diff --git a/rules/cloud/github/github_delete_action_invoked.yml b/rules/cloud/github/github_delete_action_invoked.yml
index 307ac4b29..67dac1f33 100644
--- a/rules/cloud/github/github_delete_action_invoked.yml
+++ b/rules/cloud/github/github_delete_action_invoked.yml
@@ -14,7 +14,6 @@ logsource:
     service: audit
 detection:
     selection:
-        operation: 'remove'
         action:
             - 'codespaces.delete'
             - 'environment.delete'
diff --git a/rules/cloud/github/github_new_secret_created.yml b/rules/cloud/github/github_new_secret_created.yml
index 5530b9c49..91592c8f3 100644
--- a/rules/cloud/github/github_new_secret_created.yml
+++ b/rules/cloud/github/github_new_secret_created.yml
@@ -14,7 +14,6 @@ logsource:
     service: audit
 detection:
     selection:
-        operation: 'create'
         action:
             - 'org.create_actions_secret'
             - 'environment.create_actions_secret'
diff --git a/rules/cloud/github/github_outside_collaborator_detected.yml b/rules/cloud/github/github_outside_collaborator_detected.yml
index 5354e770d..184e7799d 100644
--- a/rules/cloud/github/github_outside_collaborator_detected.yml
+++ b/rules/cloud/github/github_outside_collaborator_detected.yml
@@ -16,7 +16,6 @@ logsource:
     service: audit
 detection:
     selection:
-        operation: 'authentication'
         action:
             - 'project.update_user_permission'
             - 'org.remove_outside_collaborator'