Audit events

Helena records an audit entry for every change to your tenant, and for every authentication by a service account. Each entry records:

• the action and the time
• the actor: a user, a service account or the system
• the actor's IP address
• the details listed below

Entries outlive what they describe. After a test, member or even the whole tenant is deleted, its history keeps the UUIDs, so it can still be correlated.

Secrets, tokens, passwords and invitation tokens are never written to the audit log. Changes to secrets record only which secret changed.

Note

The Helena UI has no audit log viewer yet. This page lists what is recorded.

Tenant and members

Action	Recorded when	Key details
tenant.created	A tenant is registered	Tenant name, plan
tenant.updated	The tenant is renamed	Changed fields
tenant.ownership_transferred	Ownership changes	Previous and new owner
tenant.deleted	The tenant is deleted	Tenant name, number of members, deleted user IDs
user.registered	The Owner signs up
user.invitation_sent / _resent / _revoked	Invitations are managed	Invitee email
user.invitation_accepted	An invitation is accepted	New user, who invited them
user.removed	A member is removed	User and email
user.self_deleted	A user deletes their own account

Environments

Action	Key details
environment.created	Name
environment.updated	Previous name, changed fields
environment.deleted	Name, the fallback environment, users who were moved to it
environment.switched	New and previous environment

Tests

Action	Key details
test.created	Environment, test name, type, schedule
test.updated	Changed fields (old and new values), changed configuration keys, changed secret names
test.deleted	Environment, test name, type
test.signing_key_rotated	Previous and new kid, algorithm
test.run_triggered	Test, run, trigger (manual, api, schedule)

Service accounts

Action	Key details
service_account.created	Name, scopes, environment access
service_account.updated	Changed fields, whether tokens were revoked
service_account.deleted	Credentials deleted with it
service_account.credential_created	Credential type and client ID. OIDC trusts also record the issuer, subject, audience and claim conditions.
service_account.credential_revoked / _deleted	Client ID
service_account.authenticated	Credential used, token expiry. OIDC also records the token's issuer and subject.
service_account.authentication_failed	Credential and a reason, such as invalid_secret, credential_revoked, subject_mismatch, audience_mismatch, claim_mismatch or replayed
service_account.token_revoked	Credential
service_account.access_denied	Required scope, method and path

Billing

billing.checkout_started, billing.checkout_completed, billing.plan_changed, billing.subscription_cancelled, billing.subscription_resumed, billing.portal_opened, and billing.webhook_subscription_updated / billing.webhook_subscription_cancelled, which are recorded by the system when Stripe reports a change.