Accessing your security log
The security log lists all actions performed within the last 90 days.
-
在任何页面的右上角,单击您的个人资料照片,然后单击 Settings(设置)。

-
In the user settings sidebar, click Security log.

Searching your security log
日志列出每个操作的以下信息:
- 执行操作的仓库
- 执行操作的用户
- 执行的操作内容
- 发生操作的国家/地区
- 操作发生的日期和时间
请注意,无法使用文本搜索条目。 但是,您可以使用各种过滤器构建搜索查询。 查询日志时使用的许多运算符,如 -、> 或 <,与在 GitHub 上搜索时的格式相同。 更多信息请参阅“在 GitHub 上搜索”。
基于操作搜索
使用操作限定符将操作限于特定类型的操作。 例如:
operation:access查找其中资源被访问过的所有事件。operation:authentication查找其中执行了身份验证事件的所有事件。operation:create查找在其中创建了资源的所有事件。operation:modify查找在其中修改了现有资源的所有事件。operation:remove查找在其中删除的现有资源的所有事件。operation:restore查找在其中恢复了现有资源的所有事件。operation:transfer查找在其中转移了现有资源的所有事件。
基于仓库搜索
使用 repo 限定符将操作限于特定仓库。 例如:
repo:my-org/our-repo会找到在my-org组织的our-repo仓库中发生的所有事件。repo:my-org/our-repo repo:my-org/another-repo会找到在my-org组织的our-repo和another-repo仓库中发生的所有事件。-repo:my-org/not-this-repo会排除在my-org组织的not-this-repo仓库中发生的所有事件。
请注意,您必须在 repo 限定符中包含帐户名称;仅搜索 repo:our-repo 将不起作用。
基于用户搜索
actor 限定符可将事件范围限于执行操作的人员。 例如:
actor:octocat会找到octocat执行的所有事件。actor:octocat actor:hubot会找到octocat和hubot执行的所有事件。-actor:hubot会排除hubot执行的所有事件。
请注意,只能使用 GitHub 用户名,而不是个人的真实姓名。
Search based on the action performed
| Category Name | Description |
|---|---|
account_recovery_token | Contains all activities related to adding a recovery token. |
billing | Contains all activities related to your billing information. |
marketplace_agreement_signature | Contains all activities related to signing the GitHub Marketplace Developer Agreement. |
marketplace_listing | Contains all activities related to listing apps in GitHub Marketplace. |
oauth_access | Contains all activities related to OAuth 应用程序s you've connected with. |
payment_method | Contains all activities related to paying for your GitHub subscription. |
profile_picture | Contains all activities related to your profile picture. |
project | Contains all activities related to project boards. |
public_key | Contains all activities related to your public SSH keys. |
repo | Contains all activities related to the repositories you own. |
sponsors | Contains all events related to GitHub 赞助者 and sponsor buttons (see "About GitHub 赞助者" and "Displaying a sponsor button in your repository") |
two_factor_authentication | Contains all activities related to two-factor authentication. |
user | Contains all activities related to your account. |
A description of the events within these categories is listed below.
The account_recovery_token category
| Action | Description |
|---|---|
| confirm | Triggered when you successfully store a new token with a recovery provider. |
| recover | Triggered when you successfully redeem an account recovery token. |
| recover_error | Triggered when a token is used but GitHub is not able to validate it. |
The billing category
| Action | Description |
|---|---|
| change_billing_type | Triggered when you change how you pay for GitHub. |
| change_email | Triggered when you change your email address. |
The marketplace_agreement_signature category
| Action | Description |
|---|---|
| create | Triggered when you sign the GitHub Marketplace Developer Agreement. |
The marketplace_listing category
| Action | Description |
|---|---|
| approve | Triggered when your listing is approved for inclusion in GitHub Marketplace. |
| create | Triggered when you create a listing for your app in GitHub Marketplace. |
| delist | Triggered when your listing is removed from GitHub Marketplace. |
| redraft | Triggered when your listing is sent back to draft state. |
| reject | Triggered when your listing is not accepted for inclusion in GitHub Marketplace. |
The oauth_access category
| Action | Description |
|---|---|
| create | Triggered when you grant access to an OAuth 应用程序. |
| destroy | Triggered when you revoke an OAuth 应用程序's access to your account. |
The payment_method category
| Action | Description |
|---|---|
| clear | Triggered when a payment method on file is removed. |
| create | Triggered when a new payment method is added, such as a new credit card or PayPal account. |
| update | Triggered when an existing payment method is updated. |
The profile_picture category
| Action | Description |
|---|---|
| update | Triggered when you set or update your profile picture. |
The project category
| Action | Description |
|---|---|
create | Triggered when a project board is created. |
rename | Triggered when a project board is renamed. |
update | Triggered when a project board is updated. |
delete | Triggered when a project board is deleted. |
link | Triggered when a repository is linked to a project board. |
unlink | Triggered when a repository is unlinked from a project board. |
project.access | Triggered when a project board's visibility is changed. |
update_user_permission | Triggered when an outside collaborator is added to or removed from a project board or has their permission level changed. |
The public_key category
| Action | Description |
|---|---|
| create | Triggered when you add a new public SSH key to your GitHub account. |
| delete | Triggered when you remove a public SSH key to your GitHub account. |
The repo category
| Action | Description |
|---|---|
| access | Triggered when you a repository you own is switched from "private" to "public" (or vice versa). |
| add_member | Triggered when a GitHub user is invited to have collaboration access to a repository. |
| add_topic | Triggered when a repository owner adds a topic to a repository. |
| archived | Triggered when a repository owner archives a repository. |
| create | Triggered when a new repository is created. |
| destroy | Triggered when a repository is deleted. |
| disable | Triggered when a repository is disabled (e.g., for insufficient funds). |
| enable | Triggered when a repository is re-enabled. |
| remove_member | Triggered when a GitHub user is removed from a repository as a collaborator. |
| remove_topic | Triggered when a repository owner removes a topic from a repository. |
| rename | Triggered when a repository is renamed. |
| transfer | Triggered when a repository is transferred. |
| transfer_start | Triggered when a repository transfer is about to occur. |
| unarchived | Triggered when a repository owner unarchives a repository. |
The sponsors category
| Action | Description |
|---|---|
| repo_funding_link_button_toggle | Triggered when you enable or disable a sponsor button in your repository (see "Displaying a sponsor button in your repository") |
| repo_funding_links_file_action | Triggered when you change the FUNDING file in your repository (see "Displaying a sponsor button in your repository") |
| sponsor_sponsorship_cancel | Triggered when you cancel a sponsorship (see "Downgrading a sponsorship") |
| sponsor_sponsorship_create | Triggered when you sponsor a developer (see "Sponsoring an open source contributor") |
| sponsor_sponsorship_preference_change | Triggered when you change whether you receive email updates from a sponsored developer (see "Managing your sponsorship") |
| sponsor_sponsorship_tier_change | Triggered when you upgrade or downgrade your sponsorship (see "Upgrading a sponsorship" and "Downgrading a sponsorship") |
| sponsored_developer_approve | Triggered when your GitHub 赞助者 account is approved (see "Setting up GitHub 赞助者 for your user account") |
| sponsored_developer_create | Triggered when your GitHub 赞助者 account is created (see "Setting up GitHub 赞助者 for your user account") |
| sponsored_developer_profile_update | Triggered when you edit your sponsored developer profile (see "Editing your profile details for GitHub 赞助者") |
| sponsored_developer_request_approval | Triggered when you submit your application for GitHub 赞助者 for approval (see "Setting up GitHub 赞助者 for your user account") |
| sponsored_developer_tier_description_update | Triggered when you change the description for a sponsorship tier (see "Changing your sponsorship tiers") |
| sponsored_developer_update_newsletter_send | Triggered when you send an email update to your sponsors (see "Contacting your sponsors") |
| waitlist_invite_sponsored_developer | Triggered when you are invited to join GitHub 赞助者 from the waitlist (see "Setting up GitHub 赞助者 for your user account") |
| waitlist_join | Triggered when you join the waitlist to become a sponsored developer (see "Setting up GitHub 赞助者 for your user account") |
The successor_invitation category
| Action | Description |
|---|---|
| accept | Triggered when you accept a succession invitation (see "Maintaining ownership continuity of your user account's repositories") |
| cancel | Triggered when you cancel a succession invitation (see "Maintaining ownership continuity of your user account's repositories") |
| create | Triggered when you create a succession invitation (see "Maintaining ownership continuity of your user account's repositories") |
| decline | Triggered when you decline a succession invitation (see "Maintaining ownership continuity of your user account's repositories") |
| revoke | Triggered when you revoke a succession invitation (see "Maintaining ownership continuity of your user account's repositories") |
The two_factor_authentication category
| Action | Description |
|---|---|
| enabled | Triggered when two-factor authentication is enabled. |
| disabled | Triggered when two-factor authentication is disabled. |
The user category
| Action | Description |
|---|---|
| add_email | Triggered when you add a new email address. |
| create | Triggered when you create a new user account. |
| remove_email | Triggered when you remove an email address. |
| rename | Triggered when you rename your account. |
| change_password | Triggered when you change your password. |
| forgot_password | Triggered when you ask for a password reset. |
| login | Triggered when you log in to GitHub. |
| failed_login | Triggered when you failed to log in successfully. |
| two_factor_requested | Triggered when GitHub asks you for your two-factor authentication code. |
| show_private_contributions_count | Triggered when you publicize private contributions on your profile. |
| hide_private_contributions_count | Triggered when you hide private contributions on your profile. |
| report_content | Triggered when you report an issue or pull request, or a comment on an issue, pull request, or commit. |
The user_status category
| Action | Description |
|---|---|
| update | Triggered when you set or change the status on your profile. For more information, see "Setting a status." |
| destroy | Triggered when you clear the status on your profile. |
Exporting your security log
您可以将日志导出为 JSON 数据或逗号分隔值 (CSV) 文件。

若要过滤导出结果,请在使用 Export(导出)下拉菜单之前通过一个或多个支持的限定符进行搜索。
| 限定符 | 示例值 |
|---|---|
action | team.create |
actor | octocat |
用户 | codertocat |
org | octo-org |
repo | octo-org/documentation |
created | 2019-06-01 |
将日志导出为 JSON 或 CSV 后,您将在生成的文件中看到以下键和值。
| 键 | 示例值 |
|---|---|
action | team.create |
actor | octocat |
用户 | codertocat |
org | octo-org |
repo | octo-org/documentation |
created_at | 1429548104000 (Timestamp shows the time since Epoch with milliseconds.) |
data.hook_id | 245 |
data.events | ["issues", "issue_comment", "pull_request", "pull_request_review_comment"] |
data.events_were | ["push", "pull_request", "issues"] |
data.target_login | octocat |
data.old_user | hubot |
data.team | octo-org/engineering |