turbot/tailpipe-mod-github-audit-log-detections

Dashboard: Audit Log Activity Dashboard

This dashboard answers the following questions:

  • What is the total number of events?
  • How many events are generated per organization?
  • Which repositories have the most events?
  • Who are the top actors (excluding bots)?
  • What are the top source IPs?
  • What are the most frequently occurring actions?
  • Which repositories have had the highest number of secret scanning alerts created?
This dashboard contains 1 card.

Usage

Install the mod:

mkdir dashboards
cd dashboards
powerpipe mod init
powerpipe mod install github.com/turbot/tailpipe-mod-github-audit-log-detections

Start the Powerpipe server:

powerpipe server

Open http://localhost:9033 in your browser and select Audit Log Activity Dashboard dashboard.

You could also snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe dashboard run github_audit_log_detections.dashboard.activity_dashboard --share

Queries

This dashboard uses the the following queries:
select
action as "Action",
count(*) as "Events"
from
github_audit_log
group by
action
order by
count(*) desc
limit 10;

Tags