {% data variables.product.github %} users access your app, in the **Visibility** section of the publish dropdown, choose **Organization** to make your spark accessible to all members of your selected organization, or {% octicon "id-badge" aria-hidden="true" aria-label="id-badge" %} **All {% data variables.product.github %} users**. This allows anyone with a {% data variables.product.github %} account to access your spark. - - ![Screenshot of the {% data variables.product.prodname_spark %} publication menu. The "All {% data variables.product.github %} users" visibility option is outlined in orange.](/assets/images/help/copilot/spark-github-user-visibility.png) - -1. If you make your spark visible to other users (i.e. any setting besides private), a "Data Access" option appears in the publication dropdown. This gives you the option to control who has access to edit the content and data in your spark. - - ![Screenshot of the {% data variables.product.prodname_spark %} publication menu. The "Data Access" visibility option is outlined in orange.](/assets/images/help/copilot/spark-data-access.png) - - Choose **{% octicon "eye" aria-hidden="true" aria-label="eye" %} Read-Only** to let others view your app, without allowing them to create, edit or delete content or data. Choose **{% octicon "pencil" aria-hidden="true" aria-label="pencil" %} Write Access** to allow users to both edit and view content and data in your spark. - - For example, if you've created a family calendar app and you want to showcase the app, but you don't want users to be able to create, edit or delete events in the calendar yet, choose "Read-Only". - -1. Click **View site** {% octicon "link-external" aria-hidden="true" aria-label="link-external" %} to see your deployed app, then copy and share your app's URL. - -## Next steps - -We just created a word search app, but {% data variables.product.prodname_spark_short %} can make all kinds of web apps! Try [creating a new app](https://github.com/spark) on your own. If you need some inspiration, here are a few ideas to get you started: - -* Try building a **news aggregator app** or an **intelligent recipe generator**. -* Build a **budget tracker** that lets you set a budget, takes in a list of expenses, and displays your total remaining budget. You can give each expense a category and date, then sort the expenses by the many different categories. - -## Further reading - -* [AUTOTITLE](/copilot/responsible-use/agents) -* [AUTOTITLE](/billing/concepts/product-billing/github-spark) diff --git a/content/copilot/tutorials/vibe-coding.md b/content/copilot/tutorials/vibe-coding.md index 86ba18cef3c7..cae2598dc4c5 100644 --- a/content/copilot/tutorials/vibe-coding.md +++ b/content/copilot/tutorials/vibe-coding.md @@ -413,4 +413,3 @@ After working with {% data variables.product.prodname_copilot_short %} to build, * Continue iterating on this project, making improvements to your time tracker. * Using the same methodology, create another application. -* Find out about another way you can create applications without writing the code yourself. See [AUTOTITLE](/copilot/concepts/spark). diff --git a/data/reusables/copilot/spark-business-intro.md b/data/reusables/copilot/spark-business-intro.md deleted file mode 100644 index ddfd5aec3360..000000000000 --- a/data/reusables/copilot/spark-business-intro.md +++ /dev/null @@ -1 +0,0 @@ -{% data variables.product.prodname_spark %} allows users to build applications using natural-language prompts, then share the apps with teammates or deploy them to production. diff --git a/data/reusables/copilot/spark-data-res.md b/data/reusables/copilot/spark-data-res.md deleted file mode 100644 index 1ca5b4b5b3d3..000000000000 --- a/data/reusables/copilot/spark-data-res.md +++ /dev/null @@ -1 +0,0 @@ -{% data variables.product.prodname_spark %} is not currently available for enterprises that use {% data variables.enterprise.data_residency %}. diff --git a/data/reusables/copilot/spark-overview.md b/data/reusables/copilot/spark-overview.md deleted file mode 100644 index 002c25732dd4..000000000000 --- a/data/reusables/copilot/spark-overview.md +++ /dev/null @@ -1,3 +0,0 @@ -With {% data variables.product.prodname_spark %}, you can describe what you want in natural language and get a fullstack web app with data storage, AI features, and {% data variables.product.github %} authentication built in. You can iterate using prompts, visual tools, or code, and then deploy with a click to a fully managed runtime. - -{% data variables.product.prodname_spark_short %} is seamlessly integrated with {% data variables.product.github %} so you can develop your spark via a synced {% data variables.product.github %} codespace with {% data variables.product.prodname_copilot_short %} for advanced editing. You can also create a repository for team collaboration, and leverage {% data variables.product.github %}'s ecosystem of tools and integrations. diff --git a/data/reusables/spark/preview-note-spark.md b/data/reusables/spark/preview-note-spark.md deleted file mode 100644 index 9a3d634dcb75..000000000000 --- a/data/reusables/spark/preview-note-spark.md +++ /dev/null @@ -1 +0,0 @@ -{% data variables.product.prodname_spark %} is in {% data variables.release-phases.public_preview_dpa %} and subject to change. diff --git a/src/audit-logs/data/fpt/organization.json b/src/audit-logs/data/fpt/organization.json index 8954bcd35ce4..fad1c30d62e3 100644 --- a/src/audit-logs/data/fpt/organization.json +++ b/src/audit-logs/data/fpt/organization.json @@ -481,6 +481,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/fpt/user.json b/src/audit-logs/data/fpt/user.json index e242ab862569..c4b66f719bf9 100644 --- a/src/audit-logs/data/fpt/user.json +++ b/src/audit-logs/data/fpt/user.json @@ -363,6 +363,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghec/enterprise.json b/src/audit-logs/data/ghec/enterprise.json index c1195af6c23e..4a0d5deadb70 100644 --- a/src/audit-logs/data/ghec/enterprise.json +++ b/src/audit-logs/data/ghec/enterprise.json @@ -682,6 +682,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghec/organization.json b/src/audit-logs/data/ghec/organization.json index 8954bcd35ce4..fad1c30d62e3 100644 --- a/src/audit-logs/data/ghec/organization.json +++ b/src/audit-logs/data/ghec/organization.json @@ -481,6 +481,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghec/user.json b/src/audit-logs/data/ghec/user.json index e242ab862569..c4b66f719bf9 100644 --- a/src/audit-logs/data/ghec/user.json +++ b/src/audit-logs/data/ghec/user.json @@ -363,6 +363,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.19/enterprise.json b/src/audit-logs/data/ghes-3.19/enterprise.json index 4157760e0c34..d521c4bac40d 100644 --- a/src/audit-logs/data/ghes-3.19/enterprise.json +++ b/src/audit-logs/data/ghes-3.19/enterprise.json @@ -564,6 +564,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.19/organization.json b/src/audit-logs/data/ghes-3.19/organization.json index 6bfa45b70d5f..9e0dfb21a1ad 100644 --- a/src/audit-logs/data/ghes-3.19/organization.json +++ b/src/audit-logs/data/ghes-3.19/organization.json @@ -481,6 +481,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.19/user.json b/src/audit-logs/data/ghes-3.19/user.json index b15ad6d3688f..4b408ede09e3 100644 --- a/src/audit-logs/data/ghes-3.19/user.json +++ b/src/audit-logs/data/ghes-3.19/user.json @@ -363,6 +363,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.20/enterprise.json b/src/audit-logs/data/ghes-3.20/enterprise.json index 6f1c1907cdc7..41141e7d2b85 100644 --- a/src/audit-logs/data/ghes-3.20/enterprise.json +++ b/src/audit-logs/data/ghes-3.20/enterprise.json @@ -564,6 +564,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.20/organization.json b/src/audit-logs/data/ghes-3.20/organization.json index daab4e59a052..dbd370519e0b 100644 --- a/src/audit-logs/data/ghes-3.20/organization.json +++ b/src/audit-logs/data/ghes-3.20/organization.json @@ -481,6 +481,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.20/user.json b/src/audit-logs/data/ghes-3.20/user.json index c13bfc256f30..54d72dab2725 100644 --- a/src/audit-logs/data/ghes-3.20/user.json +++ b/src/audit-logs/data/ghes-3.20/user.json @@ -363,6 +363,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.21/enterprise.json b/src/audit-logs/data/ghes-3.21/enterprise.json index da27937507d2..d4c5d9e56406 100644 --- a/src/audit-logs/data/ghes-3.21/enterprise.json +++ b/src/audit-logs/data/ghes-3.21/enterprise.json @@ -564,6 +564,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.21/organization.json b/src/audit-logs/data/ghes-3.21/organization.json index 9c468fe60b4d..0d70e6106f08 100644 --- a/src/audit-logs/data/ghes-3.21/organization.json +++ b/src/audit-logs/data/ghes-3.21/organization.json @@ -481,6 +481,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.21/user.json b/src/audit-logs/data/ghes-3.21/user.json index 76f8e371d544..66b82f3add73 100644 --- a/src/audit-logs/data/ghes-3.21/user.json +++ b/src/audit-logs/data/ghes-3.21/user.json @@ -363,6 +363,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.22/enterprise.json b/src/audit-logs/data/ghes-3.22/enterprise.json index 28905a9fbc3d..da5bf87de046 100644 --- a/src/audit-logs/data/ghes-3.22/enterprise.json +++ b/src/audit-logs/data/ghes-3.22/enterprise.json @@ -598,6 +598,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.22/organization.json b/src/audit-logs/data/ghes-3.22/organization.json index 9a6d1a36abde..37b5038161d1 100644 --- a/src/audit-logs/data/ghes-3.22/organization.json +++ b/src/audit-logs/data/ghes-3.22/organization.json @@ -515,6 +515,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/ghes-3.22/user.json b/src/audit-logs/data/ghes-3.22/user.json index 86a9df3c70f2..1ebf20afcb1d 100644 --- a/src/audit-logs/data/ghes-3.22/user.json +++ b/src/audit-logs/data/ghes-3.22/user.json @@ -397,6 +397,7 @@ "oauth_application_id", "old_alert_enabled", "old_budget_limit_type", + "old_expires_at", "old_pricing_target_id", "old_pricing_target_type", "old_target_amount", diff --git a/src/audit-logs/data/shared/fields-pool.json b/src/audit-logs/data/shared/fields-pool.json index d1ec5c6db8be..3b674d198961 100644 --- a/src/audit-logs/data/shared/fields-pool.json +++ b/src/audit-logs/data/shared/fields-pool.json @@ -1 +1 @@ -[["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actions_cache_id","actions_cache_key","actions_cache_scope","actions_cache_version","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","alert_recipient_user_ids","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_type","user_programmatic_access_name","uuid"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","old_alert_enabled","old_budget_limit_type","old_pricing_target_id","old_pricing_target_type","old_target_amount","old_target_id","old_target_type","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","resource_id","resource_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","dismissal_approver_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","dismissal_request_id","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","origin_repository"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enablement","operation_type","organization_names"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","plan","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_settings","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","excluded_paths","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","custom_instructions","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_plan","operation_type","owner","owner_type","plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_plan","operation_type","owner","owner_type","scheduled_plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_config","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_access","oauth_application_id","old_access","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","user_programmatic_access_name","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","oauth_application_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","old_value_type","operation_type","property_name","required","user_programmatic_access_name","values_editable_by","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","public_repo","user_programmatic_access_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","definition_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","access_level","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","old_message","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","approvers","approvers_was","can_admins_bypass","environment_id","environment_name","new_value","old_value","prevent_self_review"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","external_id","repository_public","transport_protocol","transport_protocol_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","active_was","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","events_were","hook_id","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic","trigger_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_added","repositories_added_names","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_removed","repositories_removed_names","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","reason","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","requester","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","manager","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","requester","requester_id","transfer_from","transfer_from_id","transfer_from_type","transfer_to","transfer_to_id","transfer_to_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","integration","ip_allow_list_entry","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","pull_request_id","pull_request_title","pull_request_url","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","old_color","old_description","old_enabled","old_issue_type_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","assignment_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","check_response_timeout_minutes","created_at","max_entries_to_build","max_entries_to_merge","merge_method","merging_strategy","min_entries_to_merge","min_entries_to_merge_wait_minutes","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitation_id","oauth_application_id","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","permission","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","query_phrase"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end","operation_type","start"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","initiated_from","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","invitee_email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enablement","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitation_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","manager","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","push_protection_setting","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end_date","filename","operation_type","query","requested_at","start_date"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","filename","operation_type","query","requested_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_id","runner_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","runner_group_name","runner_id","runner_name","source_version","target_version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","from_business","operation_type","to_business"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","old_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_permission","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","oauth_application_id","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","organization_role_id","organization_role_name","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain","operation_type","owner","owner_type","state"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","exempt_administrators","old_token_expiration","operation_type","token_expiration"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_token_expiration","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","owner","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type","project_id","project_number","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","collaborator","collaborator_type","created_at","old_project_role","operation_type","project_id","project_name","project_role","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","created_at","name","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","allow_deletions_enforcement_level","allow_force_pushes_enforcement_level","authorized_actor_names","created_at","create_protected","dismiss_stale_reviews_on_push","enforcement_level","ignore_approvals_from_contributors","linear_history_requirement_enforcement_level","lock_allows_fetch_and_merge","lock_branch_enforcement_level","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","required_approving_review_count","required_deployments_enforcement_level","required_review_thread_resolution_enforcement_level","required_status_checks_enforcement_level","require_code_owner_review","require_last_push_approval","signature_requirement_enforcement_level","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","dismiss_stale_reviews_on_push","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","authorized_actors_only","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","after","before","branch","compliant_pull_request_ids","created_at","deploy_key_fingerprint","oauth_application_id","operation_type","overridden_codes","public_repo","reasons","referrer","rule_suite_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_deletions_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_force_pushes_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ignore_approvals_from_contributors","name","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","linear_history_requirement_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","lock_allows_fetch_and_merge","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement_level","lock_branch_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_code_owner_review","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_last_push_approval","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_approving_review_count","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_status_checks_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","signature_requirement_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","fingerprint","key","operation_type","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","agent_session_id","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","reviewer","reviewer_id","reviewer_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","pull_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","review_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","previous_visibility","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","name","oauth_application_id","operation_type","public_repo","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","category","created_at","oauth_application_id","operation_type","public_repo","tool","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","category","created_at","operation_type","public_repo","tool"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","languages","oauth_application_id","operation_type","public_repo","query_suite","threat_model","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","request_category","request_method","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cname","created_at","oauth_application_id","old_cname","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_branch","new_branch","oauth_application_id","old_branch","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_user","operation_type","owner","public_repo","repo_was","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_nwo","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_policy","operation_type","policy","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","public_repo","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_base_role","old_permission","old_repo_base_role","old_repo_permission","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","content_type","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","oauth_application_id","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","ruleset_bypass_actors","ruleset_conditions","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_rules","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","ruleset_bypass_actors_added","ruleset_bypass_actors_deleted","ruleset_bypass_actors_updated","ruleset_conditions_added","ruleset_conditions_deleted","ruleset_conditions_updated","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_old_enforcement","ruleset_old_name","ruleset_rules_added","ruleset_rules_deleted","ruleset_rules_updated","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","repository_security_configuration_failure_reason","repository_security_configuration_state","security_configuration_id","security_configuration_name","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","dismiss_comment","dismiss_reason","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","context","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","reason","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","multi_repo","number","oauth_application_id","operation_type","publicly_leaked","public_repo","resolution","secret_type","secret_type_display_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","report_result","secret_type","secret_type_display_name","secret_type_provider"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","current_validity","multi_repo","number","previous_validity","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","comment","created_at","number","operation_type","public_repo","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","push_protection_bypass_reason","request_reviewer","request_reviewer_comment","request_reviewer_id","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","comment","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","custom_pattern_name","custom_pattern_scope","operation_type","public_repo","secret_types","source","source_slug","started_at","type","type_slug"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_for_new_private_repos","default_for_new_public_repos","oauth_application_id","operation_type","security_configuration_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement","oauth_application_id","operation_type","security_configuration_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","patreon_email","patreon_username"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","openssh_public_key","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type","token_expires_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","name_was","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_permission","old_repo_base_role","old_repo_permission","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","deleted_at","deleted_by","deleted_by_id","deleted_content","editor","editor_id","operation_type","user_content_id","user_content_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed","created_at","event_name","integration_installation_id","operation_type","public_repo","ruleset_ids","violations"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","topic","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cancelled_at","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","completed_at","conclusion","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_attempt","run_number","started_at","topic","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_number","started_at","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","calling_workflow_refs","calling_workflow_shas","created_at","environment_name","imposer_repo","is_hosted_runner","job_name","job_workflow_ref","operation_type","runner_group_id","runner_group_name","runner_id","runner_labels","runner_name","runner_owner_type","secrets_passed","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","check_run_id","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","rerun_type","run_attempt","run_number","started_at","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","gist","gist_id","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","bullets","created_at","description","has_free_trial","marketplace_listing","marketplace_listing_plan","monthly_price_in_cents","operation_type","yearly_price_in_cents"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","server_id","server_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_description","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","entries","server_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name","old_allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","block_local_servers","mcp_policy","old_block_local_servers","old_mcp_policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","nickname","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","pat_field_changed","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","passkey_nickname"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","query_string","rate_limit_remaining","request_body","request_method","route","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_result","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_enabled","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","new_azure_blob_container","new_event_hub_instance","new_gc_bucket","new_s3_arn_role","new_s3_bucket","new_splunk_domain","new_splunk_port","old_azure_blob_container","old_event_hub_instance","old_gc_bucket","old_s3_arn_role","old_s3_bucket","old_splunk_domain","old_splunk_port","operation_type","reason","secrets_updated","ssl_verify"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","organization_upgrade"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","invitation_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","seats_plan_type","seats_plan_type_was"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","old_permission","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_emu_repo_runners_policy","old_emu_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_repo_runners_policy","old_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","remove_existing_unaffiliated_users","users_removed_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","old_role_permissions","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","scim_user_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","operation_type","property_name","required","values_editable_by"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","visibility"]] \ No newline at end of file +[["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actions_cache_id","actions_cache_key","actions_cache_scope","actions_cache_version","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ghsa_id","oauth_application_id","operation_type","public_repo","recipient"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","alert_recipient_user_ids","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_type","user_programmatic_access_name","uuid"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_enabled","budget_limit_type","created_at","customer_id","exclude_cost_center_usage","expires_at","oauth_application_id","old_alert_enabled","old_budget_limit_type","old_expires_at","old_pricing_target_id","old_pricing_target_type","old_target_amount","old_target_id","old_target_type","operation_type","pricing_target_id","pricing_target_type","status","target_amount","target_id","target_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","resource_id","resource_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_numbers","commit_oid","ref"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers","dismissal_approver_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","dismissal_request_id","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","alert_number","alert_numbers"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","origin_repository"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enablement","operation_type","organization_names"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","devcontainer_path","machine_type","name","oauth_application_id","operation_type","owner","public_repo","pull_request_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","plan","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type","seat_assignment"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_settings","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","excluded_paths","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","custom_instructions","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_plan","operation_type","owner","owner_type","plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_plan","operation_type","owner","owner_type","scheduled_plan"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_config","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_access","oauth_application_id","old_access","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","user_programmatic_access_name","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","oauth_application_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","old_value_type","operation_type","property_name","required","user_programmatic_access_name","values_editable_by","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","public_repo","user_programmatic_access_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","definition_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","access_level","actor_is_bot","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","message","oauth_application_id","old_message","operation_type","owner","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","environment_name","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","approvers","approvers_was","can_admins_bypass","environment_id","environment_name","new_value","old_value","prevent_self_review"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","external_id","repository_public","transport_protocol","transport_protocol_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","active_was","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","hook_id","integration","name","oauth_application","oauth_application_id","operation_type","public_repo","sponsors_listing_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","created_at","events","events_were","hook_id","integration","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic","trigger_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_added","repositories_added_names","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","oauth_application_id","operation_type","repositories_removed","repositories_removed_names","repository_selection","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","reason","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","operation_type","requester","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","repository_selection"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","manager","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_client_id","created_at","integration","name","operation_type","requester","requester_id","transfer_from","transfer_from_id","transfer_from_type","transfer_to","transfer_to_id","transfer_to_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","integration","ip_allow_list_entry","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","pull_request_id","pull_request_title","pull_request_url","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","owner_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","color","created_at","description","enabled","issue_type_name","oauth_application_id","old_color","old_description","old_enabled","old_issue_type_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","integration","marketplace_listing","operation_type","primary_category","secondary_category"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","assignment_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","check_response_timeout_minutes","created_at","max_entries_to_build","max_entries_to_merge","merge_method","merging_strategy","min_entries_to_merge","min_entries_to_merge_wait_minutes","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","failover_network_enabled","failover_network_settings_ids","name","network_configuration_id","network_settings_ids","oauth_application_id","operation_type","previous_settings_ids","selected_service"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitation_id","oauth_application_id","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","permission","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","query_phrase"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end","operation_type","start"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","initiated_from","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","invitee_email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enablement","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitation_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","application_id","application_name","application_type","created_at","fingerprint","managed_hashed_token","managed_oauth_access_id","managed_oauth_scopes","managed_token_id","managed_token_scopes","oauth_application_id","oauth_credential_type","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","manager","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type","url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","push_protection_setting","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","end_date","filename","operation_type","query","requested_at","start_date"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","filename","operation_type","query","requested_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_id","runner_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","runner_group_id","runner_group_name","runner_id","runner_name","source_version","target_version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","from_business","operation_type","to_business"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_policy","old_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_permission","operation_type","permission","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_runners_policy","oauth_application_id","old_repo_runners_policy","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","definition_id","oauth_application_id","operation_type","property_name","value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","oauth_application_id","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","organization_role_id","organization_role_name","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","organization_role_id","owner","owner_id","owner_type","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","ecosystem","is_republished","operation_type","package","version"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain","operation_type","owner","owner_type","state"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","exempt_administrators","old_token_expiration","operation_type","token_expiration"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","old_token_expiration","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repositories","repository_selection","user_programmatic_access_id","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name","user_programmatic_access_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","marketplace_listing","oauth_application","oauth_application_id","operation_type","owner","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_project_base_role","old_project_base_role","operation_type","project_id","project_number","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","collaborator","collaborator_type","created_at","old_project_role","operation_type","project_id","project_name","project_role","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","project_id","project_kind","project_name","public_project","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","created_at","name","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","allow_deletions_enforcement_level","allow_force_pushes_enforcement_level","authorized_actor_names","created_at","create_protected","dismiss_stale_reviews_on_push","enforcement_level","ignore_approvals_from_contributors","linear_history_requirement_enforcement_level","lock_allows_fetch_and_merge","lock_branch_enforcement_level","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","required_approving_review_count","required_deployments_enforcement_level","required_review_thread_resolution_enforcement_level","required_status_checks_enforcement_level","require_code_owner_review","require_last_push_approval","signature_requirement_enforcement_level","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","dismiss_stale_reviews_on_push","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","authorized_actors","authorized_actors_only","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","after","before","branch","compliant_pull_request_ids","created_at","deploy_key_fingerprint","oauth_application_id","operation_type","overridden_codes","public_repo","reasons","referrer","rule_suite_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","admin_enforced","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_deletions_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allow_force_pushes_enforcement_level","created_at","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","ignore_approvals_from_contributors","name","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","linear_history_requirement_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","lock_allows_fetch_and_merge","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement_level","lock_branch_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","merge_queue_enforcement_level","name","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","pull_request_reviews_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_code_owner_review","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","require_last_push_approval","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_approving_review_count","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","required_status_checks_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","signature_requirement_enforcement_level","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","strict_required_status_checks_policy","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","public_repo","read_only","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","fingerprint","key","operation_type","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","fingerprint","key","operation_type","public_repo","read_only","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","agent_session_id","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","reviewer","reviewer_id","reviewer_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","pull_request_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","comment_id","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","pull_request_id","pull_request_title","pull_request_url","review_id","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","previous_visibility","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","name","oauth_application_id","operation_type","public_repo","repository_selection","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","category","created_at","oauth_application_id","operation_type","public_repo","tool","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","branch","category","created_at","operation_type","public_repo","tool"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","languages","oauth_application_id","operation_type","public_repo","query_suite","threat_model","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","request_category","request_method","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cname","created_at","oauth_application_id","old_cname","operation_type","public_repo","topic","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_branch","new_branch","oauth_application_id","old_branch","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","policy","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","limit","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","old_user","operation_type","owner","public_repo","repo_was","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_nwo","oauth_application_id","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","old_policy","operation_type","policy","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_policy","oauth_application_id","old_policy","operation_type","public_repo","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_base_role","old_permission","old_repo_base_role","old_repo_permission","operation_type","public_repo","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","content_type","created_at","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","invitee","inviter","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","count","created_at","limit","oauth_application_id","operation_type","owner","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","public_repo","ruleset_bypass_actors","ruleset_conditions","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_rules","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_name","operation_type","public_repo","ruleset_bypass_actors_added","ruleset_bypass_actors_deleted","ruleset_bypass_actors_updated","ruleset_conditions_added","ruleset_conditions_deleted","ruleset_conditions_updated","ruleset_enforcement","ruleset_id","ruleset_name","ruleset_old_enforcement","ruleset_old_name","ruleset_rules_added","ruleset_rules_deleted","ruleset_rules_updated","ruleset_source_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","repository_security_configuration_failure_reason","repository_security_configuration_state","security_configuration_id","security_configuration_name","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","dismiss_comment","dismiss_reason","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","oauth_application_id","operation_type","owner","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_agent","actor_is_bot","alert_id","alert_number","created_at","ghsa_id","operation_type","owner","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","context","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","base_role","created_at","name","oauth_application_id","old_base_role","old_role_permissions","operation_type","owner","role_permissions","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","reason","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","multi_repo","number","oauth_application_id","operation_type","publicly_leaked","public_repo","resolution","secret_type","secret_type_display_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","report_result","secret_type","secret_type_display_name","secret_type_provider"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","current_validity","multi_repo","number","previous_validity","publicly_leaked","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","alert_number","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","alert_number","comment","created_at","number","operation_type","public_repo","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","multi_repo","number","publicly_leaked","push_protection_bypass_reason","request_reviewer","request_reviewer_comment","request_reviewer_id","secret_type","secret_type_display_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","oauth_application_id","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","number","operation_type","public_repo","request_reviewer_comment","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","comment","created_at","number","operation_type","public_repo"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","completed_at","created_at","custom_pattern_name","custom_pattern_scope","operation_type","public_repo","secret_types","source","source_slug","started_at","type","type_slug"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","default_for_new_private_repos","default_for_new_public_repos","oauth_application_id","operation_type","security_configuration_name","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enforcement","oauth_application_id","operation_type","security_configuration_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","security_configuration_code_scanning","security_configuration_code_scanning_delegated_alert_dismissal","security_configuration_code_security_sku_enabled","security_configuration_created_at","security_configuration_dependabot_alerts","security_configuration_dependabot_delegated_alert_dismissal","security_configuration_dependabot_security_updates","security_configuration_dependency_graph","security_configuration_dependency_graph_autosubmit_action","security_configuration_description","security_configuration_enable_ghas","security_configuration_id","security_configuration_name","security_configuration_private_vulnerability_reporting","security_configuration_secret_protection_sku_enabled","security_configuration_secret_scanning","security_configuration_secret_scanning_delegated_alert_dismissal","security_configuration_secret_scanning_delegated_bypass","security_configuration_secret_scanning_extended_metadata","security_configuration_secret_scanning_generic_secrets","security_configuration_secret_scanning_non_provider_patterns","security_configuration_secret_scanning_push_protection","security_configuration_secret_scanning_validity_checks","security_configuration_updated_at","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","active","actor_is_bot","created_at","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","sponsors_listing_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","patreon_email","patreon_username"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","openssh_public_key","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type","token_expires_at"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","domain_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","operation_type","team","team_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","name_was","oauth_application_id","operation_type","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","new_repo_base_role","new_repo_permission","oauth_application_id","old_permission","old_repo_base_role","old_repo_permission","operation_type","permission","public_repo","team","team_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","deleted_at","deleted_by","deleted_by_id","deleted_content","editor","editor_id","operation_type","user_content_id","user_content_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","topic","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","topic","user_programmatic_access_name","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","vulnerability_alert_rule_id","vulnerability_alert_rule_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed","created_at","event_name","integration_installation_id","operation_type","public_repo","ruleset_ids","violations"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","topic","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","cancelled_at","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","operation_type","public_repo","run_number","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","completed_at","conclusion","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_attempt","run_number","started_at","topic","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","operation_type","public_repo","run_number","started_at","trigger_id","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","run_number","started_at","topic","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","workflow_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","calling_workflow_refs","calling_workflow_shas","created_at","environment_name","imposer_repo","is_hosted_runner","job_name","job_workflow_ref","operation_type","runner_group_id","runner_group_name","runner_id","runner_labels","runner_name","runner_owner_type","secrets_passed","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","public_repo","run_number","user_programmatic_access_name","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","check_run_id","created_at","event","head_branch","head_sha","name","oauth_application_id","operation_type","public_repo","rerun_type","run_attempt","run_number","started_at","trigger_id","user_programmatic_access_name","workflow_id","workflow_run_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","gist","gist_id","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","fingerprint","key","oauth_application_id","operation_type","title","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","key","name","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","bullets","created_at","description","has_free_trial","marketplace_listing","marketplace_listing_plan","monthly_price_in_cents","operation_type","yearly_price_in_cents"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","server_id","server_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_description","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","entries","server_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","allowlist_id","allowlist_name","old_allowlist_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","block_local_servers","mcp_policy","old_block_local_servers","old_mcp_policy"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","topic","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","explanation","integration","oauth_application_id","oauth_application_name","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","nickname","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","explanation","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","pat_field_changed","repository_selection","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","public_repo","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","passkey_nickname"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","integration","key","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","old_login","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","emoji","limited_availability","message","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","blocked_user","created_at","oauth_application_id","operation_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","query_string","rate_limit_remaining","request_body","request_method","route","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_result","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","audit_log_stream_enabled","audit_log_stream_id","audit_log_stream_sink","audit_log_stream_sink_details","created_at","new_azure_blob_container","new_event_hub_instance","new_gc_bucket","new_s3_arn_role","new_s3_bucket","new_splunk_domain","new_splunk_port","old_azure_blob_container","old_event_hub_instance","old_gc_bucket","old_s3_arn_role","old_s3_bucket","old_splunk_domain","old_splunk_port","operation_type","reason","secrets_updated","ssl_verify"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","organization_upgrade"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","email","invitation_id","name","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","email","invitation_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","seats_plan_type","seats_plan_type_was"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type","sso_url"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","count","created_at","limit","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","reason"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","operation_type","two_factor_method"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","issuer","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_policy","oauth_application_id","old_policy","operation_type","updated_access_policy","updated_allowed_types","updated_github_owned_allowed","updated_patterns","updated_verified_allowed"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","old_permission","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_emu_repo_runners_policy","old_emu_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","oauth_application_id","operation_type","permission"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","name","new_repo_runners_policy","old_repo_runners_policy","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","new_value","old_value","operation_type","remove_existing_unaffiliated_users","users_removed_count"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","current_value","operation_type","previous_value"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","domain_name","operation_type","owner","owner_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","enterprise_role_id","enterprise_role_name","oauth_application_id","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","base_role","created_at","name","old_role_permissions","operation_type","owner","role_permissions"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","network_configuration_id","oauth_application_id","operation_type","runner_group_allow_public","runner_group_id","runner_group_name","runner_group_restricted_to_workflows","runner_group_selected_workflow_refs"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","oauth_application_id","operation_type","runner_group_id","runner_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","oauth_application_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","enterprise_team","enterprise_team_id","name","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","external_group","external_group_id","oauth_application_id","operation_type","scim_group_id","team","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_group_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","created_at","oauth_application_id","operation_type","scim_user_id"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","message","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","api_request_body","created_at","oauth_application_id","operation_type","query_string","request_method","route","scim_user_id","status_code","url_path"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","description","oauth_application_id","operation_type","property_name","required","value_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","allowed_values","created_at","default_value","definition_id","old_allowed_values","old_default_value","old_required","old_values_editable_by","operation_type","property_name","required","values_editable_by"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","oauth_application_id","operation_type","owner","owner_type","user_programmatic_access_name"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team","title"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","number","operation_type","team"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","owner"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","actor_is_bot","created_at","operation_type","public_repo","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","topic","visibility"],["@timestamp","_document_id","action","actor","actor_id","business","business_id","hashed_token","org","org_id","programmatic_access_type","repo","repo_id","repository","repository_id","request_access_security_header","request_id","token_id","token_scopes","user","user_id","user_agent","created_at","operation_type","public_repo","visibility"]] \ No newline at end of file diff --git a/src/audit-logs/lib/config.json b/src/audit-logs/lib/config.json index bc4e71215053..fb0b59f76ac6 100644 --- a/src/audit-logs/lib/config.json +++ b/src/audit-logs/lib/config.json @@ -9,5 +9,5 @@ "git": "Note: Git events have special access requirements and retention policies that differ from other audit log events. For GitHub Enterprise Cloud, access Git events via the REST API only with 7-day retention. For GitHub Enterprise Server, Git events must be enabled in audit log configuration and are not included in search results.", "sso_redirect": "Note: Automatically redirecting users to sign in is currently in beta for Enterprise Managed Users and subject to change." }, - "sha": "f1681115e31cac39a30a044bbb6f540699cb95a4" + "sha": "6908656e5a680467a6f235d8b17d8997f1f689ff" } \ No newline at end of file diff --git a/src/github-apps/lib/config.json b/src/github-apps/lib/config.json index e6572ba7a9bd..bee71930d9eb 100644 --- a/src/github-apps/lib/config.json +++ b/src/github-apps/lib/config.json @@ -60,5 +60,5 @@ "2022-11-28" ] }, - "sha": "6601e5ced001a05f4574552116ebcb276413eceb" + "sha": "3fa67306b30ebd736a08604ff8b8932a34f68ddf" } \ No newline at end of file diff --git a/src/redirects/lib/external-sites.json b/src/redirects/lib/external-sites.json index 8fc87d8db362..78908d3cdae3 100644 --- a/src/redirects/lib/external-sites.json +++ b/src/redirects/lib/external-sites.json @@ -17,5 +17,20 @@ "/desktop-classic": "https://desktop.github.com", "/github/copilot/research-recitation": "https://github.blog/2021-06-30-github-copilot-research-recitation/", "/early-access/github/copilot/research-recitation": "https://github.blog/2021-06-30-github-copilot-research-recitation/", - "/site-policy/privacy-policies/github-copilot-business-privacy-statement": "https://copilot.github.trust.page/" + "/site-policy/privacy-policies/github-copilot-business-privacy-statement": "https://copilot.github.trust.page/", + "/copilot/concepts/spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/spark/your-first-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/building-your-first-app-in-minutes-with-github-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/spark/easy-apps-with-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/spark/prompt-tips": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/spark/deploy-from-cli": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/spark/build-apps-with-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/building-ai-app-prototypes": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/tutorials/build-apps-with-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/billing/concepts/product-billing/github-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/concepts/copilot-billing/about-billing-for-github-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/concepts/copilot-billing/billing-for-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/", + "/copilot/how-tos/troubleshoot-copilot/troubleshoot-spark": "https://github.blog/changelog/2026-08-04-upcoming-deprecation-of-github-spark-on-github-com/" } diff --git a/src/rest/data/fpt-2022-11-28/billing.json b/src/rest/data/fpt-2022-11-28/billing.json index a8c00d1c1baf..b8995ccc081a 100644 --- a/src/rest/data/fpt-2022-11-28/billing.json +++ b/src/rest/data/fpt-2022-11-28/billing.json @@ -213,6 +213,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -411,6 +416,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -575,6 +585,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets. This field is required when budget_scope is user.

" + }, + { + "type": "string", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Creates a new budget for an organization. The authenticated user must be an\norganization admin or billing manager.

", @@ -696,6 +711,11 @@ "description": "Array of user login names who will receive alerts. Rejected for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } @@ -1022,6 +1042,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets.

" + }, + { + "type": "string or null or integer", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not set, the budget will not expire. Setting to null or 0 will remove the expiration date from a budget if set.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Updates an existing budget for an organization. The authenticated user must be an organization admin or billing manager.

", @@ -1151,6 +1176,11 @@ "description": "Array of user login names who will receive alerts. Ignored for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } diff --git a/src/rest/data/fpt-2022-11-28/issues.json b/src/rest/data/fpt-2022-11-28/issues.json index 2d35cf0c2b13..bd2c0933accf 100644 --- a/src/rest/data/fpt-2022-11-28/issues.json +++ b/src/rest/data/fpt-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -83516,6 +83521,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/fpt-2022-11-28/teams.json b/src/rest/data/fpt-2022-11-28/teams.json index 89f425762951..33c70b11dd2f 100644 --- a/src/rest/data/fpt-2022-11-28/teams.json +++ b/src/rest/data/fpt-2022-11-28/teams.json @@ -10057,7 +10057,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/fpt-2026-03-10/billing.json b/src/rest/data/fpt-2026-03-10/billing.json index a8c00d1c1baf..b8995ccc081a 100644 --- a/src/rest/data/fpt-2026-03-10/billing.json +++ b/src/rest/data/fpt-2026-03-10/billing.json @@ -213,6 +213,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -411,6 +416,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -575,6 +585,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets. This field is required when budget_scope is user.

" + }, + { + "type": "string", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Creates a new budget for an organization. The authenticated user must be an\norganization admin or billing manager.

", @@ -696,6 +711,11 @@ "description": "Array of user login names who will receive alerts. Rejected for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } @@ -1022,6 +1042,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets.

" + }, + { + "type": "string or null or integer", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not set, the budget will not expire. Setting to null or 0 will remove the expiration date from a budget if set.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Updates an existing budget for an organization. The authenticated user must be an organization admin or billing manager.

", @@ -1151,6 +1176,11 @@ "description": "Array of user login names who will receive alerts. Ignored for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } diff --git a/src/rest/data/fpt-2026-03-10/issues.json b/src/rest/data/fpt-2026-03-10/issues.json index 8258e4cdbdab..0df02d9776c9 100644 --- a/src/rest/data/fpt-2026-03-10/issues.json +++ b/src/rest/data/fpt-2026-03-10/issues.json @@ -9561,6 +9561,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -81266,6 +81271,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/fpt-2026-03-10/teams.json b/src/rest/data/fpt-2026-03-10/teams.json index b781f663de2a..ceb67e7a06a2 100644 --- a/src/rest/data/fpt-2026-03-10/teams.json +++ b/src/rest/data/fpt-2026-03-10/teams.json @@ -10027,7 +10027,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghec-2022-11-28/billing.json b/src/rest/data/ghec-2022-11-28/billing.json index f262ab014835..9a34d43baaa0 100644 --- a/src/rest/data/ghec-2022-11-28/billing.json +++ b/src/rest/data/ghec-2022-11-28/billing.json @@ -399,6 +399,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -597,6 +602,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -767,6 +777,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets. This field is required when budget_scope is user.

" + }, + { + "type": "string", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Creates a new budget for an enterprise. Enterprise owners and billing managers can create budgets scoped to the enterprise, all users in the enterprise, or any organization in it. Organization administrators can create budgets for their organizations, and repository-scoped budgets require administration of the repository's owning organization. A custom role holder with fine-grained write access to enterprise billing can create budgets scoped to a single user or a cost center, including all users in a cost center, without an additional administrator role; the role requirements above still apply to the other scopes. An installation access token for a GitHub App installed on the enterprise with write access to enterprise billing can create budgets for any target in the enterprise.

", @@ -888,6 +903,11 @@ "description": "Array of user login names who will receive alerts. Rejected for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } @@ -1215,6 +1235,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets.

" + }, + { + "type": "string or null or integer", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not set, the budget will not expire. Setting to null or 0 will remove the expiration date from a budget if set.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Updates an existing budget for an enterprise. Enterprise owners and billing managers can update budgets scoped to the enterprise, all users in the enterprise, or any organization in it. Organization administrators can update budgets for their organizations, and repository-scoped budgets require administration of the repository's owning organization. A custom role holder with fine-grained write access to enterprise billing can update budgets scoped to a single user or a cost center, including all users in a cost center, without an additional administrator role; the role requirements above still apply to the other scopes. An installation access token for a GitHub App installed on the enterprise with write access to enterprise billing can update any budget in the enterprise.

", @@ -1344,6 +1369,11 @@ "description": "Array of user login names who will receive alerts. Ignored for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } diff --git a/src/rest/data/ghec-2022-11-28/issues.json b/src/rest/data/ghec-2022-11-28/issues.json index e62b5fca1762..b21e5d24f3a7 100644 --- a/src/rest/data/ghec-2022-11-28/issues.json +++ b/src/rest/data/ghec-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -83516,6 +83521,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghec-2022-11-28/teams.json b/src/rest/data/ghec-2022-11-28/teams.json index b346fbdffacc..b4c5c437f4c5 100644 --- a/src/rest/data/ghec-2022-11-28/teams.json +++ b/src/rest/data/ghec-2022-11-28/teams.json @@ -10764,7 +10764,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghec-2026-03-10/billing.json b/src/rest/data/ghec-2026-03-10/billing.json index f262ab014835..9a34d43baaa0 100644 --- a/src/rest/data/ghec-2026-03-10/billing.json +++ b/src/rest/data/ghec-2026-03-10/billing.json @@ -399,6 +399,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -597,6 +602,11 @@ "will_alert", "alert_recipients" ] + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } }, "required": [ @@ -767,6 +777,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets. This field is required when budget_scope is user.

" + }, + { + "type": "string", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Creates a new budget for an enterprise. Enterprise owners and billing managers can create budgets scoped to the enterprise, all users in the enterprise, or any organization in it. Organization administrators can create budgets for their organizations, and repository-scoped budgets require administration of the repository's owning organization. A custom role holder with fine-grained write access to enterprise billing can create budgets scoped to a single user or a cost center, including all users in a cost center, without an additional administrator role; the role requirements above still apply to the other scopes. An installation access token for a GitHub App installed on the enterprise with write access to enterprise billing can create budgets for any target in the enterprise.

", @@ -888,6 +903,11 @@ "description": "Array of user login names who will receive alerts. Rejected for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } @@ -1215,6 +1235,11 @@ "type": "string", "name": "user", "description": "

The username of the user for user scope budgets.

" + }, + { + "type": "string or null or integer", + "name": "expires_at", + "description": "

The date the budget will expire in YYYY-MM-DD format. Only dates in the future are accepted.\nIf not set, the budget will not expire. Setting to null or 0 will remove the expiration date from a budget if set.

\n

Only supported for budgets with budget_scope of user

" } ], "descriptionHTML": "

Updates an existing budget for an enterprise. Enterprise owners and billing managers can update budgets scoped to the enterprise, all users in the enterprise, or any organization in it. Organization administrators can update budgets for their organizations, and repository-scoped budgets require administration of the repository's owning organization. A custom role holder with fine-grained write access to enterprise billing can update budgets scoped to a single user or a cost center, including all users in a cost center, without an additional administrator role; the role requirements above still apply to the other scopes. An installation access token for a GitHub App installed on the enterprise with write access to enterprise billing can update any budget in the enterprise.

", @@ -1344,6 +1369,11 @@ "description": "Array of user login names who will receive alerts. Ignored for user-scope as alerting is always disabled for them." } } + }, + "expires_at": { + "type": "string", + "format": "date", + "description": "The date the budget will expire in `YYYY-MM-DD` format. Only dates in the future are accepted.\nIf not provided, the budget will not expire.\n\nOnly supported for budgets with `budget_scope` of `user`" } } } diff --git a/src/rest/data/ghec-2026-03-10/issues.json b/src/rest/data/ghec-2026-03-10/issues.json index fab9b3b5f042..627a12c71058 100644 --- a/src/rest/data/ghec-2026-03-10/issues.json +++ b/src/rest/data/ghec-2026-03-10/issues.json @@ -9561,6 +9561,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -81266,6 +81271,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghec-2026-03-10/teams.json b/src/rest/data/ghec-2026-03-10/teams.json index a86ca689b80d..cb5d3c7539fb 100644 --- a/src/rest/data/ghec-2026-03-10/teams.json +++ b/src/rest/data/ghec-2026-03-10/teams.json @@ -10734,7 +10734,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.17-2022-11-28/issues.json b/src/rest/data/ghes-3.17-2022-11-28/issues.json index 0eb60b15272a..2dfc969948ac 100644 --- a/src/rest/data/ghes-3.17-2022-11-28/issues.json +++ b/src/rest/data/ghes-3.17-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -68452,6 +68457,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.17-2022-11-28/teams.json b/src/rest/data/ghes-3.17-2022-11-28/teams.json index d276cf421cd6..ce7919402c21 100644 --- a/src/rest/data/ghes-3.17-2022-11-28/teams.json +++ b/src/rest/data/ghes-3.17-2022-11-28/teams.json @@ -10213,7 +10213,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.18-2022-11-28/issues.json b/src/rest/data/ghes-3.18-2022-11-28/issues.json index c53b02d8b772..9fb4fb68ada2 100644 --- a/src/rest/data/ghes-3.18-2022-11-28/issues.json +++ b/src/rest/data/ghes-3.18-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -68452,6 +68457,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.18-2022-11-28/teams.json b/src/rest/data/ghes-3.18-2022-11-28/teams.json index 9c61a165b3de..ef9bd9e304dd 100644 --- a/src/rest/data/ghes-3.18-2022-11-28/teams.json +++ b/src/rest/data/ghes-3.18-2022-11-28/teams.json @@ -10223,7 +10223,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.19-2022-11-28/issues.json b/src/rest/data/ghes-3.19-2022-11-28/issues.json index 1bd2aec755be..50510f3dff60 100644 --- a/src/rest/data/ghes-3.19-2022-11-28/issues.json +++ b/src/rest/data/ghes-3.19-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -81021,6 +81026,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.19-2022-11-28/teams.json b/src/rest/data/ghes-3.19-2022-11-28/teams.json index 76481fa81bda..90125faee242 100644 --- a/src/rest/data/ghes-3.19-2022-11-28/teams.json +++ b/src/rest/data/ghes-3.19-2022-11-28/teams.json @@ -10223,7 +10223,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.20-2022-11-28/issues.json b/src/rest/data/ghes-3.20-2022-11-28/issues.json index 86c77e46f4b7..b7c99f540a40 100644 --- a/src/rest/data/ghes-3.20-2022-11-28/issues.json +++ b/src/rest/data/ghes-3.20-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -81021,6 +81026,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.20-2022-11-28/teams.json b/src/rest/data/ghes-3.20-2022-11-28/teams.json index 669699d35c3e..5188d7a92deb 100644 --- a/src/rest/data/ghes-3.20-2022-11-28/teams.json +++ b/src/rest/data/ghes-3.20-2022-11-28/teams.json @@ -10223,7 +10223,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.21-2022-11-28/issues.json b/src/rest/data/ghes-3.21-2022-11-28/issues.json index e9fd86ed7167..fe8ec9f8c2df 100644 --- a/src/rest/data/ghes-3.21-2022-11-28/issues.json +++ b/src/rest/data/ghes-3.21-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -81953,6 +81958,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.21-2022-11-28/teams.json b/src/rest/data/ghes-3.21-2022-11-28/teams.json index 610d917fa669..3d06e2e253e2 100644 --- a/src/rest/data/ghes-3.21-2022-11-28/teams.json +++ b/src/rest/data/ghes-3.21-2022-11-28/teams.json @@ -10368,7 +10368,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.21-2026-03-10/issues.json b/src/rest/data/ghes-3.21-2026-03-10/issues.json index 7c147969a575..ce529627981b 100644 --- a/src/rest/data/ghes-3.21-2026-03-10/issues.json +++ b/src/rest/data/ghes-3.21-2026-03-10/issues.json @@ -9561,6 +9561,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -79703,6 +79708,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.21-2026-03-10/teams.json b/src/rest/data/ghes-3.21-2026-03-10/teams.json index dd8f34165afb..63dd0e12b7db 100644 --- a/src/rest/data/ghes-3.21-2026-03-10/teams.json +++ b/src/rest/data/ghes-3.21-2026-03-10/teams.json @@ -10338,7 +10338,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.22-2022-11-28/issues.json b/src/rest/data/ghes-3.22-2022-11-28/issues.json index 7216c6644439..73a1aec256cf 100644 --- a/src/rest/data/ghes-3.22-2022-11-28/issues.json +++ b/src/rest/data/ghes-3.22-2022-11-28/issues.json @@ -9956,6 +9956,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -81989,6 +81994,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.22-2022-11-28/teams.json b/src/rest/data/ghes-3.22-2022-11-28/teams.json index a44b19b91d92..b2cb39913275 100644 --- a/src/rest/data/ghes-3.22-2022-11-28/teams.json +++ b/src/rest/data/ghes-3.22-2022-11-28/teams.json @@ -10413,7 +10413,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/data/ghes-3.22-2026-03-10/issues.json b/src/rest/data/ghes-3.22-2026-03-10/issues.json index 81184bfc2fe0..e6f97da8a51c 100644 --- a/src/rest/data/ghes-3.22-2026-03-10/issues.json +++ b/src/rest/data/ghes-3.22-2026-03-10/issues.json @@ -9561,6 +9561,11 @@ "type": "string or null", "name": "type", "description": "

The name of the issue type to associate with this issue. NOTE: Only users with push access can set the type for new issues. The type is silently dropped otherwise.

" + }, + { + "type": "integer", + "name": "parent_issue_id", + "description": "

The id of the parent issue to add this issue to as a sub-issue. NOTE: Only users with triage access to both the parent issue's repository and this repository can set the parent issue.

" } ], "descriptionHTML": "

Any user with pull access to a repository can create an issue. If issues are disabled in the repository, the API returns a 410 Gone status.

\n

This endpoint triggers notifications. Creating content too quickly using this endpoint may result in secondary rate limiting. For more information, see \"Rate limits for the API\"\nand \"Best practices for using the REST API.\"

\n

This endpoint supports the following custom media types. For more information, see \"Media types.\"

\n", @@ -79739,6 +79744,11 @@ "type": "string", "name": "description", "description": "

A short description of the label. Must be 100 characters or fewer.

" + }, + { + "type": "boolean", + "name": "archived", + "description": "

Whether to archive or unarchive the label. Archived labels cannot be added to issues or pull requests. For more information, see \"Archiving labels.\"

" } ], "descriptionHTML": "

Updates a label using the given label name.

", diff --git a/src/rest/data/ghes-3.22-2026-03-10/teams.json b/src/rest/data/ghes-3.22-2026-03-10/teams.json index f5e9346e4967..1002de558dcf 100644 --- a/src/rest/data/ghes-3.22-2026-03-10/teams.json +++ b/src/rest/data/ghes-3.22-2026-03-10/teams.json @@ -10383,7 +10383,7 @@ } ], "bodyParameters": [], - "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

", + "descriptionHTML": "

Team members will include the members of child teams.

\n

Each member includes their role on the team (member or maintainer) and an inherited flag indicating whether the membership is inherited from a child team (true) or is a direct membership (false). These fields let you read a member's role and direct/inherited status without additional requests.

\n

To list members in a team, the team must be visible to the authenticated user.

\n

Note

\n

\nYou can also specify a team by org_id and team_id using the route GET /organizations/{org_id}/team/{team_id}/members.

\n
", "codeExamples": [ { "request": { diff --git a/src/rest/lib/config.json b/src/rest/lib/config.json index 654eba20eb06..ab8a8cd018d8 100644 --- a/src/rest/lib/config.json +++ b/src/rest/lib/config.json @@ -51,5 +51,5 @@ ] } }, - "sha": "6601e5ced001a05f4574552116ebcb276413eceb" + "sha": "3fa67306b30ebd736a08604ff8b8932a34f68ddf" } \ No newline at end of file diff --git a/src/webhooks/lib/config.json b/src/webhooks/lib/config.json index 8bb5f4648d0c..961853b8adcc 100644 --- a/src/webhooks/lib/config.json +++ b/src/webhooks/lib/config.json @@ -1,3 +1,3 @@ { - "sha": "6601e5ced001a05f4574552116ebcb276413eceb" + "sha": "3fa67306b30ebd736a08604ff8b8932a34f68ddf" } \ No newline at end of file