Does anyone know what to look for in the github audit logs, exactly?

Tangentially, You can view your oauth linked services here https://github.com/settings/applications