Security
Audit log
Quick answer
An audit log is an append-only record of configuration and access changes, capturing who did what, when, and from where.
An audit log is an append-only record of configuration and access changes, capturing who did what, when, and from where.
Why it matters
For CI it should cover runner group changes, token issuance, egress policy edits and billing changes. If it can be edited or deleted by an administrator, it is a log, not an audit log.
Your next build could be twice as fast, at half the price
Start free. Migrating away is the same one line, and we publish that diff too.
Related
Data residencyData residency is the requirement that data be stored and processed within a defined geographic boundary.GitHub AppA GitHub App is an integration that authenticates as itself with scoped, short-lived installation tokens rather than as a user.GITHUB_TOKENGITHUB_TOKEN is the automatically generated, short-lived token available to every workflow run for authenticating to the GitHub API.IAM instance profileAn IAM instance profile attaches an AWS role to an EC2 instance so software on it can obtain temporary credentials without stored keys.