What information does the GitHub Enterprise audit log capture?
Select an answer to reveal the explanation.
Short Explanation and Infographic
The audit log is GitHub's paper trail for everything that matters administratively — who created a repo, who changed a setting, who added a team member. It's your compliance and forensics record, not a code-level log.
Full explanation below image
Full Explanation
The GitHub Enterprise audit log captures administrative and organizational actions performed by users, owners, and integrated applications. This includes: member additions/removals, repository creation/deletion/visibility changes, permission changes, organization/enterprise setting modifications, OAuth app authorizations, GitHub App installations, branch protection changes, and much more. The audit log does NOT capture Git commit content or code changes (that's git history). It does NOT capture application performance metrics (that's monitoring). It records WHO did WHAT WHEN across the enterprise's governance actions. Audit logs can be streamed to external SIEM systems and are retained for a defined period depending on the enterprise plan.