GH_RepoRole

The permission granted to a user or team on a repository (e.g., admin, write, read)

Represents a repository-level permission role. Each repository has five default roles (Read, Write, Admin, Triage, Maintain) plus any custom repository roles defined at the organization level. Repo roles define what actions a user or team can perform on a specific repository. Default roles form an inheritance hierarchy (Triage -> Read, Maintain -> Write, Admin includes all), and custom roles inherit from one of the base roles.

Edges

The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Edge Type	Source Node Types	Traversable
GH_Contains	GH_Organization, GH_Repository, GH_Environment	❌
GH_HasBaseRole	GH_OrgRole, GH_RepoRole	✅
GH_HasRole	GH_User, GH_Team	✅

Outbound Edges

Edge Type	Destination Node Types	Traversable
GH_AddAssignee	GH_Repository	❌
GH_AddLabel	GH_Repository	❌
GH_AdminTo	GH_Repository	❌
GH_BypassBranchProtection	GH_Repository	❌
GH_CanCreateBranch	GH_Repository	✅
GH_CanEditProtection	GH_Repository, GH_Branch	✅
GH_CanReadSecretScanningAlert	GH_SecretScanningAlert	✅
GH_CanWriteBranch	GH_Branch	✅
GH_CloseDiscussion	GH_Repository	❌
GH_CloseIssue	GH_Repository	❌
GH_ClosePullRequest	GH_Repository	❌
GH_ConvertIssuesToDiscussions	GH_Repository	❌
GH_CreateDiscussionCategory	GH_Repository	❌
GH_CreateSoloMergeQueueEntry	GH_Repository	❌
GH_CreateTag	GH_Repository	❌
GH_DeleteAlertsCodeScanning	GH_Repository	❌
GH_DeleteDiscussion	GH_Repository	❌
GH_DeleteDiscussionComment	GH_Repository	❌
GH_DeleteIssue	GH_Repository	❌
GH_DeleteTag	GH_Repository	❌
GH_EditCategoryOnDiscussion	GH_Repository	❌
GH_EditDiscussionCategory	GH_Repository	❌
GH_EditDiscussionComment	GH_Repository	❌
GH_EditRepoAnnouncementBanners	GH_Repository	❌
GH_EditRepoCustomPropertiesValues	GH_Repository	❌
GH_EditRepoMetadata	GH_Repository	❌
GH_EditRepoProtections	GH_Repository	❌
GH_HasBaseRole	GH_OrgRole, GH_RepoRole	✅
GH_JumpMergeQueue	GH_Repository	❌
GH_ManageDeployKeys	GH_Repository	❌
GH_ManageDiscussionBadges	GH_Repository	❌
GH_ManageRepoSecurityProducts	GH_Repository	❌
GH_ManageSecurityProducts	GH_Repository	❌
GH_ManageSettingsMergeTypes	GH_Repository	❌
GH_ManageSettingsPages	GH_Repository	❌
GH_ManageSettingsProjects	GH_Repository	❌
GH_ManageSettingsWiki	GH_Repository	❌
GH_ManageTopics	GH_Repository	❌
GH_ManageWebhooks	GH_Repository	❌
GH_MarkAsDuplicate	GH_Repository	❌
GH_PushProtectedBranch	GH_Repository	❌
GH_ReadCodeScanning	GH_Repository	❌
GH_ReadRepoContents	GH_Repository	❌
GH_RemoveAssignee	GH_Repository	❌
GH_RemoveLabel	GH_Repository	❌
GH_ReopenDiscussion	GH_Repository	❌
GH_ReopenIssue	GH_Repository	❌
GH_ReopenPullRequest	GH_Repository	❌
GH_RequestPrReview	GH_Repository	❌
GH_ResolveDependabotAlerts	GH_Repository	❌
GH_RunOrgMigration	GH_Repository	❌
GH_SetInteractionLimits	GH_Repository	❌
GH_SetIssueType	GH_Repository	❌
GH_SetMilestone	GH_Repository	❌
GH_SetSocialPreview	GH_Repository	❌
GH_ToggleDiscussionAnswer	GH_Repository	❌
GH_ToggleDiscussionCommentMinimize	GH_Repository	❌
GH_ViewDependabotAlerts	GH_Repository	❌
GH_ViewSecretScanningAlerts	GH_Organization, GH_Repository	❌
GH_WriteCodeScanning	GH_Repository	❌
GH_WriteRepoContents	GH_Repository	❌
GH_WriteRepoPullRequests	GH_Repository	❌

Properties

Property Name	Data Type	Description
objectid	string	A deterministic ID derived from the repo node_id and role name.
name	string	The fully qualified role name (e.g., repoName\read).
id	string	Same as objectid.
short_name	string	The short role name (e.g., read, write, admin, triage, maintain, or custom role name).
type	string	default for built-in roles or custom for custom repository roles.
environment_name	string	The name of the environment (GitHub organization).
environmentid	string	The node_id of the environment (GitHub organization).
repository_name	string	The name of the repository this role belongs to.
repository_id	string	The node_id of the repository this role belongs to.

Diagram