You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/official-docs/opengraph/extensions/github/edges/gh_usessecret.mdx
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: 'GH_UsesSecret'
3
-
description: '[Workflow] Step references a secret by name — GH_WorkflowStep → GH_Secret (name match)'
3
+
description: '[Workflow] Step references a secret by name — GH_WorkflowStep → GH_RepoSecret / GH_OrgSecret (name match)'
4
4
---
5
5
6
6
<imgnoZoomsrc="/assets/enterprise-AND-community-edition-pill-tag.svg"alt="Applies to BloodHound Enterprise and CE"/>
@@ -18,7 +18,7 @@ The traversable `GH_UsesSecret` edge links a workflow step to the secret it refe
18
18
Edges use `match_by: property` with two matchers to disambiguate between secrets with the same name across repositories:
19
19
20
20
-**[GH_RepoSecret](/opengraph/extensions/github/nodes/gh_reposecret)** is matched by `name` + `repository_id` (the GitHub node_id of the repository).
21
-
-**GH_OrgSecret** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level secret scope).
21
+
-**[GH_OrgSecret](/opengraph/extensions/github/nodes/gh_orgsecret)** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level secret scope).
22
22
23
23
This means one `${{ secrets.MY_SECRET }}` expression in a workflow can produce up to two `GH_UsesSecret` edges — one to the repo-level secret and one to the org-level secret — reflecting that either could supply the value at runtime depending on scope precedence.
Copy file name to clipboardExpand all lines: docs/official-docs/opengraph/extensions/github/edges/gh_usesvariable.mdx
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
2
title: 'GH_UsesVariable'
3
-
description: '[Workflow] Step references a variable by name — GH_WorkflowStep → GH_Variable (name match)'
3
+
description: '[Workflow] Step references a variable by name — GH_WorkflowStep → GH_RepoVariable / GH_OrgVariable (name match)'
4
4
---
5
5
6
6
<imgnoZoomsrc="/assets/enterprise-AND-community-edition-pill-tag.svg"alt="Applies to BloodHound Enterprise and CE"/>
@@ -17,8 +17,8 @@ The non-traversable `GH_UsesVariable` edge links a workflow step to the variable
17
17
18
18
Edges use `match_by: property` with two matchers to disambiguate between variables with the same name across repositories:
19
19
20
-
-**GH_RepoVariable** is matched by `name` + `repository_id` (the GitHub node_id of the repository).
21
-
-**GH_OrgVariable** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level variable scope).
20
+
-**[GH_RepoVariable](/opengraph/extensions/github/nodes/gh_repovariable)** is matched by `name` + `repository_id` (the GitHub node_id of the repository).
21
+
-**[GH_OrgVariable](/opengraph/extensions/github/nodes/gh_orgvariable)** is matched by `name` + `environmentid` (the node_id of the organization, which acts as the org-level variable scope).
22
22
23
23
This means one `${{ vars.MY_VAR }}` expression can produce up to two `GH_UsesVariable` edges — one to the repo-level variable and one to the org-level variable.
@@ -153,8 +153,8 @@ This file is automatically generated from the [extension schema definition file]
153
153
|[GH_ToggleDiscussionAnswer](/opengraph/extensions/github/edges/gh_togglediscussionanswer)| ❌ |[Repository] Repo role can toggle discussion answers |
154
154
|[GH_ToggleDiscussionCommentMinimize](/opengraph/extensions/github/edges/gh_togglediscussioncommentminimize)| ❌ |[Repository] Repo role can minimize discussion comments |
155
155
|[GH_TransferRepository](/opengraph/extensions/github/edges/gh_transferrepository)| ❌ |[Organization] Org role can transfer repositories |
156
-
|[GH_UsesSecret](/opengraph/extensions/github/edges/gh_usessecret)| ❌ |[Workflow] Step references a secret by name — GH_WorkflowStep → GH_Secret (name match) |
157
-
|[GH_UsesVariable](/opengraph/extensions/github/edges/gh_usesvariable)| ❌ |[Workflow] Step references a variable by name — GH_WorkflowStep → GH_Variable (name match) |
156
+
|[GH_UsesSecret](/opengraph/extensions/github/edges/gh_usessecret)| ❌ |[Workflow] Step references a secret by name — GH_WorkflowStep → GH_RepoSecret / GH_OrgSecret (name match) |
157
+
|[GH_UsesVariable](/opengraph/extensions/github/edges/gh_usesvariable)| ❌ |[Workflow] Step references a variable by name — GH_WorkflowStep → GH_RepoVariable / GH_OrgVariable (name match) |
158
158
|[GH_ValidToken](/opengraph/extensions/github/edges/gh_validtoken)| ✅ | Secret scanning alert contains a valid, active token belonging to this user |
159
159
|[GH_ViewDependabotAlerts](/opengraph/extensions/github/edges/gh_viewdependabotalerts)| ❌ |[Repository] Repo role can view Dependabot alerts |
160
160
|[GH_ViewSecretScanningAlerts](/opengraph/extensions/github/edges/gh_viewsecretscanningalerts)| ❌ |[Repository] Role can view secret scanning alerts |
0 commit comments