GH_CanEditEnvironment

Repo admin role can edit the configuration of this GitHub environment

Edge Schema

• Traversable: ✅

Start	Kind	End
GH_RepoRole	GH_CanEditEnvironment	GH_Environment

General Information

The traversable GH_CanEditEnvironment edge indicates that a repository role can modify the configuration of a GitHub environment. In the current model, this edge is emitted for the repository’s built-in admin role to every environment contained in that repository.

Editing an environment is security-relevant because environment configuration controls deployment protections such as required reviewers, self-review restrictions, wait timers, deployment branch policies, and the “allow administrators to bypass configured protection rules” setting. An attacker who can edit an environment may be able to weaken or remove those controls, making later deployment and secret access paths possible.

This edge is distinct from GH_CanDeployToEnvironment:

• GH_CanEditEnvironment means the role can manage the environment’s settings.
• GH_CanDeployToEnvironment means the source satisfies the modeled deployment policy, reviewer gate, or administrator bypass condition for the environment.

Edge Schema

Source	Destination	Traversable
GH_RepoRole	GH_Environment	true

Diagram