Update audit log event data (#57718)

Co-authored-by: Felicity Chapman <[email protected]>

Author: docs-bot

src/audit-logs/data/fpt/organization.json

@@ -1506,48 +1506,6 @@
     ],
     "docs_reference_titles": "Managing GitHub Advanced Security features for your enterprise"
   },
-  {
-    "action": "business_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed",
-    "description": "The push protection setting was changed for a secret type for your enterprise.",
-    "docs_reference_links": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise",
-    "fields": [
-      "actor",
-      "actor_id",
-      "user_agent",
-      "request_id",
-      "user",
-      "user_id",
-      "business",
-      "business_id",
-      "action",
-      "_document_id",
-      "@timestamp",
-      "created_at",
-      "secret_type",
-      "secret_type_display_name",
-      "push_protection_setting"
-    ],
-    "docs_reference_titles": "Managing GitHub Advanced Security features for your enterprise"
-  },
-  {
-    "action": "business_secret_scanning_push_protection_pattern_configuration.updated",
-    "description": "The push protection pattern configuration was updated for your enterprise.",
-    "docs_reference_links": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise",
-    "fields": [
-      "actor",
-      "actor_id",
-      "user_agent",
-      "request_id",
-      "user",
-      "user_id",
-      "business",
-      "business_id",
-      "action",
-      "_document_id",
-      "@timestamp"
-    ],
-    "docs_reference_titles": "Managing GitHub Advanced Security features for your enterprise"
-  },
   {
     "action": "business.secret_scanning_repo_admin_settings_policy_update",
     "description": "N/A",
@@ -4093,7 +4051,7 @@
   },
   {
     "action": "git.clone",
-    "description": "A repository was cloned.",
+    "description": "A repository was cloned. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
     "docs_reference_links": "N/A",
     "fields": [
       "transport_protocol",
@@ -4114,7 +4072,7 @@
   },
   {
     "action": "git.fetch",
-    "description": "Changes were fetched from a repository.",
+    "description": "Changes were fetched from a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
     "docs_reference_links": "N/A",
     "fields": [
       "action",
@@ -4136,7 +4094,7 @@
   },
   {
     "action": "git.push",
-    "description": "Changes were pushed to a repository.",
+    "description": "Changes were pushed to a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
     "docs_reference_links": "N/A",
     "fields": [
       "transport_protocol",
@@ -7649,52 +7607,6 @@
     ],
     "docs_reference_titles": "About push protection"
   },
-  {
-    "action": "org_secret_scanning_push_protection_pattern_configuration.push_protection_setting_changed",
-    "description": "The push protection setting was changed for a secret type for your org.",
-    "docs_reference_links": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise",
-    "fields": [
-      "actor",
-      "actor_id",
-      "user_agent",
-      "request_id",
-      "user",
-      "user_id",
-      "org",
-      "org_id",
-      "business",
-      "business_id",
-      "action",
-      "_document_id",
-      "@timestamp",
-      "created_at",
-      "secret_type",
-      "secret_type_display_name",
-      "push_protection_setting"
-    ],
-    "docs_reference_titles": "Managing GitHub Advanced Security features for your enterprise"
-  },
-  {
-    "action": "org_secret_scanning_push_protection_pattern_configuration.updated",
-    "description": "The push protection pattern configuration was updated for your org.",
-    "docs_reference_links": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise",
-    "fields": [
-      "actor",
-      "actor_id",
-      "user_agent",
-      "request_id",
-      "user",
-      "user_id",
-      "org",
-      "org_id",
-      "business",
-      "business_id",
-      "action",
-      "_document_id",
-      "@timestamp"
-    ],
-    "docs_reference_titles": "Managing GitHub Advanced Security features for your enterprise"
-  },
   {
     "action": "org.self_hosted_runner_offline",
     "description": "The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
@@ -13886,7 +13798,8 @@
       "org",
       "action",
       "actor",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ],
     "docs_reference_titles": "/organizations/organizing-members-into-teams/adding-organization-members-to-a-team"
   },
@@ -13952,7 +13865,8 @@
       "org_id",
       "@timestamp",
       "actor",
-      "_document_id"
+      "_document_id",
+      "team_type"
     ],
     "docs_reference_titles": "/organizations/organizing-members-into-teams/changing-team-visibility"
   },
@@ -13975,7 +13889,8 @@
       "created_at",
       "_document_id",
       "token_scopes",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ]
   },
   {
@@ -14018,7 +13933,8 @@
       "request_id",
       "operation_type",
       "_document_id",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ]
   },
   {
@@ -14126,7 +14042,8 @@
       "user_agent",
       "_document_id",
       "token_scopes",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ],
     "docs_reference_titles": "/organizations/organizing-members-into-teams/removing-organization-members-from-a-team"
   },
@@ -14171,7 +14088,8 @@
       "@timestamp",
       "_document_id",
       "programmatic_access_type",
-      "request_access_security_header"
+      "request_access_security_header",
+      "team_type"
     ]
   },
   {

src/audit-logs/data/fpt/user.json

@@ -2089,7 +2089,7 @@
   },
   {
     "action": "git.clone",
-    "description": "A repository was cloned.",
+    "description": "A repository was cloned. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
     "docs_reference_links": "N/A",
     "fields": [
       "transport_protocol",
@@ -2110,7 +2110,7 @@
   },
   {
     "action": "git.fetch",
-    "description": "Changes were fetched from a repository.",
+    "description": "Changes were fetched from a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
     "docs_reference_links": "N/A",
     "fields": [
       "action",
@@ -2132,7 +2132,7 @@
   },
   {
     "action": "git.push",
-    "description": "Changes were pushed to a repository.",
+    "description": "Changes were pushed to a repository. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
     "docs_reference_links": "N/A",
     "fields": [
       "transport_protocol",
@@ -5544,7 +5544,8 @@
       "created_at",
       "operation_type",
       "business",
-      "business_id"
+      "business_id",
+      "oauth_application_name"
     ]
   },
   {
@@ -5607,7 +5608,8 @@
       "created_at",
       "operation_type",
       "business",
-      "business_id"
+      "business_id",
+      "oauth_application_name"
     ]
   },
   {
@@ -6819,27 +6821,6 @@
     ],
     "docs_reference_titles": "About push protection"
   },
-  {
-    "action": "org_secret_scanning_push_protection_pattern_configuration.updated",
-    "description": "The push protection pattern configuration was updated for your org.",
-    "docs_reference_links": "/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise",
-    "fields": [
-      "actor",
-      "actor_id",
-      "user_agent",
-      "request_id",
-      "user",
-      "user_id",
-      "org",
-      "org_id",
-      "business",
-      "business_id",
-      "action",
-      "_document_id",
-      "@timestamp"
-    ],
-    "docs_reference_titles": "Managing GitHub Advanced Security features for your enterprise"
-  },
   {
     "action": "org.self_hosted_runner_offline",
     "description": "The runner application was stopped. This event is not available in the web interface, only via the REST API, audit log streaming, or JSON/CSV exports.",
@@ -14179,7 +14160,8 @@
       "org",
       "action",
       "actor",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ],
     "docs_reference_titles": "/organizations/organizing-members-into-teams/adding-organization-members-to-a-team"
   },
@@ -14245,7 +14227,8 @@
       "org_id",
       "@timestamp",
       "actor",
-      "_document_id"
+      "_document_id",
+      "team_type"
     ],
     "docs_reference_titles": "/organizations/organizing-members-into-teams/changing-team-visibility"
   },
@@ -14268,7 +14251,8 @@
       "created_at",
       "_document_id",
       "token_scopes",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ]
   },
   {
@@ -14311,7 +14295,8 @@
       "request_id",
       "operation_type",
       "_document_id",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ]
   },
   {
@@ -14482,7 +14467,8 @@
       "user_agent",
       "_document_id",
       "token_scopes",
-      "programmatic_access_type"
+      "programmatic_access_type",
+      "team_type"
     ],
     "docs_reference_titles": "/organizations/organizing-members-into-teams/removing-organization-members-from-a-team"
   },
@@ -14527,7 +14513,8 @@
       "@timestamp",
       "_document_id",
       "programmatic_access_type",
-      "request_access_security_header"
+      "request_access_security_header",
+      "team_type"
     ]
   },
   {