GH_Environment

General Information

Represents a GitHub Actions deployment environment configured on a repository. Environments can have protection rules including required reviewers, wait timers, administrator bypass behavior, and deployment branch policies. Repositories always contain their environments. When custom branch policies are configured, the environment also contains one or more GH_EnvironmentBranchPolicy nodes that describe which branches are allowed to deploy. Environment-scoped secrets and variables are modeled as child nodes of the environment and become available to workflow jobs that reference it. GH_CanRequestOIDCTokenFor edges from GH_WorkflowJob nodes identify jobs with a static upper-bound capability to request a GitHub-signed OIDC token for this environment because their effective GITHUB_TOKEN permissions include id-token:write. Runtime permission recalculation, such as forked pull_request permission downgrades, may prevent a specific execution from requesting OIDC even when this edge exists.

Properties

Property	Type	Description
`name`	`string`	The node name used for matching and display.
`displayname`	`string`	The human-readable display name.
`environmentid`	`string`	The identifier of the GitHub environment where this node was collected.
`last_seen`	`datetime`	The timestamp when this node was last observed during collection.
`node_id`	`string`	The stable identifier used as the OpenGraph node ID; this is the native GitHub node ID where available.
`collected`	`boolean`	Collected/generated by OpenHound.
`short_name`	`string`	The environment’s display name (e.g., `production`, `staging`).
`can_admins_bypass`	`boolean`	Whether repository administrators can bypass environment protection rules.
`wait_timer`	`integer`	The wait timer value.
`required_reviewers`	`boolean`	The required reviewers value.
`reviewer_count`	`integer`	The reviewer count value.
`prevent_self_review`	`boolean`	The prevent self review value.
`protected_branches`	`boolean`	The protected branches value.
`custom_branch_policies`	`boolean`	The custom branch policies value.
`repository_name`	`string`	The full name of the containing repository.
`repository_id`	`string`	The ID of the containing repository.
`environment_name`	`string`	The name of the environment (GitHub organization).

Diagram

Edges

The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
GH_ApprovesDeploymentTo	GH_Team, GH_User	❌
GH_CanDeployToEnvironment	GH_Branch, GH_RepoRole, GH_Repository, GH_Team, GH_User	✅
GH_CanEditEnvironment	GH_RepoRole	✅
GH_CanRequestOIDCTokenFor	GH_WorkflowJob	✅
GH_Contains	GH_Repository	❌
GH_DeploysTo	GH_WorkflowJob	❌

Outbound Edges

Edge Type	Destination Node Types	Traversable
GH_Contains	GH_EnvironmentBranchPolicy, GH_EnvironmentSecret, GH_EnvironmentVariable	❌
GH_HasSecret	GH_EnvironmentSecret	✅
GH_HasVariable	GH_EnvironmentVariable	✅

Properties

Property	Type	Description
`name`	`str`	-
`displayname`	`str`	-
`environmentid`	`str`	-
`last_seen`	`datetime`	-
`node_id`	`str`	-
`collected`	`bool`	Collected/generated by OpenHound
`short_name`	`str \| None`	The environment’s display name (e.g., `production`, `staging`).
`can_admins_bypass`	`bool \| None`	Whether repository administrators can bypass environment protection rules.
`wait_timer`	`int \| None`	-
`required_reviewers`	`bool`	-
`reviewer_count`	`int`	-
`prevent_self_review`	`bool \| None`	-
`protected_branches`	`bool \| None`	-
`custom_branch_policies`	`bool \| None`	-
`repository_name`	`str \| None`	The full name of the containing repository.
`repository_id`	`str \| None`	The ID of the containing repository.
`environment_name`	`str \| None`	The name of the environment (GitHub organization).

Get Started with BloodHound

Install a Data Collector

Collect Data

OpenGraph

OpenHound

Analyze Attack Path Data

Manage BloodHound

API & Integrations

On-premises BloodHound Enterprise

Resources

General Information

Properties

Diagram

Edges

Inbound Edges

Outbound Edges

Properties

​General Information

​Properties

​Diagram

​Edges

​Inbound Edges

​Outbound Edges

​Properties

General Information

Properties

Diagram

Edges

Inbound Edges

Outbound Edges

Properties