> ## Documentation Index > Fetch the complete documentation index at: https://specterops-fetch-json-component.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Schema > The OpenGraph extension schema for GitHound Applies to BloodHound Enterprise and CE ## Metadata **Name:** GitHound
**Display Name:** GitHub (GitHound)
**Version:** v1.0.0
**Namespace:** GH
**Environment Kind:** GH\_Organization
**Source Kind:** GitHub This file is automatically generated from the [schema.json](https://github.com/SpecterOps/GitHound/blob/main/schema.json) file that is bundled with GitHub (GitHound). ## Nodes | Icon | Node Kind | Display Name | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------- | ------------------------------------ | | GH_App | [GH\_App](/opengraph/extensions/githound/reference/nodes/gh_app) | GitHub App | | GH_AppInstallation | [GH\_AppInstallation](/opengraph/extensions/githound/reference/nodes/gh_appinstallation) | GitHub App Installation | | GH_Branch | [GH\_Branch](/opengraph/extensions/githound/reference/nodes/gh_branch) | GitHub Branch | | GH_BranchProtectionRule | [GH\_BranchProtectionRule](/opengraph/extensions/githound/reference/nodes/gh_branchprotectionrule) | GitHub Branch Protection Rule | | GH_Environment | [GH\_Environment](/opengraph/extensions/githound/reference/nodes/gh_environment) | GitHub Environment | | GH_EnvironmentSecret | [GH\_EnvironmentSecret](/opengraph/extensions/githound/reference/nodes/gh_environmentsecret) | GitHub Environment Secret | | GH_EnvironmentVariable | [GH\_EnvironmentVariable](/opengraph/extensions/githound/reference/nodes/gh_environmentvariable) | GitHub Environment Variable | | GH_ExternalIdentity | [GH\_ExternalIdentity](/opengraph/extensions/githound/reference/nodes/gh_externalidentity) | GitHub External Identity | | GH_Organization | [GH\_Organization](/opengraph/extensions/githound/reference/nodes/gh_organization) | GitHub Organization | | GH_OrgRole | [GH\_OrgRole](/opengraph/extensions/githound/reference/nodes/gh_orgrole) | GitHub Org Role | | GH_OrgSecret | [GH\_OrgSecret](/opengraph/extensions/githound/reference/nodes/gh_orgsecret) | GitHub Org Secret | | GH_OrgVariable | [GH\_OrgVariable](/opengraph/extensions/githound/reference/nodes/gh_orgvariable) | GitHub Org Variable | | GH_PersonalAccessToken | [GH\_PersonalAccessToken](/opengraph/extensions/githound/reference/nodes/gh_personalaccesstoken) | GitHub Personal Access Token | | GH_PersonalAccessTokenRequest | [GH\_PersonalAccessTokenRequest](/opengraph/extensions/githound/reference/nodes/gh_personalaccesstokenrequest) | GitHub Personal Access Token Request | | GH_RepoRole | [GH\_RepoRole](/opengraph/extensions/githound/reference/nodes/gh_reporole) | GitHub Repo Role | | GH_RepoSecret | [GH\_RepoSecret](/opengraph/extensions/githound/reference/nodes/gh_reposecret) | GitHub Repo Secret | | GH_Repository | [GH\_Repository](/opengraph/extensions/githound/reference/nodes/gh_repository) | GitHub Repository | | GH_RepoVariable | [GH\_RepoVariable](/opengraph/extensions/githound/reference/nodes/gh_repovariable) | GitHub Repo Variable | | GH_SamlIdentityProvider | [GH\_SamlIdentityProvider](/opengraph/extensions/githound/reference/nodes/gh_samlidentityprovider) | GitHub SAML Identity Provider | | GH_SecretScanningAlert | [GH\_SecretScanningAlert](/opengraph/extensions/githound/reference/nodes/gh_secretscanningalert) | GitHub Secret Scanning Alert | | GH_Team | [GH\_Team](/opengraph/extensions/githound/reference/nodes/gh_team) | GitHub Team | | GH_TeamRole | [GH\_TeamRole](/opengraph/extensions/githound/reference/nodes/gh_teamrole) | GitHub Team Role | | GH_User | [GH\_User](/opengraph/extensions/githound/reference/nodes/gh_user) | GitHub User | | GH_Workflow | [GH\_Workflow](/opengraph/extensions/githound/reference/nodes/gh_workflow) | GitHub Workflow | ## Edges | Relationship Kind | Traversable | Description | | -------------------------------------------------------------------------------------------------------------------------------------------------------- | :---------: | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [GH\_AddAssignee](/opengraph/extensions/githound/reference/edges/gh_addassignee) | ❌ | \[Repository] Repo role can assign users to issues and pull requests | | [GH\_AddCollaborator](/opengraph/extensions/githound/reference/edges/gh_addcollaborator) | ❌ | \[Organization] Org role can add outside collaborators | | [GH\_AddLabel](/opengraph/extensions/githound/reference/edges/gh_addlabel) | ❌ | \[Repository] Repo role can add labels to issues and pull requests | | [GH\_AddMember](/opengraph/extensions/githound/reference/edges/gh_addmember) | ✅ | Team role can add members to the team (maintainer privilege) | | [GH\_AdminTo](/opengraph/extensions/githound/reference/edges/gh_adminto) | ❌ | \[Repository] Repo role has admin access to the repository. | | [GH\_BypassBranchProtection](/opengraph/extensions/githound/reference/edges/gh_bypassbranchprotection) | ❌ | \[Repository] Repo role can bypass merge-gate branch protections (PR reviews, lock branch). Suppressed by enforce\_admins. | | [GH\_BypassPullRequestAllowances](/opengraph/extensions/githound/reference/edges/gh_bypasspullrequestallowances) | ❌ | User or team can bypass pull request requirements on a branch protection rule | | [GH\_CanAccess](/opengraph/extensions/githound/reference/edges/gh_canaccess) | ❌ | Personal access token or app installation can access this repository or organization | | [GH\_CanAssumeIdentity](/opengraph/extensions/githound/reference/edges/gh_canassumeidentity) | ✅ | Repository can assume this cloud identity via OIDC federation (Azure workload identity or AWS IAM role) | | [GH\_CanCreateBranch](/opengraph/extensions/githound/reference/edges/gh_cancreatebranch) | ✅ | \[Repository - Computed] Role can create new branches in this repository (unprotected branches that bypass the merge gate) | | [GH\_CanEditProtection](/opengraph/extensions/githound/reference/edges/gh_caneditprotection) | ✅ | \[Repository - Computed] Repo role can modify or remove the branch protection rules governing this branch (computed from GH\_EditRepoProtections + GH\_ProtectedBy) | | [GH\_CanReadSecretScanningAlert](/opengraph/extensions/githound/reference/edges/gh_canreadsecretscanningalert) | ✅ | \[Computed] Role can read secret scanning alerts (computed from GH\_ViewSecretScanningAlerts permission + GH\_Contains) | | [GH\_CanWriteBranch](/opengraph/extensions/githound/reference/edges/gh_canwritebranch) | ✅ | \[Repository - Computed] Role can push to this branch after evaluating branch protection rules, push restrictions, and bypass allowances | | [GH\_CloseDiscussion](/opengraph/extensions/githound/reference/edges/gh_closediscussion) | ❌ | \[Repository] Repo role can close discussions | | [GH\_CloseIssue](/opengraph/extensions/githound/reference/edges/gh_closeissue) | ❌ | \[Repository] Repo role can close issues | | [GH\_ClosePullRequest](/opengraph/extensions/githound/reference/edges/gh_closepullrequest) | ❌ | \[Repository] Repo role can close pull requests | | [GH\_Contains](/opengraph/extensions/githound/reference/edges/gh_contains) | ❌ | Container relationship for organizational hierarchy (org contains secrets/variables, repo contains secrets/variables, environment contains secrets/variables) | | [GH\_ConvertIssuesToDiscussions](/opengraph/extensions/githound/reference/edges/gh_convertissuestodiscussions) | ❌ | \[Repository] Repo role can convert issues to discussions | | [GH\_CreateDiscussionCategory](/opengraph/extensions/githound/reference/edges/gh_creatediscussioncategory) | ❌ | \[Repository] Repo role can create discussion categories | | [GH\_CreateRepository](/opengraph/extensions/githound/reference/edges/gh_createrepository) | ❌ | \[Organization] Org role can create repositories in the organization | | [GH\_CreateSoloMergeQueueEntry](/opengraph/extensions/githound/reference/edges/gh_createsolomergequeueentry) | ❌ | Repo role can create solo merge queue entries | | [GH\_CreateTag](/opengraph/extensions/githound/reference/edges/gh_createtag) | ❌ | \[Repository] Repo role can create tags and releases | | [GH\_CreateTeam](/opengraph/extensions/githound/reference/edges/gh_createteam) | ❌ | \[Organization] Org role can create teams in the organization | | [GH\_DeleteAlertsCodeScanning](/opengraph/extensions/githound/reference/edges/gh_deletealertscodescanning) | ❌ | \[Repository] Repo role can delete code scanning alerts | | [GH\_DeleteDiscussion](/opengraph/extensions/githound/reference/edges/gh_deletediscussion) | ❌ | \[Repository] Repo role can delete discussions | | [GH\_DeleteDiscussionComment](/opengraph/extensions/githound/reference/edges/gh_deletediscussioncomment) | ❌ | \[Repository] Repo role can delete discussion comments | | [GH\_DeleteIssue](/opengraph/extensions/githound/reference/edges/gh_deleteissue) | ❌ | \[Repository] Repo role can delete issues | | [GH\_DeleteTag](/opengraph/extensions/githound/reference/edges/gh_deletetag) | ❌ | \[Repository] Repo role can delete tags and releases | | [GH\_EditCategoryOnDiscussion](/opengraph/extensions/githound/reference/edges/gh_editcategoryondiscussion) | ❌ | \[Repository] Repo role can change the category of a discussion | | [GH\_EditDiscussionCategory](/opengraph/extensions/githound/reference/edges/gh_editdiscussioncategory) | ❌ | \[Repository] Repo role can edit discussion categories | | [GH\_EditDiscussionComment](/opengraph/extensions/githound/reference/edges/gh_editdiscussioncomment) | ❌ | \[Repository] Repo role can edit discussion comments | | [GH\_EditRepoAnnouncementBanners](/opengraph/extensions/githound/reference/edges/gh_editrepoannouncementbanners) | ❌ | \[Repository] Repo role can edit repository announcement banners | | [GH\_EditRepoCustomPropertiesValues](/opengraph/extensions/githound/reference/edges/gh_editrepocustompropertiesvalues) | ❌ | \[Repository] Repo role can edit custom property values on the repository | | [GH\_EditRepoMetadata](/opengraph/extensions/githound/reference/edges/gh_editrepometadata) | ❌ | \[Repository] Repo role can edit repository metadata | | [GH\_EditRepoProtections](/opengraph/extensions/githound/reference/edges/gh_editrepoprotections) | ❌ | Repo role can edit branch protection rules | | [GH\_HasBaseRole](/opengraph/extensions/githound/reference/edges/gh_hasbaserole) | ✅ | Role inherits permissions from another role | | [GH\_HasBranch](/opengraph/extensions/githound/reference/edges/gh_hasbranch) | ❌ | Repository has this branch | | [GH\_HasEnvironment](/opengraph/extensions/githound/reference/edges/gh_hasenvironment) | ❌ | Repository or branch has/can deploy to this environment | | [GH\_HasExternalIdentity](/opengraph/extensions/githound/reference/edges/gh_hasexternalidentity) | ❌ | SAML identity provider has this external identity | | [GH\_HasPersonalAccessToken](/opengraph/extensions/githound/reference/edges/gh_haspersonalaccesstoken) | ❌ | User owns this personal access token that has been granted access to the organization | | [GH\_HasPersonalAccessTokenRequest](/opengraph/extensions/githound/reference/edges/gh_haspersonalaccesstokenrequest) | ❌ | User has a pending personal access token request for the organization | | [GH\_HasRole](/opengraph/extensions/githound/reference/edges/gh_hasrole) | ✅ | User or team has a role assignment (org role, team role, or repo role) | | [GH\_HasSamlIdentityProvider](/opengraph/extensions/githound/reference/edges/gh_hassamlidentityprovider) | ❌ | Organization has this SAML identity provider configured | | [GH\_HasSecret](/opengraph/extensions/githound/reference/edges/gh_hassecret) | ✅ | Repository or environment has access to this secret | | [GH\_HasVariable](/opengraph/extensions/githound/reference/edges/gh_hasvariable) | ✅ | Repository has access to this variable (org-level or repo-level) | | [GH\_HasWorkflow](/opengraph/extensions/githound/reference/edges/gh_hasworkflow) | ❌ | Repository has this workflow | | [GH\_InstalledAs](/opengraph/extensions/githound/reference/edges/gh_installedas) | ✅ | GitHub App is installed as this app installation on an organization | | [GH\_InviteMember](/opengraph/extensions/githound/reference/edges/gh_invitemember) | ❌ | \[Organization] Org role can invite members to the organization | | [GH\_JumpMergeQueue](/opengraph/extensions/githound/reference/edges/gh_jumpmergequeue) | ❌ | Repo role can jump the merge queue | | [GH\_ManageDeployKeys](/opengraph/extensions/githound/reference/edges/gh_managedeploykeys) | ❌ | \[Repository] Repo role can manage deploy keys | | [GH\_ManageDiscussionBadges](/opengraph/extensions/githound/reference/edges/gh_managediscussionbadges) | ❌ | \[Repository] Repo role can manage discussion badges | | [GH\_ManageOrganizationWebhooks](/opengraph/extensions/githound/reference/edges/gh_manageorganizationwebhooks) | ❌ | \[Organization] Org role can manage organization webhooks | | [GH\_ManageRepoSecurityProducts](/opengraph/extensions/githound/reference/edges/gh_managereposecurityproducts) | ❌ | Repo role can manage repo-level security products | | [GH\_ManageSecurityProducts](/opengraph/extensions/githound/reference/edges/gh_managesecurityproducts) | ❌ | Repo role can manage security products | | [GH\_ManageSettingsMergeTypes](/opengraph/extensions/githound/reference/edges/gh_managesettingsmergetypes) | ❌ | \[Repository] Repo role can manage allowed merge types | | [GH\_ManageSettingsPages](/opengraph/extensions/githound/reference/edges/gh_managesettingspages) | ❌ | \[Repository] Repo role can manage GitHub Pages settings | | [GH\_ManageSettingsProjects](/opengraph/extensions/githound/reference/edges/gh_managesettingsprojects) | ❌ | \[Repository] Repo role can manage project settings | | [GH\_ManageSettingsWiki](/opengraph/extensions/githound/reference/edges/gh_managesettingswiki) | ❌ | \[Repository] Repo role can manage wiki settings | | [GH\_ManageTopics](/opengraph/extensions/githound/reference/edges/gh_managetopics) | ❌ | \[Repository] Repo role can manage repository topics | | [GH\_ManageWebhooks](/opengraph/extensions/githound/reference/edges/gh_managewebhooks) | ❌ | \[Repository] Repo role can manage repository webhooks | | [GH\_MapsToUser](/opengraph/extensions/githound/reference/edges/gh_mapstouser) | ❌ | External identity maps to a GitHub user or identity provider user | | [GH\_MarkAsDuplicate](/opengraph/extensions/githound/reference/edges/gh_markasduplicate) | ❌ | \[Repository] Repo role can mark issues or pull requests as duplicates | | [GH\_MemberOf](/opengraph/extensions/githound/reference/edges/gh_memberof) | ✅ | Team role is a member of a team, or team is a nested member of a parent team | | [GH\_OrgBypassCodeScanningDismissalRequests](/opengraph/extensions/githound/reference/edges/gh_orgbypasscodescanningdismissalrequests) | ❌ | \[Organization] Org role can bypass code scanning dismissal requests | | [GH\_OrgBypassSecretScanningClosureRequests](/opengraph/extensions/githound/reference/edges/gh_orgbypasssecretscanningclosurerequests) | ❌ | \[Organization] Org role can bypass secret scanning closure requests | | [GH\_OrgReviewAndManageSecretScanningBypassRequests](/opengraph/extensions/githound/reference/edges/gh_orgreviewandmanagesecretscanningbypassrequests) | ❌ | \[Organization] Org role can review and manage secret scanning bypass requests | | [GH\_OrgReviewAndManageSecretScanningClosureRequests](/opengraph/extensions/githound/reference/edges/gh_orgreviewandmanagesecretscanningclosurerequests) | ❌ | \[Organization] Org role can review and manage secret scanning closure requests | | [GH\_Owns](/opengraph/extensions/githound/reference/edges/gh_owns) | ✅ | Organization owns a repository | | [GH\_ProtectedBy](/opengraph/extensions/githound/reference/edges/gh_protectedby) | ❌ | Branch protection rule protects this branch | | [GH\_PushProtectedBranch](/opengraph/extensions/githound/reference/edges/gh_pushprotectedbranch) | ❌ | \[Repository] Repo role can push to branches with push restrictions. Not affected by enforce\_admins. | | [GH\_ReadCodeScanning](/opengraph/extensions/githound/reference/edges/gh_readcodescanning) | ❌ | \[Repository] Repo role can read code scanning results | | [GH\_ReadOrganizationActionsUsageMetrics](/opengraph/extensions/githound/reference/edges/gh_readorganizationactionsusagemetrics) | ❌ | \[Organization] Org role can read Actions usage metrics | | [GH\_ReadOrganizationCustomOrgRole](/opengraph/extensions/githound/reference/edges/gh_readorganizationcustomorgrole) | ❌ | \[Organization] Org role can read custom org role definitions | | [GH\_ReadOrganizationCustomRepoRole](/opengraph/extensions/githound/reference/edges/gh_readorganizationcustomreporole) | ❌ | \[Organization] Org role can read custom repo role definitions | | [GH\_ReadRepoContents](/opengraph/extensions/githound/reference/edges/gh_readrepocontents) | ❌ | \[Repository] Repo role can read repository contents | | [GH\_RemoveAssignee](/opengraph/extensions/githound/reference/edges/gh_removeassignee) | ❌ | \[Repository] Repo role can remove assignees from issues and pull requests | | [GH\_RemoveLabel](/opengraph/extensions/githound/reference/edges/gh_removelabel) | ❌ | \[Repository] Repo role can remove labels from issues and pull requests | | [GH\_ReopenDiscussion](/opengraph/extensions/githound/reference/edges/gh_reopendiscussion) | ❌ | \[Repository] Repo role can reopen discussions | | [GH\_ReopenIssue](/opengraph/extensions/githound/reference/edges/gh_reopenissue) | ❌ | \[Repository] Repo role can reopen closed issues | | [GH\_ReopenPullRequest](/opengraph/extensions/githound/reference/edges/gh_reopenpullrequest) | ❌ | \[Repository] Repo role can reopen closed pull requests | | [GH\_RequestPrReview](/opengraph/extensions/githound/reference/edges/gh_requestprreview) | ❌ | \[Repository] Repo role can request pull request reviews | | [GH\_ResolveDependabotAlerts](/opengraph/extensions/githound/reference/edges/gh_resolvedependabotalerts) | ❌ | \[Repository] Repo role can resolve Dependabot alerts | | [GH\_ResolveSecretScanningAlerts](/opengraph/extensions/githound/reference/edges/gh_resolvesecretscanningalerts) | ❌ | \[Organization] Org role can resolve secret scanning alerts | | [GH\_RestrictionsCanPush](/opengraph/extensions/githound/reference/edges/gh_restrictionscanpush) | ❌ | User or team is allowed to push to branches protected by this rule | | [GH\_RunOrgMigration](/opengraph/extensions/githound/reference/edges/gh_runorgmigration) | ❌ | \[Repository] Repo role can run organization migrations | | [GH\_SetInteractionLimits](/opengraph/extensions/githound/reference/edges/gh_setinteractionlimits) | ❌ | \[Repository] Repo role can set interaction limits on the repository | | [GH\_SetIssueType](/opengraph/extensions/githound/reference/edges/gh_setissuetype) | ❌ | \[Repository] Repo role can set issue types | | [GH\_SetMilestone](/opengraph/extensions/githound/reference/edges/gh_setmilestone) | ❌ | \[Repository] Repo role can set milestones on issues and pull requests | | [GH\_SetSocialPreview](/opengraph/extensions/githound/reference/edges/gh_setsocialpreview) | ❌ | \[Repository] Repo role can set the repository social preview image | | [GH\_SyncedTo](/opengraph/extensions/githound/reference/edges/gh_syncedto) | ✅ | External identity (Azure, Okta, PingOne) is synced to this GitHub user via SSO/SCIM | | [GH\_ToggleDiscussionAnswer](/opengraph/extensions/githound/reference/edges/gh_togglediscussionanswer) | ❌ | \[Repository] Repo role can toggle discussion answers | | [GH\_ToggleDiscussionCommentMinimize](/opengraph/extensions/githound/reference/edges/gh_togglediscussioncommentminimize) | ❌ | \[Repository] Repo role can minimize discussion comments | | [GH\_TransferRepository](/opengraph/extensions/githound/reference/edges/gh_transferrepository) | ❌ | \[Organization] Org role can transfer repositories | | [GH\_ValidToken](/opengraph/extensions/githound/reference/edges/gh_validtoken) | ✅ | Secret scanning alert contains a valid, active token belonging to this user | | [GH\_ViewDependabotAlerts](/opengraph/extensions/githound/reference/edges/gh_viewdependabotalerts) | ❌ | \[Repository] Repo role can view Dependabot alerts | | [GH\_ViewSecretScanningAlerts](/opengraph/extensions/githound/reference/edges/gh_viewsecretscanningalerts) | ❌ | \[Repository] Role can view secret scanning alerts | | [GH\_WriteCodeScanning](/opengraph/extensions/githound/reference/edges/gh_writecodescanning) | ❌ | \[Repository] Repo role can upload code scanning results | | [GH\_WriteOrganizationActionsSecrets](/opengraph/extensions/githound/reference/edges/gh_writeorganizationactionssecrets) | ❌ | \[Organization] Org role can write Actions secrets | | [GH\_WriteOrganizationActionsSettings](/opengraph/extensions/githound/reference/edges/gh_writeorganizationactionssettings) | ❌ | \[Organization] Org role can write Actions settings | | [GH\_WriteOrganizationActionsVariables](/opengraph/extensions/githound/reference/edges/gh_writeorganizationactionsvariables) | ❌ | \[Organization] Org role can write Actions variables | | [GH\_WriteOrganizationCustomOrgRole](/opengraph/extensions/githound/reference/edges/gh_writeorganizationcustomorgrole) | ✅ | \[Organization] Org role can write custom org role definitions | | [GH\_WriteOrganizationCustomRepoRole](/opengraph/extensions/githound/reference/edges/gh_writeorganizationcustomreporole) | ❌ | \[Organization] Org role can write custom repo role definitions | | [GH\_WriteOrganizationNetworkConfigurations](/opengraph/extensions/githound/reference/edges/gh_writeorganizationnetworkconfigurations) | ❌ | \[Organization] Org role can write network configurations | | [GH\_WriteRepoContents](/opengraph/extensions/githound/reference/edges/gh_writerepocontents) | ❌ | \[Repository] Repo role can write repository contents | | [GH\_WriteRepoPullRequests](/opengraph/extensions/githound/reference/edges/gh_writerepopullrequests) | ❌ | \[Repository] Repo role can create and merge pull requests |