cartography 0.93.0rc1__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/gcp/gke.py

@@ -0,0 +1,69 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    name: PropertyRef = PropertyRef("name")
+    self_link: PropertyRef = PropertyRef("self_link")
+    description: PropertyRef = PropertyRef("description")
+    logging_service: PropertyRef = PropertyRef("logging_service")
+    monitoring_service: PropertyRef = PropertyRef("monitoring_service")
+    network: PropertyRef = PropertyRef("network")
+    subnetwork: PropertyRef = PropertyRef("subnetwork")
+    cluster_ipv4cidr: PropertyRef = PropertyRef("cluster_ipv4cidr")
+    zone: PropertyRef = PropertyRef("zone")
+    location: PropertyRef = PropertyRef("location")
+    endpoint: PropertyRef = PropertyRef("endpoint")
+    initial_version: PropertyRef = PropertyRef("initial_version")
+    current_master_version: PropertyRef = PropertyRef("current_master_version")
+    status: PropertyRef = PropertyRef("status")
+    services_ipv4cidr: PropertyRef = PropertyRef("services_ipv4cidr")
+    database_encryption: PropertyRef = PropertyRef("database_encryption")
+    network_policy: PropertyRef = PropertyRef("network_policy")
+    master_authorized_networks: PropertyRef = PropertyRef("master_authorized_networks")
+    legacy_abac: PropertyRef = PropertyRef("legacy_abac")
+    shielded_nodes: PropertyRef = PropertyRef("shielded_nodes")
+    private_nodes: PropertyRef = PropertyRef("private_nodes")
+    private_endpoint_enabled: PropertyRef = PropertyRef("private_endpoint_enabled")
+    private_endpoint: PropertyRef = PropertyRef("private_endpoint")
+    public_endpoint: PropertyRef = PropertyRef("public_endpoint")
+    masterauth_username: PropertyRef = PropertyRef("masterauth_username")
+    masterauth_password: PropertyRef = PropertyRef("masterauth_password")
+    created_at: PropertyRef = PropertyRef("created_at")
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GKECluster)
+class GCPGKEClusterToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPGKEClusterToProjectRelProperties = (
+        GCPGKEClusterToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPGKEClusterSchema(CartographyNodeSchema):
+    label: str = "GKECluster"
+    properties: GCPGKEClusterNodeProperties = GCPGKEClusterNodeProperties()
+    sub_resource_relationship: GCPGKEClusterToProjectRel = GCPGKEClusterToProjectRel()

cartography/models/gcp/iam.py

@@ -0,0 +1,73 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class GCPServiceAccountNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    email: PropertyRef = PropertyRef("email", extra_index=True)
+    display_name: PropertyRef = PropertyRef("displayName")
+    oauth2_client_id: PropertyRef = PropertyRef("oauth2ClientId")
+    unique_id: PropertyRef = PropertyRef("uniqueId")
+    disabled: PropertyRef = PropertyRef("disabled")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    project_id: PropertyRef = PropertyRef("projectId", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPRoleNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("name", extra_index=True)
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    title: PropertyRef = PropertyRef("title")
+    description: PropertyRef = PropertyRef("description")
+    deleted: PropertyRef = PropertyRef("deleted")
+    etag: PropertyRef = PropertyRef("etag")
+    permissions: PropertyRef = PropertyRef("includedPermissions")
+    role_type: PropertyRef = PropertyRef("roleType")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    project_id: PropertyRef = PropertyRef("projectId", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPIAMToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPUser|GCPServiceAccount|GCPRole)<-[:RESOURCE]-(:GCPProject)
+class GCPPrincipalToProject(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("projectId", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPIAMToProjectRelProperties = GCPIAMToProjectRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPServiceAccountSchema(CartographyNodeSchema):
+    label: str = "GCPServiceAccount"
+    properties: GCPServiceAccountNodeProperties = GCPServiceAccountNodeProperties()
+    sub_resource_relationship: GCPPrincipalToProject = GCPPrincipalToProject()
+    # Service accounts are principals; add shared label for cross-module queries
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["GCPPrincipal"])
+
+
+@dataclass(frozen=True)
+class GCPRoleSchema(CartographyNodeSchema):
+    label: str = "GCPRole"
+    properties: GCPRoleNodeProperties = GCPRoleNodeProperties()
+    sub_resource_relationship: GCPPrincipalToProject = GCPPrincipalToProject()

cartography/models/gcp/permission_relationships.py

@@ -0,0 +1,61 @@
+"""
+GCP permission relationship MatchLink schemas.
+"""
+
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPPermissionRelProperties(CartographyRelProperties):
+    """
+    Properties for GCP permission relationships.
+    """
+
+    # Required fields for MatchLinks
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPermissionMatchLink(CartographyRelSchema):
+    """
+    MatchLink schema for GCP permission relationships.
+    Creates relationships like: (GCPPrincipal)-[:CAN_READ]->(GCPResource)
+
+    This MatchLink handles permission relationships between GCP principals and resources
+    based on IAM policy bindings and permission evaluations.
+
+    GCPPrincipal can be:
+    - GCPUser (from GSuite)
+    - GCPServiceAccount
+    - GCPGroup (from GSuite)
+    """
+
+    source_node_label: str = "GCPPrincipal"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"email": PropertyRef("principal_email")},
+    )
+
+    target_node_label: str = (
+        "GCPResource"  # Will be dynamically set based on target_label
+    )
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("resource_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = (
+        "HAS_PERMISSION"  # Will be dynamically set based on relationship_name
+    )
+    properties: GCPPermissionRelProperties = GCPPermissionRelProperties()

cartography/models/gcp/policy_bindings.py

@@ -0,0 +1,93 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    role: PropertyRef = PropertyRef("role")
+    resource: PropertyRef = PropertyRef("resource")
+    resource_type: PropertyRef = PropertyRef("resource_type")
+    members: PropertyRef = PropertyRef("members")
+    has_condition: PropertyRef = PropertyRef("has_condition")
+    condition_title: PropertyRef = PropertyRef("condition_title")
+    condition_expression: PropertyRef = PropertyRef("condition_expression")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPPolicyBindingToProjectRelProperties = (
+        GCPPolicyBindingToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToPrincipalRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToPrincipalRel(CartographyRelSchema):
+    target_node_label: str = "GCPPrincipal"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"email": PropertyRef("members", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_ALLOW_POLICY"
+    properties: GCPPolicyBindingToPrincipalRelProperties = (
+        GCPPolicyBindingToPrincipalRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToRoleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingToRoleRel(CartographyRelSchema):
+    target_node_label: str = "GCPRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("role")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "GRANTS_ROLE"
+    properties: GCPPolicyBindingToRoleRelProperties = (
+        GCPPolicyBindingToRoleRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPPolicyBindingSchema(CartographyNodeSchema):
+    label: str = "GCPPolicyBinding"
+    properties: GCPPolicyBindingNodeProperties = GCPPolicyBindingNodeProperties()
+    sub_resource_relationship: GCPPolicyBindingToProjectRel = (
+        GCPPolicyBindingToProjectRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPPolicyBindingToPrincipalRel(),
+            GCPPolicyBindingToRoleRel(),
+        ]
+    )

cartography/models/gcp/storage/bucket.py

@@ -0,0 +1,119 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GCPBucketNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    # Preserve legacy field for compatibility with existing queries
+    bucket_id: PropertyRef = PropertyRef("bucket_id")
+    project_number: PropertyRef = PropertyRef("project_number")
+    self_link: PropertyRef = PropertyRef("self_link")
+    kind: PropertyRef = PropertyRef("kind")
+    location: PropertyRef = PropertyRef("location")
+    location_type: PropertyRef = PropertyRef("location_type")
+    meta_generation: PropertyRef = PropertyRef("meta_generation")
+    storage_class: PropertyRef = PropertyRef("storage_class")
+    time_created: PropertyRef = PropertyRef("time_created")
+    retention_period: PropertyRef = PropertyRef("retention_period")
+    iam_config_bucket_policy_only: PropertyRef = PropertyRef(
+        "iam_config_bucket_policy_only"
+    )
+    owner_entity: PropertyRef = PropertyRef("owner_entity")
+    owner_entity_id: PropertyRef = PropertyRef("owner_entity_id")
+    versioning_enabled: PropertyRef = PropertyRef("versioning_enabled")
+    log_bucket: PropertyRef = PropertyRef("log_bucket")
+    requester_pays: PropertyRef = PropertyRef("requester_pays")
+    default_kms_key_name: PropertyRef = PropertyRef("default_kms_key_name")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPBucketToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPBucket)
+class GCPBucketToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPBucketToProjectRelProperties = GCPBucketToProjectRelProperties()
+
+
+@dataclass(frozen=True)
+class GCPBucketSchema(CartographyNodeSchema):
+    label: str = "GCPBucket"
+    properties: GCPBucketNodeProperties = GCPBucketNodeProperties()
+    sub_resource_relationship: GCPBucketToProjectRel = GCPBucketToProjectRel()
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id", extra_index=True)
+    key: PropertyRef = PropertyRef("key", extra_index=True)
+    value: PropertyRef = PropertyRef("value")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelToProjectRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPProject)-[:RESOURCE]->(:GCPBucketLabel)
+class GCPBucketLabelToProjectRel(CartographyRelSchema):
+    target_node_label: str = "GCPProject"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("PROJECT_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: GCPBucketLabelToProjectRelProperties = (
+        GCPBucketLabelToProjectRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelToBucketRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:GCPBucket)-[:LABELED]->(:GCPBucketLabel)
+class GCPBucketLabelToBucketRel(CartographyRelSchema):
+    target_node_label: str = "GCPBucket"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("bucket_id")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "LABELED"
+    properties: GCPBucketLabelToBucketRelProperties = (
+        GCPBucketLabelToBucketRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GCPBucketLabelSchema(CartographyNodeSchema):
+    label: str = "GCPBucketLabel"
+    properties: GCPBucketLabelNodeProperties = GCPBucketLabelNodeProperties()
+    sub_resource_relationship: GCPBucketLabelToProjectRel = GCPBucketLabelToProjectRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            GCPBucketLabelToBucketRel(),
+        ]
+    )

cartography/models/github/commits.py

@@ -0,0 +1,63 @@
+"""
+Data model for GitHub commit tracking, specifically for tracking which GitHubUsers have committed
+to which GitHubRepositories in the last 30 days.
+
+This uses MatchLinks to connect existing GitHubUser nodes to GitHubRepository nodes based on
+commit data from a separate GitHub API call.
+"""
+
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GitHubUserCommittedToRepoRelProperties(CartographyRelProperties):
+    """
+    Properties for the COMMITTED_TO relationship between GitHubUser and GitHubRepository.
+    """
+
+    # Required for all MatchLinks
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+    # Rich relationship properties
+    commit_count: PropertyRef = PropertyRef("commit_count")
+    last_commit_date: PropertyRef = PropertyRef("last_commit_date")
+    first_commit_date: PropertyRef = PropertyRef("first_commit_date")
+
+
+@dataclass(frozen=True)
+class GitHubUserCommittedToRepoRel(CartographyRelSchema):
+    """
+    MatchLink schema for connecting GitHubUser nodes to GitHubRepository nodes
+    based on commits in the last 30 days.
+    """
+
+    target_node_label: str = "GitHubRepository"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("repo_url"),
+        }
+    )
+    source_node_label: str = "GitHubUser"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {
+            "id": PropertyRef("user_url"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "COMMITTED_TO"
+    properties: GitHubUserCommittedToRepoRelProperties = (
+        GitHubUserCommittedToRepoRelProperties()
+    )

cartography/models/github/dependencies.py

@@ -0,0 +1,73 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GitHubDependencyNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    original_name: PropertyRef = PropertyRef("original_name")
+    requirements: PropertyRef = PropertyRef("requirements")
+    ecosystem: PropertyRef = PropertyRef("ecosystem")
+    package_manager: PropertyRef = PropertyRef("package_manager")
+    manifest_file: PropertyRef = PropertyRef("manifest_file")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GitHubDependencyToRepositoryRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    requirements: PropertyRef = PropertyRef("requirements")
+    manifest_path: PropertyRef = PropertyRef("manifest_path")
+
+
+@dataclass(frozen=True)
+class GitHubDependencyToRepositoryRel(CartographyRelSchema):
+    target_node_label: str = "GitHubRepository"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("repo_url", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "REQUIRES"
+    properties: GitHubDependencyToRepositoryRelProperties = (
+        GitHubDependencyToRepositoryRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class DependencyGraphManifestToDependencyRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DependencyGraphManifestToDependencyRel(CartographyRelSchema):
+    target_node_label: str = "DependencyGraphManifest"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("manifest_id", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_DEP"
+    properties: DependencyGraphManifestToDependencyRelProperties = (
+        DependencyGraphManifestToDependencyRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GitHubDependencySchema(CartographyNodeSchema):
+    label: str = "Dependency"
+    properties: GitHubDependencyNodeProperties = GitHubDependencyNodeProperties()
+    sub_resource_relationship: GitHubDependencyToRepositoryRel = (
+        GitHubDependencyToRepositoryRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [DependencyGraphManifestToDependencyRel()]
+    )

cartography/models/github/manifests.py

@@ -0,0 +1,49 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class DependencyGraphManifestNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    blob_path: PropertyRef = PropertyRef("blob_path")
+    filename: PropertyRef = PropertyRef("filename")
+    dependencies_count: PropertyRef = PropertyRef("dependencies_count")
+    repo_url: PropertyRef = PropertyRef("repo_url")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DependencyGraphManifestToRepositoryRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class DependencyGraphManifestToRepositoryRel(CartographyRelSchema):
+    target_node_label: str = "GitHubRepository"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("repo_url", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_MANIFEST"
+    properties: DependencyGraphManifestToRepositoryRelProperties = (
+        DependencyGraphManifestToRepositoryRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class DependencyGraphManifestSchema(CartographyNodeSchema):
+    label: str = "DependencyGraphManifest"
+    properties: DependencyGraphManifestNodeProperties = (
+        DependencyGraphManifestNodeProperties()
+    )
+    sub_resource_relationship: DependencyGraphManifestToRepositoryRel = (
+        DependencyGraphManifestToRepositoryRel()
+    )

cartography/models/github/orgs.py

@@ -0,0 +1,27 @@
+"""
+This schema does not handle the org's relationships.  Those are handled by other schemas, for example:
+* GitHubTeamSchema defines (GitHubOrganization)-[RESOURCE]->(GitHubTeam)
+* GitHubUserSchema defines (GitHubUser)-[MEMBER_OF|ADMIN_OF|UNAFFILIATED]->(GitHubOrganization)
+(There may be others, these are just two examples.)
+"""
+
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+
+@dataclass(frozen=True)
+class GitHubOrganizationNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("url")
+    username: PropertyRef = PropertyRef("login", extra_index=True)
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GitHubOrganizationSchema(CartographyNodeSchema):
+    label: str = "GitHubOrganization"
+    properties: GitHubOrganizationNodeProperties = GitHubOrganizationNodeProperties()
+    other_relationships = None
+    sub_resource_relationship = None