GH_Environment - SpecterOps

Represents a GitHub Actions deployment environment configured on a repository. Environments can have protection rules including required reviewers, wait timers, and deployment branch policies. When custom branch policies are configured, the environment is connected to specific branches; otherwise, it is connected directly to the repository.

Edges

The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
GH_HasEnvironment	GH_Repository, GH_Branch	❌

Outbound Edges

Edge Type	Destination Node Types	Traversable
GH_CanAssumeIdentity	AZFederatedIdentityCredential, `AWSRole`	✅
GH_Contains	GH_User, GH_Team, GH_Repository, GH_OrgRole, GH_RepoRole, GH_TeamRole, GH_OrgSecret, GH_AppInstallation, GH_PersonalAccessToken, GH_PersonalAccessTokenRequest, GH_RepoSecret, GH_EnvironmentSecret, GH_SecretScanningAlert	❌
GH_HasSecret	GH_OrgSecret, GH_RepoSecret, GH_EnvironmentSecret	✅

Properties

Property Name	Data Type	Description
objectid	string	The GitHub `node_id` of the environment, used as the unique graph identifier.
id	integer	The numeric GitHub ID of the environment.
node_id	string	The GitHub node ID. Redundant with objectid.
name	string	The fully qualified environment name (e.g., `repoName\production`).
short_name	string	The environment’s display name (e.g., `production`, `staging`).
can_admins_bypass	boolean	Whether repository administrators can bypass environment protection rules.
environment_name	string	The name of the environment (GitHub organization)
environmentid	string	The node_id of the environment (GitHub organization)
repository_name	string	The full name of the containing repository.
repository_id	string	The ID of the containing repository.

Diagram