> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_EnvironmentSecret

> An environment-level GitHub Actions secret scoped to a specific deployment environment

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## General Information

Represents an environment-level GitHub Actions secret. These secrets are scoped to a specific deployment environment and are only available to workflow jobs that reference that environment.

The containing environment is linked to the secret with [GH\_Contains](/opengraph/extensions/github/edges/gh_contains) and [GH\_HasSecret](/opengraph/extensions/github/edges/gh_hassecret) edges. Workflow steps that reference the secret by name receive [GH\_UsesSecret](/opengraph/extensions/github/edges/gh_usessecret) edges when their job targets the same environment.

## Properties

| Property | Type | Description |
| - | - | - |
| `name` | `string` | The node name used for matching and display. |
| `displayname` | `string` | The human-readable display name. |
| `environmentid` | `string` | The identifier of the GitHub environment where this node was collected. |
| `last_seen` | `datetime` | The timestamp when this node was last observed during collection. |
| `node_id` | `string` | The stable identifier used as the OpenGraph node ID; this is the native GitHub node ID where available. |
| `deployment_environment_name` | `string` | The name of the containing deployment environment. |
| `deployment_environmentid` | `string` | The node\_id of the containing deployment environment. |
| `repository_name` | `string` | The repository name property. |
| `repository_id` | `string` | The repository id property. |
| `environment_name` | `string` | The name of the environment (GitHub organization). |
| `created_at` | `string` | When the secret was created. |
| `updated_at` | `string` | When the secret was last updated. |

## Diagram

```mermaid theme={null}
graph LR
    n0["GH_Environment"]
    n1["GH_EnvironmentSecret"]
    n2["GH_WorkflowJob"]
    n3["GH_WorkflowStep"]
    n0 -.->|GH_Contains| n1
    n0 -->|GH_HasSecret| n1
    n2 -->|GH_CanAccessSecret| n1
    n2 -.->|GH_UsesSecret| n1
    n3 -.->|GH_UsesSecret| n1
```

## Edges

<Note>
  The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.
</Note>

```mermaid theme={null}
flowchart LR

    GH_Environment["GH_Environment"]
    GH_EnvironmentSecret["GH_EnvironmentSecret"]
    GH_WorkflowJob["GH_WorkflowJob"]
    GH_WorkflowStep["GH_WorkflowStep"]
    GH_Environment -- GH_Contains --> GH_EnvironmentSecret
    GH_Environment -- GH_HasSecret --> GH_EnvironmentSecret
    GH_WorkflowJob -- GH_CanAccessSecret --> GH_EnvironmentSecret
    GH_WorkflowJob -- GH_UsesSecret --> GH_EnvironmentSecret
    GH_WorkflowStep -- GH_UsesSecret --> GH_EnvironmentSecret
```

### Inbound Edges

| Edge Type | Source Node Types | Traversable |
| - | - | - |
| [GH\_CanAccessSecret](/opengraph/extensions/github/edges/gh_canaccesssecret) | [GH\_WorkflowJob](/opengraph/extensions/github/nodes/gh_workflowjob) | ✅ |
| [GH\_Contains](/opengraph/extensions/github/edges/gh_contains) | [GH\_Environment](/opengraph/extensions/github/nodes/gh_environment) | ❌ |
| [GH\_HasSecret](/opengraph/extensions/github/edges/gh_hassecret) | [GH\_Environment](/opengraph/extensions/github/nodes/gh_environment) | ✅ |
| [GH\_UsesSecret](/opengraph/extensions/github/edges/gh_usessecret) | [GH\_WorkflowJob](/opengraph/extensions/github/nodes/gh_workflowjob), [GH\_WorkflowStep](/opengraph/extensions/github/nodes/gh_workflowstep) | ❌ |

### Outbound Edges

No outbound edges are defined by the GitHub extension for this node.

## Properties

| Property | Type | Description |
| - | - | - |
| `name` | `str` | - |
| `displayname` | `str` | - |
| `environmentid` | `str` | - |
| `last_seen` | `datetime` | - |
| `node_id` | `str` | - |
| `deployment_environment_name` | `str \| None` | The name of the containing deployment environment. |
| `deployment_environmentid` | `str \| None` | The node\_id of the containing deployment environment. |
| `repository_name` | `str \| None` | The repository name property. |
| `repository_id` | `str \| None` | The repository id property. |
| `environment_name` | `str \| None` | The name of the environment (GitHub organization). |
| `created_at` | `str \| None` | When the secret was created. |
| `updated_at` | `str \| None` | When the secret was last updated. |