GH_WriteOrganizationActionsSettings

[Organization] Org role can write Actions settings

Edge Schema

• Source: GH_OrgRole
• Destination: GH_Organization
• Traversable: ❌

General Information

The non-traversable GH_WriteOrganizationActionsSettings edge represents that a role can modify organization-level GitHub Actions settings. This edge is dynamically generated from custom organization role permissions discovered by the collector. These settings control which actions are allowed to run within the organization and the default permissions granted to the GITHUB_TOKEN in workflows. An attacker with this permission could weaken restrictions to allow untrusted third-party actions or elevate default token permissions to enable write access across repositories.