Skip to main content
Applies to BloodHound Enterprise and CE Represents a repository-level permission role. Each repository has five default roles (Read, Write, Admin, Triage, Maintain) plus any custom repository roles defined at the organization level. Repo roles define what actions a user or team can perform on a specific repository. Default roles form an inheritance hierarchy (Triage → Read, Maintain → Write, Admin includes all), and custom roles inherit from one of the base roles. Created by: Git-HoundRepository

​
Edges

The tables below list edges defined by the GitHound extension only. Additional edges to or from this node may be created by other extensions.

​
Inbound Edges

Edge TypeSource Node TypesTraversable
GH_ContainsGH_Organization, GH_Repository, GH_Environment❌
GH_HasBaseRoleGH_OrgRole, GH_RepoRole✅
GH_HasRoleGH_User, GH_Team✅

​
Outbound Edges

Edge TypeDestination Node TypesTraversable
GH_AddAssigneeGH_Repository❌
GH_AddLabelGH_Repository❌
GH_AdminToGH_Repository❌
GH_BypassBranchProtectionGH_Repository❌
GH_CanCreateBranchGH_Repository✅
GH_CanEditProtectionGH_Branch✅
GH_CanReadSecretScanningAlertGH_SecretScanningAlert✅
GH_CanWriteBranchGH_Branch✅
GH_CloseDiscussionGH_Repository❌
GH_CloseIssueGH_Repository❌
GH_ClosePullRequestGH_Repository❌
GH_ConvertIssuesToDiscussionsGH_Repository❌
GH_CreateDiscussionCategoryGH_Repository❌
GH_CreateSoloMergeQueueEntryGH_Repository❌
GH_CreateTagGH_Repository❌
GH_DeleteAlertsCodeScanningGH_Repository❌
GH_DeleteDiscussionGH_Repository❌
GH_DeleteDiscussionCommentGH_Repository❌
GH_DeleteIssueGH_Repository❌
GH_DeleteTagGH_Repository❌
GH_EditCategoryOnDiscussionGH_Repository❌
GH_EditDiscussionCategoryGH_Repository❌
GH_EditDiscussionCommentGH_Repository❌
GH_EditRepoAnnouncementBannersGH_Repository❌
GH_EditRepoCustomPropertiesValuesGH_Repository❌
GH_EditRepoMetadataGH_Repository❌
GH_EditRepoProtectionsGH_Repository❌
GH_HasBaseRoleGH_OrgRole, GH_RepoRole✅
GH_JumpMergeQueueGH_Repository❌
GH_ManageDeployKeysGH_Repository❌
GH_ManageDiscussionBadgesGH_Repository❌
GH_ManageRepoSecurityProductsGH_Repository❌
GH_ManageSecurityProductsGH_Repository❌
GH_ManageSettingsMergeTypesGH_Repository❌
GH_ManageSettingsPagesGH_Repository❌
GH_ManageSettingsProjectsGH_Repository❌
GH_ManageSettingsWikiGH_Repository❌
GH_ManageTopicsGH_Repository❌
GH_ManageWebhooksGH_Repository❌
GH_MarkAsDuplicateGH_Repository❌
GH_PushProtectedBranchGH_Repository❌
GH_ReadCodeScanningGH_Repository❌
GH_ReadRepoContentsGH_Repository❌
GH_RemoveAssigneeGH_Repository❌
GH_RemoveLabelGH_Repository❌
GH_ReopenDiscussionGH_Repository❌
GH_ReopenIssueGH_Repository❌
GH_ReopenPullRequestGH_Repository❌
GH_RequestPrReviewGH_Repository❌
GH_ResolveDependabotAlertsGH_Repository❌
GH_RunOrgMigrationGH_Repository❌
GH_SetInteractionLimitsGH_Repository❌
GH_SetIssueTypeGH_Repository❌
GH_SetMilestoneGH_Repository❌
GH_SetSocialPreviewGH_Repository❌
GH_ToggleDiscussionAnswerGH_Repository❌
GH_ToggleDiscussionCommentMinimizeGH_Repository❌
GH_ViewDependabotAlertsGH_Repository❌
GH_ViewSecretScanningAlertsGH_Organization, GH_Repository❌
GH_WriteCodeScanningGH_Repository❌
GH_WriteRepoContentsGH_Repository❌
GH_WriteRepoPullRequestsGH_Repository❌

​
Properties

Property NameData TypeDescription
objectidstringA deterministic ID derived from the repo node_id and role name.
namestringThe fully qualified role name (e.g., repoName\read).
idstringSame as objectid.
short_namestringThe short role name (e.g., read, write, admin, triage, maintain, or custom role name).
typestringdefault for built-in roles or custom for custom repository roles.
environment_namestringThe name of the environment (GitHub organization).
environmentidstringThe node_id of the environment (GitHub organization).
repository_namestringThe name of the repository this role belongs to.
repository_idstringThe node_id of the repository this role belongs to.

​
Diagram