libertymutual / ssh-key-enforcer-stash

Layers additional controls over Bitbucket's SSH key features that enforce the stronger controls required in an enterprise environment.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Enhance Logging/Audit for key creation and purging.

eddiewebb opened this issue · comments

Audit Events

Expose details logged below as internal Audit Event as well.

Meta to expose in API

  • Created Date

Info to log on creation

Info to log on purge

  • Username (currently shows user ID, internal long)
  • Key Type
  • Created Date

Although audit events are supported for repos and projects, the related SshKeyAccessGrantedEvent does not seem to include any details on which repo/project it was granted.

We've added the logging details of user and key details for creation and purge, but wil need to defer repo level audit logging.

Closed with paired delivery @jdesulme