> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_CanEditEnvironment

> Repo admin role can edit the configuration of this GitHub environment

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Traversable: ✅

| Start                                                          | Kind                   | End                                                                  |
| -------------------------------------------------------------- | ---------------------- | -------------------------------------------------------------------- |
| [GH\_RepoRole](/opengraph/extensions/github/nodes/gh_reporole) | GH\_CanEditEnvironment | [GH\_Environment](/opengraph/extensions/github/nodes/gh_environment) |

```mermaid theme={null}
flowchart LR
    GH_Environment["GH_Environment"]
    GH_RepoRole["GH_RepoRole"]
    GH_RepoRole -- GH_CanEditEnvironment --> GH_Environment
```

## General Information

The traversable GH\_CanEditEnvironment edge indicates that a repository role can modify the configuration of a GitHub environment. In the current model, this edge is emitted for the repository's built-in `admin` role to every environment contained in that repository.

Editing an environment is security-relevant because environment configuration controls deployment protections such as required reviewers, self-review restrictions, wait timers, deployment branch policies, and the "allow administrators to bypass configured protection rules" setting. An attacker who can edit an environment may be able to weaken or remove those controls, making later deployment and secret access paths possible.

This edge is distinct from [GH\_CanDeployToEnvironment](/opengraph/extensions/github/edges/gh_candeploytoenvironment):

* **GH\_CanEditEnvironment** means the role can manage the environment's settings.
* **[GH\_CanDeployToEnvironment](/opengraph/extensions/github/edges/gh_candeploytoenvironment)** means the source satisfies the modeled deployment policy, reviewer gate, or administrator bypass condition for the environment.

## Edge Schema

| Source                                                         | Destination                                                          | Traversable |
| -------------------------------------------------------------- | -------------------------------------------------------------------- | ----------- |
| [GH\_RepoRole](/opengraph/extensions/github/nodes/gh_reporole) | [GH\_Environment](/opengraph/extensions/github/nodes/gh_environment) | `true`      |

## Diagram

```mermaid theme={null}
graph LR
    n0["GH_RepoRole"]
    n1["GH_Environment"]
    n0 -->|GH_CanEditEnvironment| n1
```