GitHub Repository Pages Site Changed to Public

SigmaHQ Detections@sigmaHQ

•updated Nov 3, 2025•2•0•41

Detects when a GitHub Pages site of a repository is made public. This action, while potentially part of a legitimate publishing process, could also indicate an adversary attempting to expose sensitive information or code publicly. Monitoring this activity helps identify potential unauthorized data exposure.