Skip to content

Commit 8615bf8

Browse files
committed
fix GH_Uses* edge descriptions
1 parent 64a2db3 commit 8615bf8

4 files changed

Lines changed: 12 additions & 12 deletions

File tree

docs/official-docs/opengraph/extensions/github/edges/gh_usessecret.mdx

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: 'GH_UsesSecret'
3-
description: '[Workflow] Step references a secret by name — GH_WorkflowStep → GH_Secret (name match)'
3+
description: '[Workflow] Step references a secret by name — GH_WorkflowStep → GH_RepoSecret / GH_OrgSecret (name match)'
44
---
55

66
<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
@@ -18,7 +18,7 @@ The traversable `GH_UsesSecret` edge links a workflow step to the secret it refe
1818
Edges use `match_by: property` with two matchers to disambiguate between secrets with the same name across repositories:
1919

2020
- **[GH_RepoSecret](/opengraph/extensions/github/nodes/gh_reposecret)** is matched by `name` + `repository_id` (the GitHub node_id of the repository).
21-
- **GH_OrgSecret** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level secret scope).
21+
- **[GH_OrgSecret](/opengraph/extensions/github/nodes/gh_orgsecret)** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level secret scope).
2222

2323
This means one `${{ secrets.MY_SECRET }}` expression in a workflow can produce up to two `GH_UsesSecret` edges — one to the repo-level secret and one to the org-level secret — reflecting that either could supply the value at runtime depending on scope precedence.
2424

docs/official-docs/opengraph/extensions/github/edges/gh_usesvariable.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
---
22
title: 'GH_UsesVariable'
3-
description: '[Workflow] Step references a variable by name — GH_WorkflowStep → GH_Variable (name match)'
3+
description: '[Workflow] Step references a variable by name — GH_WorkflowStep → GH_RepoVariable / GH_OrgVariable (name match)'
44
---
55

66
<img noZoom src="/assets/enterprise-AND-community-edition-pill-tag.svg" alt="Applies to BloodHound Enterprise and CE"/>
@@ -17,8 +17,8 @@ The non-traversable `GH_UsesVariable` edge links a workflow step to the variable
1717

1818
Edges use `match_by: property` with two matchers to disambiguate between variables with the same name across repositories:
1919

20-
- **GH_RepoVariable** is matched by `name` + `repository_id` (the GitHub node_id of the repository).
21-
- **GH_OrgVariable** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level variable scope).
20+
- **[GH_RepoVariable](/opengraph/extensions/github/nodes/gh_repovariable)** is matched by `name` + `repository_id` (the GitHub node_id of the repository).
21+
- **[GH_OrgVariable](/opengraph/extensions/github/nodes/gh_orgvariable)** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level variable scope).
2222

2323
This means one `${{ vars.MY_VAR }}` expression can produce up to two `GH_UsesVariable` edges — one to the repo-level variable and one to the org-level variable.
2424

docs/official-docs/opengraph/extensions/github/schema.mdx

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ icon: circle-nodes
99

1010
**Name:** SOGitHub<br />
1111
**Display Name:** GitHub Extension (by SpecterOps)<br />
12-
**Version:** v1.2.1<br />
12+
**Version:** v1.2.2<br />
1313
**Namespace:** GH<br />
1414
**Environment Kind:** GH_Organization<br />
1515
**Source Kind:** GitHub
@@ -153,8 +153,8 @@ This file is automatically generated from the [extension schema definition file]
153153
| [GH_ToggleDiscussionAnswer](/opengraph/extensions/github/edges/gh_togglediscussionanswer) || [Repository] Repo role can toggle discussion answers |
154154
| [GH_ToggleDiscussionCommentMinimize](/opengraph/extensions/github/edges/gh_togglediscussioncommentminimize) || [Repository] Repo role can minimize discussion comments |
155155
| [GH_TransferRepository](/opengraph/extensions/github/edges/gh_transferrepository) || [Organization] Org role can transfer repositories |
156-
| [GH_UsesSecret](/opengraph/extensions/github/edges/gh_usessecret) || [Workflow] Step references a secret by name — GH_WorkflowStep → GH_Secret (name match) |
157-
| [GH_UsesVariable](/opengraph/extensions/github/edges/gh_usesvariable) || [Workflow] Step references a variable by name — GH_WorkflowStep → GH_Variable (name match) |
156+
| [GH_UsesSecret](/opengraph/extensions/github/edges/gh_usessecret) || [Workflow] Step references a secret by name — GH_WorkflowStep → GH_RepoSecret / GH_OrgSecret (name match) |
157+
| [GH_UsesVariable](/opengraph/extensions/github/edges/gh_usesvariable) || [Workflow] Step references a variable by name — GH_WorkflowStep → GH_RepoVariable / GH_OrgVariable (name match) |
158158
| [GH_ValidToken](/opengraph/extensions/github/edges/gh_validtoken) || Secret scanning alert contains a valid, active token belonging to this user |
159159
| [GH_ViewDependabotAlerts](/opengraph/extensions/github/edges/gh_viewdependabotalerts) || [Repository] Repo role can view Dependabot alerts |
160160
| [GH_ViewSecretScanningAlerts](/opengraph/extensions/github/edges/gh_viewsecretscanningalerts) || [Repository] Role can view secret scanning alerts |

extension/schema.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
"schema": {
33
"name": "SOGitHub",
44
"display_name": "GitHub Extension (by SpecterOps)",
5-
"version": "v1.2.1",
5+
"version": "v1.2.2",
66
"namespace": "GH"
77
},
88
"node_kinds": [
@@ -778,12 +778,12 @@
778778
},
779779
{
780780
"name": "GH_UsesSecret",
781-
"description": "[Workflow] Step references a secret by name — GH_WorkflowStep → GH_Secret (name match)",
781+
"description": "[Workflow] Step references a secret by name — GH_WorkflowStep → GH_RepoSecret / GH_OrgSecret (name match)",
782782
"is_traversable": false
783783
},
784784
{
785785
"name": "GH_UsesVariable",
786-
"description": "[Workflow] Step references a variable by name — GH_WorkflowStep → GH_Variable (name match)",
786+
"description": "[Workflow] Step references a variable by name — GH_WorkflowStep → GH_RepoVariable / GH_OrgVariable (name match)",
787787
"is_traversable": false
788788
}
789789
],
@@ -801,4 +801,4 @@
801801
}
802802
],
803803
"relationship_findings": []
804-
}
804+
}

0 commit comments

Comments
 (0)