openhound-github 0.7.1__tar.gz → 0.7.2__tar.gz

{openhound_github-0.7.1 → openhound_github-0.7.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: openhound-github
-Version: 0.7.1
+Version: 0.7.2
 Summary: Github collector for OpenHound
 Author-email: "jdreijer@specterops.io" <jdreijer@specterops.io>, Jared Atkinson <jatkinson@specterops.io>
 License-File: LICENSE.md

{openhound_github-0.7.1 → openhound_github-0.7.2}/docs/og-docs.json

@@ -1,6 +1,7 @@
 {
     "extensionSchemaPath": "extension/schema.json",
     "extensionShortName": "GitHub",
+    "collectorName": "github",
     "gitHubBaseUrl": "https://github.com/SpecterOps/openhound-github",
     "stripTitlePrefix": "GitHub: ",
     "savedSearchesDir": "extension/saved_searches",

{openhound_github-0.7.1 → openhound_github-0.7.2}/src/openhound_github/models/enterprise_role.py

@@ -118,16 +118,167 @@ class GHEnterpriseRoleProperties(GHNodeProperties):
             description="Enterprise contains role",
             traversable=False,
         ),
-        *[
-            EdgeDef(
-                start=nk.ENTERPRISE_ROLE,
-                end=nk.ENTERPRISE,
-                kind=edge_kind,
-                description=f"Enterprise role has {permission} capability",
-                traversable=traversable,
-            )
-            for permission, (edge_kind, traversable) in ENTERPRISE_PERMISSION_EDGES.items()
-        ],
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.CREATE_ENTERPRISE_ORGANIZATIONS,
+            description="Enterprise role has create_enterprise_organizations capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.EDIT_ENTERPRISE_CUSTOM_PROPERTIES_FOR_ORGANIZATIONS,
+            description="Enterprise role has edit_enterprise_custom_properties_for_organizations capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_ADMINS,
+            description="Enterprise role has manage_enterprise_admins capability",
+            traversable=True,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_IDENTITY_PROVIDER,
+            description="Enterprise role has manage_enterprise_identity_provider capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_MEMBERS,
+            description="Enterprise role has manage_enterprise_members capability",
+            traversable=True,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_ORGANIZATION_ADMINS,
+            description="Enterprise role has manage_enterprise_organization_admins capability",
+            traversable=True,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_ORGANIZATIONS,
+            description="Enterprise role has manage_enterprise_organizations capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_REFERRALS,
+            description="Enterprise role has manage_enterprise_referrals capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.MANAGE_ENTERPRISE_TEAMS,
+            description="Enterprise role has manage_enterprise_teams capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.READ_ENTERPRISE_AUDIT_LOG,
+            description="Enterprise role has read_enterprise_audit_log capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.READ_ENTERPRISE_DOMAIN_VERIFICATION,
+            description="Enterprise role has read_enterprise_domain_verification capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.READ_ENTERPRISE_MEMBERS,
+            description="Enterprise role has read_enterprise_members capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.READ_ENTERPRISE_ORG_PROJECTS,
+            description="Enterprise role has read_enterprise_org_projects capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.READ_ENTERPRISE_ORGANIZATION_ADMIN,
+            description="Enterprise role has read_enterprise_organization_admin capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.SET_ENTERPRISE_INTERACTION_LIMITS,
+            description="Enterprise role has set_enterprise_interaction_limits capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.VIEW_ENTERPRISE_ACTIONS_USAGE_METRICS,
+            description="Enterprise role has view_enterprise_actions_usage_metrics capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.VIEW_ENTERPRISE_BILLING,
+            description="Enterprise role has view_enterprise_billing capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.VIEW_ENTERPRISE_SECRET_SCANNING_ALERTS,
+            description="Enterprise role has view_enterprise_secret_scanning_alerts capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.WRITE_ENTERPRISE_ACTIONS_POLICIES,
+            description="Enterprise role has write_enterprise_actions_policies capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.WRITE_ENTERPRISE_BILLING,
+            description="Enterprise role has write_enterprise_billing capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.WRITE_ENTERPRISE_PERSONAL_ACCESS_TOKEN_POLICIES,
+            description="Enterprise role has write_enterprise_personal_access_token_policies capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.WRITE_ENTERPRISE_SSO,
+            description="Enterprise role has write_enterprise_sso capability",
+            traversable=False,
+        ),
+        EdgeDef(
+            start=nk.ENTERPRISE_ROLE,
+            end=nk.ENTERPRISE,
+            kind=ek.WRITE_ENTERPRISE_TEAM_MEMBERS,
+            description="Enterprise role has write_enterprise_team_members capability",
+            traversable=False,
+        ),
     ],
 )
 class EnterpriseRole(BaseAsset):

{openhound_github-0.7.1 → openhound_github-0.7.2}/src/openhound_github/models/runner.py

@@ -29,7 +29,7 @@ _PRIVATE_REPOSITORY_CREATION_EDGE_KINDS = (
 @dataclass
 class GHRunnerGroupProperties(GHNodeProperties):
     """Properties for GHRunnerGroupProperties.
-    
+
     Attributes:
         scope: Whether the runner group is enterprise or organization scoped.
         group_id: The GitHub runner group ID.
@@ -272,7 +272,9 @@ class EnterpriseRunnerGroup(BaseAsset):
         )
 
 
-@app.asset()
+@app.asset(
+    description="Maps an enterprise runner group to an organization without emitting a node."
+)
 class EnterpriseRunnerGroupOrganization(BaseAsset):
     node_id: str
     login: str | None = None
@@ -296,7 +298,7 @@ class EnterpriseRunnerGroupOrganization(BaseAsset):
 @dataclass
 class GHRunnerProperties(GHNodeProperties):
     """Properties for GHRunnerProperties.
-    
+
     Attributes:
         scope: Whether the runner is enterprise, organization, or repository scoped.
         runner_id: The GitHub runner ID.
@@ -579,7 +581,9 @@ class OrgRunnerGroupAccess(BaseAsset):
 
         actions_enabled_repository_node_ids = {
             repository_node_id
-            for (repository_node_id,) in self._lookup.actions_enabled_repository_node_ids_for_org(
+            for (
+                repository_node_id,
+            ) in self._lookup.actions_enabled_repository_node_ids_for_org(
                 self.org_login
             )
         }

{openhound_github-0.7.1 → openhound_github-0.7.2}/src/openhound_github/models/scim_user.py

@@ -137,7 +137,7 @@ class ScimOrganization(ScimScopeAsset):
         return []
 
 
-@app.asset()
+@app.asset(description="Represents enterprise-scoped SCIM organization input data.")
 class EnterpriseScimOrganization(ScimOrganization):
     """Enterprise-scoped SCIM organization input model.
 
@@ -241,7 +241,7 @@ class ScimUser(ScimScopeAsset):
             )
 
 
-@app.asset()
+@app.asset(description="Represents enterprise-scoped SCIM user input data.")
 class EnterpriseScimUser(ScimUser):
     """Enterprise-scoped SCIM user input model."""