GithubFunction connector not using the correct api endpoint

[aka0]

API endpoint https://api.github.com/repos/$orgName/$repoName/traffic/clones referenced in the GithubFunction connector only provides a "total number of clones and breakdown per day or week for the last 14 days" and does not produce actual Git clone events (who cloned repo from where).

Link to code:

Azure-Sentinel/DataConnectors/GithubFunction/AzureFunctionGitHub/GitHubTimerTrigger/run.ps1

Line 356 in f832c10

$uri = "https://api.github.com/repos/$orgName/$repoName/traffic/clones"

Vendor doc reference: traffic/clones

Correct API endpoint should be: https://docs.github.com/en/enterprise-cloud@latest/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/audit-log-events-for-your-enterprise#git

[github-actions]

Thank you for submitting an Issue to the Azure Sentinel GitHub repo! You should expect an initial response to your Issue from the team within 5 business days. Note that this response may be delayed during holiday periods. For urgent, production-affecting issues please raise a support ticket via the Azure Portal.

[v-sudkharat]

Hi @aka0, thanks for flagging this issue, we will soon get back to you on this. Thanks!

[v-rbajaj]

Hi @aka0, we are investigating on this issue and we will get back to you once there is an update.

[v-rbajaj]

Hi @aka0, we are reaching out to concerned team on this issue, you will get an update by 13 Oct 2023.

[v-rbajaj]

Hi @aka0, sorry for the delay, we are reaching out to concerned team on this issue, you will get an update by 07 Nov 2023

[v-rbajaj]

Hi @aka0, can you please let us to know which API exactly you are expecting to hit for getting the actual git clone events?
Moreover, the description of the data connector says that it is expected to gather Audit, Repo and vulnerability logs only.

[v-rbajaj]

Hi @aka0, Gentle Reminder: We are awaiting for your response on this issue. If you still need to keep this issue active please respond on it in the next 2 days . If we don't receive response, we will be close this issue.

[v-rbajaj]

Hi @aka0, Since we have not received a response in the last 5 days, we are closing your issue
#9078 as per our standard operating procedures. If you still need support for this issue, feel free to re-open at any time. Thank you for your co-operation.