Skip to content

Commit 5f05c3f

Browse files
committed
bump og-docs-automation and fix broken links
1 parent a8565ac commit 5f05c3f

213 files changed

Lines changed: 918 additions & 3276 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
## General Information
22

3-
The non-traversable `GH_MapsToUser` edge maps an external identity (provisioned via SAML or SCIM) to a GitHub user within the organization, or to an external IdP user (such as [AZUser](https://bloodhound.specterops.io/resources/nodes/az-user), [Okta_User](https://bloodhound.specterops.io/opengraph/extensions/oktahound/reference/nodes/okta_user), or [PingOneUser](https://github.com/andyrobbins/PingOneHound?tab=readme-ov-file#schema)) in hybrid graph scenarios. It is created by `Git-HoundGraphQlSamlProvider` for SAML-linked identities and `Git-HoundScimUser` for SCIM-provisioned identities. This edge represents identity correlation rather than an attack path, connecting a user's external IdP account to their GitHub account for visibility into federated identity mappings.
3+
The non-traversable `GH_MapsToUser` edge maps an external identity (provisioned via SAML or SCIM) to a GitHub user within the organization, or to an external IdP user (such as [AZUser](https://bloodhound.specterops.io/resources/nodes/az-user), [Okta_User](https://bloodhound.specterops.io/opengraph/extensions/okta/nodes/okta_user), or [PingOneUser](https://github.com/andyrobbins/PingOneHound?tab=readme-ov-file#schema)) in hybrid graph scenarios. It is created by `Git-HoundGraphQlSamlProvider` for SAML-linked identities and `Git-HoundScimUser` for SCIM-provisioned identities. This edge represents identity correlation rather than an attack path, connecting a user's external IdP account to their GitHub account for visibility into federated identity mappings.

descriptions/nodes/GH_BranchProtectionRule.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ Branch protection rules are critical security controls. Key settings to review:
2121

2222
The only branch protection configuration that blocks the write-access → workflow → secrets exfiltration attack path is `push_restrictions` + `blocks_creations` on a `*` pattern rule. However, users with `GH_PushProtectedBranch`, `GH_AdminTo`, `GH_RestrictionsCanPush`, or `GH_EditRepoProtections` can bypass this control.
2323

24-
For complete analysis, see [BloodHound Docs: GitHound - Mitigating Controls](https://bloodhound.specterops.io/opengraph/extensions/githound/reference/mitigating-controls).
24+
For complete analysis, see [BloodHound Docs: GitHound - Mitigating Controls](https://bloodhound.specterops.io/opengraph/extensions/github/mitigating-controls).
2525

2626
### Identifying Bypass Actors
2727

Binary file not shown.
Binary file not shown.
Binary file not shown.

docs/official-docs/images/extensions/githound/reference/gh_app.png renamed to docs/official-docs/images/extensions/github/gh_app.png

File renamed without changes.

docs/official-docs/images/extensions/githound/reference/gh_appinstallation.png renamed to docs/official-docs/images/extensions/github/gh_appinstallation.png

File renamed without changes.

docs/official-docs/images/extensions/githound/reference/gh_branch.png renamed to docs/official-docs/images/extensions/github/gh_branch.png

File renamed without changes.

docs/official-docs/images/extensions/githound/reference/gh_branchprotectionrule.png renamed to docs/official-docs/images/extensions/github/gh_branchprotectionrule.png

File renamed without changes.

docs/official-docs/images/extensions/githound/reference/gh_environment.png renamed to docs/official-docs/images/extensions/github/gh_environment.png

File renamed without changes.

0 commit comments

Comments
 (0)