GitHub Enterprise Cloud customers can now join a public beta for streaming API request events as part of their enterprise audit log.
As part of this beta, REST API calls against enterprise's private and internal repositories can be streamed to one of GitHub's supported streaming endpoints.
Note: hashed_token and token_id have been redacted for security reasons.
Many GitHub users leverage GitHub's APIs to extend and customize their GitHub experience. However, use of APIs can create unique security and operational challenges for Enterprises. With the introduction of targeted audit log streaming API requests, enterprise owners are now able to:
- Better understand and analyze API usage targeting their private and internal repositories;
- Identify and diagnose potentially misconfigured applications or integrations;
- Identify the authentication tokens being used by specific applications or integrations;
- Troubleshoot API contributing to API rate limiting;
- Leverage API activity when performing forensic investigations; and
- Develop API specific anomaly detection algorithms to identify potentially malicious API activity.
Enterprise owners interested in the public beta can follow the instructions in our docs for enabling audit log streaming of API requests. Once enabled, you should begin seeing API request events in your audit log stream. Feedback can be provided at our beta feedback community discussion post.
