Skip to content

GH_Repository.md

Latest commit

 

History

History
165 lines (158 loc) · 7.76 KB

GH_Repository.md

File metadata and controls

165 lines (158 loc) · 7.76 KB
Raw

GH_Repository

General Information

Represents a GitHub repository within the organization. Repository nodes capture metadata about the repo including visibility, Actions enablement status, and security configuration. Repository role nodes (GH_RepoRole) are created alongside each repository to represent the permission levels available.

For repositories with active workflows, the collector records the applicable default workflow permissions and whether workflows may approve pull request reviews. These properties preserve the repository-level policy input later used to derive effective GITHUB_TOKEN permissions for GH_WorkflowJob nodes.

Properties

Property Type Description
name string The node name used for matching and display.
displayname string The human-readable display name.
environmentid string The identifier of the GitHub environment where this node was collected.
last_seen datetime The timestamp when this node was last observed during collection.
node_id string The stable identifier used as the OpenGraph node ID; this is the native GitHub node ID where available.
collected boolean Collected/generated by OpenHound.
database_id integer The repository's numeric GitHub database ID used in immutable OIDC subjects.
full_name string The fully qualified name (e.g., org/repo).
private boolean Whether the repository is private.
html_url string URL to the repository on GitHub.
description string The repository description.
created_at string When the repository was created.
updated_at string When the repository was last updated.
pushed_at string When the repository last had a push.
archived boolean Whether the repository is archived.
disabled boolean Whether the repository is disabled.
visibility string The visibility level: public, private, or internal.
default_branch string The name of the default branch (e.g., main).
size integer Repository size in kilobytes as reported by GitHub.
open_issues_count integer Number of open issues.
allow_forking boolean Whether forking is allowed.
web_commit_signoff_required boolean Whether web-based commits require sign-off.
forks integer Number of forks.
open_issues integer Number of open issues (includes pull requests).
watchers integer Number of watchers.
owner_name string The login of the repository owner.
owner_id string The opaque GraphQL node ID of the repository owner.
owner_database_id integer The numeric GitHub database ID of the repository owner used in immutable OIDC subjects.
environment_name string The name of the environment (GitHub organization).
actions_enabled boolean Whether GitHub Actions is enabled for this repository.
self_hosted_runners_enabled boolean Whether the repository may use self-hosted runners.
secret_scanning string Status of secret scanning (e.g., enabled, disabled).
branch_ruleset_count integer Number of branch-targeted rulesets that apply to this repository.
has_branch_rulesets boolean Whether at least one branch-targeted ruleset applies to this repository.
default_workflow_permissions string The repository's applicable default GITHUB_TOKEN workflow permissions.
can_approve_pull_request_reviews boolean Whether workflows may approve pull request reviews.
query_branches string Query for branches.
query_protected_branches string Query for protected branches.
query_branch_protection_rules string Query for branch protection rules.
query_roles string Query for roles.
query_teams string Query for teams.
query_workflows string Query for workflows.
query_runners string Query for runners.
query_environments string Query for environments.
query_secrets string Query for secrets.
query_variables string Query for variables.
query_secret_scanning_alerts string Query for secret scanning alerts.
query_explicit_readers string Query for explicit readers.
query_unrolled_readers string Query for unrolled readers.
query_explicit_writers string Query for explicit writers.
query_unrolled_writers string Query for unrolled writers.

Diagram

graph LR
    n0["GH_AppInstallation"]
    n1["GH_Repository"]
    n2["GH_Organization"]
    n3["GH_PersonalAccessToken"]
    n4["GH_RepoRole"]
    n5["GH_Branch"]
    n6["GH_BranchProtectionRule"]
    n7["GH_Environment"]
    n8["GH_OrgRunnerGroup"]
    n9["GH_OrgSecret"]
    n10["GH_OrgVariable"]
    n11["GH_RepoRunner"]
    n12["GH_RepoSecret"]
    n13["GH_RepoVariable"]
    n14["GH_SecretScanningAlert"]
    n15["GH_Workflow"]
    n0 -.->|GH_CanAccess| n1
    n2 -->|GH_Owns| n1
    n3 -.->|GH_CanAccess| n1
    n4 -.->|GH_AddAssignee| n1
    n4 -.->|GH_AddLabel| n1
    n4 -->|GH_AdminTo| n1
    n4 -.->|GH_BypassBranchProtection| n1
    n4 -.->|GH_CanCreateBranch| n1
    n4 -->|GH_CanCreateEnvironment| n1
    n4 -->|GH_CanPwnRequest| n1
    n4 -.->|GH_CloseDiscussion| n1
    n4 -.->|GH_CloseIssue| n1
    n4 -.->|GH_ClosePullRequest| n1
    n4 -.->|GH_ConvertIssuesToDiscussions| n1
    n4 -.->|GH_CreateDiscussionCategory| n1
    n4 -.->|GH_CreateSoloMergeQueueEntry| n1
    n4 -.->|GH_CreateTag| n1
    n4 -.->|GH_DeleteAlertsCodeScanning| n1
    n4 -.->|GH_DeleteDiscussion| n1
    n4 -.->|GH_DeleteDiscussionComment| n1
    n4 -.->|GH_DeleteIssue| n1
    n4 -.->|GH_DeleteTag| n1
    n4 -.->|GH_EditCategoryOnDiscussion| n1
    n4 -.->|GH_EditDiscussionCategory| n1
    n4 -.->|GH_EditDiscussionComment| n1
    n4 -.->|GH_EditRepoAnnouncementBanners| n1
    n4 -.->|GH_EditRepoCustomPropertiesValues| n1
    n4 -.->|GH_EditRepoMetadata| n1
    n4 -.->|GH_EditRepoProtections| n1
    n4 -.->|GH_JumpMergeQueue| n1
    n4 -.->|GH_ManageDeployKeys| n1
    n4 -.->|GH_ManageDiscussionBadges| n1
    n4 -.->|GH_ManageRepoSecurityProducts| n1
    n4 -.->|GH_ManageSecurityProducts| n1
    n4 -.->|GH_ManageSettingsMergeTypes| n1
    n4 -.->|GH_ManageSettingsPages| n1
    n4 -.->|GH_ManageSettingsProjects| n1
    n4 -.->|GH_ManageSettingsWiki| n1
    n4 -.->|GH_ManageTopics| n1
    n4 -.->|GH_ManageWebhooks| n1
    n4 -.->|GH_MarkAsDuplicate| n1
    n4 -.->|GH_PushProtectedBranch| n1
    n4 -.->|GH_ReadCodeScanning| n1
    n4 -.->|GH_ReadRepoContents| n1
    n4 -.->|GH_RemoveAssignee| n1
    n4 -.->|GH_RemoveLabel| n1
    n4 -.->|GH_ReopenDiscussion| n1
    n4 -.->|GH_ReopenIssue| n1
    n4 -.->|GH_ReopenPullRequest| n1
    n4 -.->|GH_RequestPrReview| n1
    n4 -.->|GH_ResolveDependabotAlerts| n1
    n4 -.->|GH_ResolveSecretScanningAlerts| n1
    n4 -.->|GH_RunOrgMigration| n1
    n4 -.->|GH_SetInteractionLimits| n1
    n4 -.->|GH_SetIssueType| n1
    n4 -.->|GH_SetMilestone| n1
    n4 -.->|GH_SetSocialPreview| n1
    n4 -.->|GH_ToggleDiscussionAnswer| n1
    n4 -.->|GH_ToggleDiscussionCommentMinimize| n1
    n4 -.->|GH_ViewDependabotAlerts| n1
    n4 -.->|GH_ViewSecretScanningAlerts| n1
    n4 -.->|GH_WriteCodeScanning| n1
    n4 -.->|GH_WriteRepoContents| n1
    n4 -.->|GH_WriteRepoPullRequests| n1
    n1 -.->|GH_Contains| n5
    n1 -.->|GH_Contains| n6
    n1 -->|GH_CanDeployToEnvironment| n7
    n1 -.->|GH_Contains| n7
    n1 -->|GH_CanUseRunner| n8
    n1 -.->|GH_IsEligibleFor| n8
    n1 -->|GH_HasSecret| n9
    n1 -->|GH_HasVariable| n10
    n1 -.->|GH_CanUseRunner| n11
    n1 -.->|GH_Contains| n11
    n1 -.->|GH_Contains| n12
    n1 -->|GH_HasSecret| n12
    n1 -.->|GH_Contains| n13
    n1 -->|GH_HasVariable| n13
    n1 -.->|GH_Contains| n14
    n1 -.->|GH_Contains| n15
Loading