Skip to content

Commit c8293b5

Browse files
Add event dataset for missing rule in Github integration (#4278)
(cherry picked from commit 53cfeb7)
1 parent 39e9c2f commit c8293b5

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

rules/integrations/github/impact_github_repository_deleted.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
creation_date = "2023/08/29"
33
integration = ["github"]
44
maturity = "production"
5-
updated_date = "2024/11/27"
5+
updated_date = "2024/12/03"
66
min_stack_version = "8.12.0"
77
min_stack_comments = "Breaking change at 8.12.0 for the Github Integration."
88

@@ -33,7 +33,7 @@ timestamp_override = "event.ingested"
3333
type = "eql"
3434

3535
query = '''
36-
configuration where event.module == "github" and event.action == "repo.destroy"
36+
configuration where event.module == "github" and event.dataset == "github.audit" and event.action == "repo.destroy"
3737
'''
3838

3939

0 commit comments

Comments
 (0)