GH_Environment

A GitHub Actions deployment environment with protection rules and deployment branch policies

General Information

Represents a GitHub Actions deployment environment configured on a repository. Environments can have protection rules including required reviewers, wait timers, administrator bypass behavior, and deployment branch policies.

Repositories always contain their environments. When custom branch policies are configured, the environment also contains one or more GH_EnvironmentBranchPolicy nodes that describe which branches are allowed to deploy. Environment-scoped secrets and variables are modeled as child nodes of the environment and become available to workflow jobs that reference it.

Properties

Property	Type	Description
name	string	The node name used for matching and display.
displayname	string	The human-readable display name.
environmentid	string	The identifier of the GitHub environment where this node was collected.
last_seen	datetime	The timestamp when this node was last observed during collection.
node_id	string	The stable identifier used as the OpenGraph node ID; this is the native GitHub node ID where available.
collected	boolean	Collected/generated by OpenHound.
short_name	string	The environment’s display name (e.g., production, staging).
can_admins_bypass	boolean	Whether repository administrators can bypass environment protection rules.
wait_timer	integer	The wait timer value.
required_reviewers	boolean	The required reviewers value.
reviewer_count	integer	The reviewer count value.
prevent_self_review	boolean	The prevent self review value.
protected_branches	boolean	The protected branches value.
custom_branch_policies	boolean	The custom branch policies value.
repository_name	string	The full name of the containing repository.
repository_id	string	The ID of the containing repository.
environment_name	string	The name of the environment (GitHub organization).

Diagram

Edges

The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
GH_ApprovesDeploymentTo	GH_Team, GH_User	❌
GH_CanDeployToEnvironment	GH_Branch, GH_RepoRole, GH_Repository, GH_Team, GH_User	✅
GH_CanEditEnvironment	GH_RepoRole	✅
GH_Contains	GH_Repository	❌
GH_DeploysTo	GH_WorkflowJob	❌

Outbound Edges

Edge Type	Destination Node Types	Traversable
GH_Contains	GH_EnvironmentBranchPolicy, GH_EnvironmentSecret, GH_EnvironmentVariable	❌
GH_HasSecret	GH_EnvironmentSecret	✅
GH_HasVariable	GH_EnvironmentVariable	✅

Properties

Property	Type	Description
name	str	-
displayname	str	-
environmentid	str	-
last_seen	datetime	-
node_id	str	-
collected	bool	Collected/generated by OpenHound
short_name	str | None	The environment’s display name (e.g., production, staging).
can_admins_bypass	bool | None	Whether repository administrators can bypass environment protection rules.
wait_timer	int | None	-
required_reviewers	bool	-
reviewer_count	int	-
prevent_self_review	bool | None	-
protected_branches	bool | None	-
custom_branch_policies	bool | None	-
repository_name	str | None	The full name of the containing repository.
repository_id	str | None	The ID of the containing repository.
environment_name	str | None	The name of the environment (GitHub organization).