---
title: "Get Audit Log"
method: GET
path: "/repos/{repo_id}/security/audit-log"
tags: ["security"]
---

# Get Audit Log

`GET /repos/{repo_id}/security/audit-log`

The repo's security audit trail, newest first (Teams+; owner/admin
for team repos). Cursor-paged — pass ``next_cursor`` back as
``cursor``; the cursor is opaque, do not parse.

## Path parameters

- `repo_id` string, required

## Query parameters

- `event` string, nullable — one audit event kind
- `actor` string, nullable — filter to one user id
- `since` string, nullable — ISO lower bound on created_at
- `until` string, nullable — ISO upper bound on created_at
- `limit` integer
- `cursor` string, nullable — opaque cursor from a prior page

## Response `200`

Successful Response

- SecurityAuditLogResponse
  - `items` SecurityAuditEvent[]
    - `id` string, required
    - `event` string, required
    - `user_id` string, nullable
    - `user_login` string, nullable
    - `team_id` string, nullable
    - `repo_id` string, required
    - `snapshot_id` string, nullable
    - `details` object
    - `ip` string, nullable
    - `user_agent` string, nullable
    - `created_at` string, required
  - `has_more` boolean
  - `next_cursor` string, nullable

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/repowise/apis/repowise-hosted-api.md) · [All operations](https://skmtc.dev/repowise/apis/repowise-hosted-api/llms.txt) · [OpenAPI document](https://skmtc.dev/repowise/apis/repowise-hosted-api/revisions/98c833b3480d?raw)