Skip to main content
Applies to BloodHound Enterprise and CE

Edge Schema

General Information

The non-traversable GH_UsesVariable edge links a workflow step to the variable it references via a ${{ vars.NAME }} expression. This edge maps variable consumption within workflows. Unlike secrets, variable values are readable via the API, making them lower sensitivity, but they can still influence workflow behavior.

Matching strategy

Edges use match_by: property with two matchers to disambiguate between variables with the same name across repositories: This means one ${{ vars.MY_VAR }} expression can produce up to two GH_UsesVariable edges.

Context property

The edge carries a context property indicating where the reference was found:
  • with — inside a with: input block of a uses: action step
  • env — inside the step’s env: block
  • run — inline within a run: shell script