{"resources":{"git":{"id":"git","fields":{"commit":{"name":"commit","type":"\u001bgit.commit","title":"Git commit","desc":"Examine a single Git commit. Provides the `sha`, commit `message`, `author`, `committer`, and `signatureVerification` (GPG signature details).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"commitAuthor":{"name":"commitAuthor","type":"\u001bgit.commitAuthor","title":"Git commit author","desc":"Examine the author or committer identity attached to a Git commit. Provides the `name`, `email`, and `date` of the commit action, plus the associated `sha`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"gpgSignature":{"name":"gpgSignature","type":"\u001bgit.gpgSignature","title":"Git GPG signature","desc":"Examine the GPG signature attached to a Git commit. Provides the `verified` flag, the `reason` for the verification result, the raw `payload`, and the cryptographic `signature` value.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true}},"is_extension":true},"git.commit":{"id":"git.commit","name":"git.commit","fields":{"author":{"name":"author","type":"\u001bgit.commitAuthor","is_mandatory":true,"title":"Git commit author","provider":"go.mondoo.com/cnquery/v9/providers/github"},"committer":{"name":"committer","type":"\u001bgit.commitAuthor","is_mandatory":true,"title":"Git commit committer","provider":"go.mondoo.com/cnquery/v9/providers/github"},"message":{"name":"message","type":"\u0007","is_mandatory":true,"title":"Git commit message","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sha":{"name":"sha","type":"\u0007","is_mandatory":true,"title":"Git commit SHA","provider":"go.mondoo.com/cnquery/v9/providers/github"},"signatureVerification":{"name":"signatureVerification","type":"\u001bgit.gpgSignature","is_mandatory":true,"title":"The GPG signature of the commit if there is one","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"Git commit","desc":"Examine a single Git commit. Provides the `sha`, commit `message`, `author`, `committer`, and `signatureVerification` (GPG signature details).","private":true,"min_provider_version":"9.0.0","defaults":"sha","provider":"go.mondoo.com/cnquery/v9/providers/github"},"git.commitAuthor":{"id":"git.commitAuthor","name":"git.commitAuthor","fields":{"date":{"name":"date","type":"\t","is_mandatory":true,"title":"Date of commit","provider":"go.mondoo.com/cnquery/v9/providers/github"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Author email","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Author name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sha":{"name":"sha","type":"\u0007","is_mandatory":true,"title":"Author shasum","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"Git commit author","desc":"Examine the author or committer identity attached to a Git commit. Provides the `name`, `email`, and `date` of the commit action, plus the associated `sha`.","private":true,"min_provider_version":"9.0.0","defaults":"name email","provider":"go.mondoo.com/cnquery/v9/providers/github"},"git.gpgSignature":{"id":"git.gpgSignature","name":"git.gpgSignature","fields":{"payload":{"name":"payload","type":"\u0007","is_mandatory":true,"title":"GPG signature payload","provider":"go.mondoo.com/cnquery/v9/providers/github"},"reason":{"name":"reason","type":"\u0007","is_mandatory":true,"title":"GPG signature reason","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sha":{"name":"sha","type":"\u0007","is_mandatory":true,"title":"GPG signature shasum","provider":"go.mondoo.com/cnquery/v9/providers/github"},"signature":{"name":"signature","type":"\u0007","is_mandatory":true,"title":"Cryptographic signature value over the payload","provider":"go.mondoo.com/cnquery/v9/providers/github"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether GPG signature is verified","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"Git GPG signature","desc":"Examine the GPG signature attached to a Git commit. Provides the `verified` flag, the `reason` for the verification result, the raw `payload`, and the cryptographic `signature` value.","private":true,"min_provider_version":"9.0.0","defaults":"sha","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github":{"id":"github","name":"github","fields":{"actionsSecret":{"name":"actionsSecret","type":"\u001bgithub.actionsSecret","title":"GitHub Actions secret","desc":"Encrypted secret available to GitHub Actions workflows, configured at the repository, organization, or environment scope. Secret values are never returned by the API, so this exposes metadata only, which is useful for auditing where secrets live and how broadly they are shared. The scope field selects which owner fields apply, and for an organization secret the visibility field (all, private, or selected) determines which repositories may read it; when visibility is \"selected\", selectedRepositories enumerates exactly which repositories have access.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"actionsVariable":{"name":"actionsVariable","type":"\u001bgithub.actionsVariable","title":"GitHub Actions variable","desc":"Plaintext configuration value available to GitHub Actions workflows, defined at the repository, organization, or environment scope. Unlike secrets, variable values are stored and returned in cleartext and are readable by anyone with read access to the owning scope, so auditing them catches sensitive data that should have been a secret. The `scope` field records where the variable lives (organization, repository, or environment) and selects which of the `organizationName`, `repositoryName`, `repositoryOwner`, and `environmentName` owner fields are populated. For organization variables, `visibility` controls which repositories can consume the variable, and `selectedRepositories` resolves the allowed set when visibility is \"selected\".","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"auditLogEntry":{"name":"auditLogEntry","type":"\u001bgithub.auditLogEntry","title":"GitHub organization audit log entry","desc":"Single event from a GitHub organization's audit log, available for GitHub Enterprise Cloud organizations. Records the `action` performed (for example `user.login` or `repo.create`), the `actor` and their `actorLocation`, the affected `user`, `org`, and `business`, the event `timestamp`, SAML identity attributes (`externalIdentityNameId`, `externalIdentityUsername`), and token metadata (`hashedToken`, `tokenId`, `tokenScopes`). The `data` and `additionalFields` maps carry attributes specific to each action, useful for auditing who did what, from where, and with which credentials.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"branch":{"name":"branch","type":"\u001bgithub.branch","title":"GitHub repository branch","desc":"A single branch within a GitHub repository, selected by `name`. Central to auditing whether critical branches are guarded: `isProtected` reports whether branch protection applies, and `protectionRules` reaches the associated `github.branchprotection` settings that govern required reviews, status checks, and force-push or deletion limits. `isDefault` marks the repository's default branch, while `headCommit` resolves the commit at the branch tip.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"branchprotection":{"name":"branchprotection","type":"\u001bgithub.branchprotection","title":"GitHub branch protection rule","desc":"Branch protection configuration for a repository branch, covering the controls that gate merges and pushes: required status checks, required pull-request reviews and approval counts, required conversation resolution, signed-commit and linear-history requirements, administrator enforcement, push restrictions, and whether force pushes, deletions, and branch locking are allowed. Auditing these settings shows whether a branch enforces code review and blocks unreviewed or destructive changes.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"codeScanningAlert":{"name":"codeScanningAlert","type":"\u001bgithub.codeScanningAlert","title":"GitHub code scanning alert","desc":"Security finding raised by a code scanning tool (such as CodeQL) against a repository. Each alert records an unresolved or resolved vulnerability along with its `state` (open, closed, dismissed, fixed), the `rule` that fired, the analysis `tool` that produced it, and, when suppressed, who dismissed it and the reason. Use it to audit outstanding findings and verify that dismissals are justified.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"codeowners":{"name":"codeowners","type":"\u001bgithub.codeowners","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"collaborator":{"name":"collaborator","type":"\u001bgithub.collaborator","title":"GitHub repository collaborator","desc":"User granted access to a GitHub repository, along with the permission levels they hold. Auditing collaborators reveals who can read, write, or administer a repository and helps spot over-privileged access. The `user` field carries the collaborator's GitHub identity and `permissions` lists the granted access levels.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"commit":{"name":"commit","type":"\u001bgithub.commit","title":"GitHub repository commit","desc":"A single commit in a GitHub repository, keyed by its `sha`. Ties the version-control record to GitHub accounts: the `author` and `committer` resolve to the GitHub users who wrote and applied the change, while the underlying `commit` carries the raw Git commit including the full message and GPG signature for verifying provenance and signed-commit policies. The `stats` report the size of the change (lines added, deleted, and the combined total).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"dependabotAlert":{"name":"dependabotAlert","type":"\u001bgithub.dependabotAlert","title":"GitHub Dependabot alert","desc":"Dependabot vulnerability alert raised against a repository's dependency graph, flagging a dependency with a known security advisory. Each alert is keyed by its per-repository `number` and carries the affected `dependency`, the `securityAdvisory` and `securityVulnerability` that triggered it, its remediation lifecycle (`state`, `fixedAt`, and dismissal details), and its `severity`. Query these to audit which repositories carry unresolved vulnerable dependencies and how each alert was triaged.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"deployKey":{"name":"deployKey","type":"\u001bgithub.deployKey","title":"GitHub repository deploy key","desc":"SSH deploy key granting a repository access for automated clients such as CI systems and deployment tooling. Deploy keys are a common source of long-lived, unrotated credentials, so audit them for keys that carry write access (`readOnly` is false), have gone stale (`lastUsed`, `ageInDays`), or are unverified. The `key` field holds the public SSH key material, and `addedBy` attributes the key to the user who configured it.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"deployment":{"name":"deployment","type":"\u001bgithub.deployment","title":"GitHub deployment","desc":"Deployment record requesting that a specific commit be released to an environment. The `sha` and `ref` identify the code being deployed, while `environment` and `task` describe where and how. Query it to audit what reached production and staging, who triggered each release, and the `latestStatus` reporting whether the deployment succeeded, failed, or is still in progress.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"deploymentStatus":{"name":"deploymentStatus","type":"\u001bgithub.deploymentStatus","title":"GitHub deployment status","desc":"A single status update recorded against a deployment, tracking how a release progressed through an environment over time. The `state` field carries the outcome (pending, success, failure, error, inactive, in_progress, or queued), `environment` names the target it applied to, and `creator` identifies who or what posted it. Auditing the status history shows whether deployments to sensitive environments succeeded, stalled, or errored, and links out to the deployed target and its logs.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"environment":{"name":"environment","type":"\u001bgithub.environment","title":"GitHub deployment environment","desc":"Deployment environment configured in a repository, such as production or staging. Environments gate deployments through protection rules: required reviewers, a `waitTimer` delay before a deployment can proceed, and branch restrictions governed by `protectedBranches` and `customBranchPolicies`. `canAdminsBypass` reveals whether administrators can override those rules, and each entry in `protectionRules` is a github.environmentProtectionRule. Environment-scoped `secrets` and `variables` expose the configuration made available to workflows deploying to this environment.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"environmentProtectionRule":{"name":"environmentProtectionRule","type":"\u001bgithub.environmentProtectionRule","title":"GitHub environment protection rule","desc":"Protection rule guarding deployments to an environment, the control that decides whether a deployment can proceed and who must sign off. The `type` field selects which control applies: `required_reviewers` gates a deployment behind approvals from the listed reviewers, `wait_timer` delays it by a fixed number of minutes, and `branch_policy` restricts which branches or tags may deploy. Audit these rules to confirm production environments require review and cannot be deployed to directly.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"file":{"name":"file","type":"\u001bgithub.file","title":"GitHub repository file","desc":"File or directory entry in a GitHub repository, used to audit the presence and contents of tracked files such as workflow definitions, security policies, or CODEOWNERS. The `type` field distinguishes a regular file from a directory, `files` lists the child entries of a directory, and `content` returns the decoded text of a file.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"gist":{"name":"gist","type":"\u001bgithub.gist","title":"GitHub gist","desc":"Shareable code snippet or set of files hosted on GitHub. Audit gists to catch code, configuration, or secrets that a user has published outside of managed repositories. The `public` field distinguishes a secret gist (unlisted but reachable by URL) from one that is fully public, and `files` exposes the contents of each file for inspection.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"gistfile":{"name":"gistfile","type":"\u001bgithub.gistfile","title":"GitHub gist file","desc":"Single file within a GitHub gist, including its detected `language`, MIME `type`, `size` in bytes, and the raw `content`. Reading the content lets audits scan published gist files for secrets or sensitive data.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"installation":{"name":"installation","type":"\u001bgithub.installation","title":"GitHub App installation","desc":"GitHub App installed on an organization or user account, granting the app a scoped set of permissions and a repository selection. Audit installations to see which apps hold access, the `permissions` they were granted, the `events` they subscribe to, and whether the installation is currently suspended. When `repositorySelection` is \"selected\", `repositories` lists the exact set of repositories the app can reach.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"issue":{"name":"issue","type":"\u001bgithub.issue","title":"GitHub issue","desc":"Issue tracked in a GitHub repository, covering its open or closed state, the user who opened it, current assignees, applied labels, associated milestone, lock status, and the user who closed it. Useful for auditing issue triage ownership, backlog hygiene, and whether a conversation has been locked to collaborators.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"license":{"name":"license","type":"\u001bgithub.license","title":"GitHub repository license","desc":"Open-source license that GitHub detected for a repository, used to audit license compliance and confirm a repository carries an approved license. The `spdxId` identifies the license under the SPDX standard (for example MIT or Apache-2.0), and `url` links to the full license text.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"mergeRequest":{"name":"mergeRequest","type":"\u001bgithub.mergeRequest","title":"GitHub pull request","desc":"Pull request in a GitHub repository, covering its lifecycle state, authorship, review activity, and merge outcome. Useful for auditing who authored and merged a change, whether reviewers were requested, and how code reached the target branch. The commits collection exposes the change set and the reviews collection the review decisions recorded against it.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"milestone":{"name":"milestone","type":"\u001bgithub.milestone","title":"GitHub milestone","desc":"Milestone that groups issues and pull requests in a GitHub repository toward a shared goal or release. Track progress with the `openIssues` and `closedIssues` counts, the `state` (open or closed), and the `dueOn` target date to audit whether planned work is on schedule.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"organization":{"name":"organization","type":"\u001bgithub.organization","title":"GitHub Organization","desc":"GitHub organization account, the top-level container for its repositories, members, teams, and org-wide governance. Query it to audit an organization's security posture: two-factor enforcement, the default repository permission and member creation policies, GitHub Advanced Security, secret scanning and Dependabot defaults for new repositories, SAML single sign-on, the IP allow list, custom roles, approved OAuth apps and fine-grained personal access tokens, audit log streaming, and GitHub Copilot Business configuration.","provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"organizationActionsSettings":{"name":"organizationActionsSettings","type":"\u001bgithub.organizationActionsSettings","title":"GitHub Actions settings for an organization","desc":"Organization-wide GitHub Actions security configuration, useful for auditing which repositories may run Actions, which actions and workflows are permitted, and how much power the default `GITHUB_TOKEN` grants. The `enabledRepositories` field controls scope (all, none, selected), `allowedActions` restricts sources (all, local_only, selected), `defaultWorkflowPermissions` sets the token grant (read or write), and `canApprovePullRequestReviews` reveals whether workflow runs can approve their own pull request reviews.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"package":{"name":"package","type":"\u001bgithub.package","title":"GitHub package","desc":"Package hosted on GitHub Packages, such as a container image, npm module, or Maven artifact published from a repository. Query it to audit what a repository publishes, who owns it, and how each version is exposed. The `packageType` field identifies the registry ecosystem and `visibility` reports whether consumers outside the organization can pull the package.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"packageVersion":{"name":"packageVersion","type":"\u001bgithub.packageVersion","title":"GitHub package version","desc":"A single published version of a package hosted on GitHub Packages, carrying the version's name, canonical url, packageHtmlUrl landing page, license, description, and the createdAt and updatedAt timestamps that let you audit how recently a version was published or refreshed.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"packages":{"name":"packages","type":"\u001bgithub.packages","title":"GitHub Packages collection","desc":"Packages hosted on GitHub Packages for the connected account, covering container images, npm/Maven/NuGet/RubyGems artifacts, and other supported registries. The default list returns every `github.package`, while `public`, `private`, and `internal` return the subsets filtered by package visibility, so you can audit which artifacts are exposed beyond the organization.","provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"publicKey":{"name":"publicKey","type":"\u001bgithub.publicKey","title":"GitHub user public SSH key","desc":"Public SSH key registered to a GitHub user account and used to authenticate Git operations over SSH. Auditing these keys surfaces stale or unverified credentials: `verified` reports whether GitHub confirmed the key belongs to the account, while `createdAt` and `ageInDays` reveal long-lived keys that may warrant rotation.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"release":{"name":"release","type":"\u001bgithub.release","title":"GitHub release","desc":"Published release cut from a repository, tied to a git tag and often carrying distributable artifacts. Auditing releases confirms that shipped versions map to expected tags, distinguishes stable releases from pre-releases via `preRelease`, and attributes each publish to an `author` for change-provenance review.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"repository":{"name":"repository","type":"\u001bgithub.repository","title":"GitHub repository","desc":"Single repository in an organization or user account, the core unit for auditing source-code security and supply-chain posture. Covers visibility and merge settings, the GitHub Advanced Security stack (secret scanning, push protection, Dependabot, and code scanning), and access surfaces such as collaborators, deploy keys, webhooks, and Actions secrets and variables. Also exposes CI and release history through workflows, runners, deployments, environments, and branch and tag rulesets. Selected by repository name within the connected owner, for example `github.repository(name: \"cnquery\")`, when authenticated as a user.","provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"repositoryActionsSettings":{"name":"repositoryActionsSettings","type":"\u001bgithub.repositoryActionsSettings","title":"GitHub Actions settings for a repository","desc":"GitHub Actions security configuration for a single repository. Determines whether workflows can run, which actions and reusable workflows are permitted to run (`allowedActions` is one of all, local_only, or selected), whether action references must be pinned to a full commit SHA, the default token permissions granted to the GITHUB_TOKEN at the start of a workflow run (`defaultWorkflowPermissions` is read or write), and whether Actions is allowed to approve pull requests. Audit these to catch overly permissive supply-chain settings, such as unrestricted actions, write-by-default tokens, or self-approving workflows.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"repositoryFineGrainedPermission":{"name":"repositoryFineGrainedPermission","type":"\u001bgithub.repositoryFineGrainedPermission","title":"GitHub repository fine-grained permission","desc":"Fine-grained permission that can be granted on the repositories of an organization, forming the building blocks of custom repository roles. Enumerating these permissions lets you audit which capabilities an organization can delegate through its roles. The permission is selected by its name, with a human-readable description of what it grants.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"repositoryRuleset":{"name":"repositoryRuleset","type":"\u001bgithub.repositoryRuleset","title":"GitHub repository ruleset","desc":"Rule-based branch and tag protection defined at the repository or organization level. Rulesets replace classic branch protection, so auditing them reveals which refs are guarded, how strictly the rules are applied, and who can bypass them. The `sourceType` field distinguishes rules defined directly on the repository from those inherited from the organization. The `enforcement` level determines whether a ruleset actively blocks non-conforming changes, only reports them, or is turned off, and `bypassActors` exposes the escape hatches that let specific users, teams, or apps sidestep the protections.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"review":{"name":"review","type":"\u001bgithub.review","title":"GitHub pull request review","desc":"A review submitted against a pull request, recording whether a reviewer approved, requested changes, or only commented. Useful for auditing that merged changes received the approvals a branch protection or compliance policy requires, and that reviewers have the expected relationship to the repository. The `state` field carries the review verdict and `authorAssociation` describes how the reviewer relates to the project.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"runner":{"name":"runner","type":"\u001bgithub.runner","title":"GitHub Actions self-hosted runner","desc":"Self-hosted runner registered to a repository or organization to execute GitHub Actions workflow jobs on infrastructure you control. Because a self-hosted runner runs workflow code on your own hosts, its configuration carries real risk: use it to audit which platform (`os` of linux, macos, or windows) and `architecture` a runner reports, whether it is currently `online` or `offline` via `status`, whether it is `ephemeral` (torn down after a single job) versus persistent, and the `labels` that route jobs to it. The `busy` flag reports whether a job is executing right now.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"runnerLabel":{"name":"runnerLabel","type":"\u001bgithub.runnerLabel","title":"GitHub Actions runner label","desc":"Label assigned to a self-hosted Actions runner, used to route workflow jobs to runners with matching `runs-on` labels. The `type` field distinguishes read-only labels applied by the system from custom labels defined by the runner administrator, which is useful when auditing whether jobs can be steered onto specific self-hosted machines.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"secretScanningAlert":{"name":"secretScanningAlert","type":"\u001bgithub.secretScanningAlert","title":"GitHub secret scanning alert","desc":"Credential (API key, token, or password) that GitHub secret scanning detected committed to a repository, exposing it for potential misuse. Auditing these alerts surfaces leaked secrets that need rotation: `secretType` and `secretTypeDisplayName` identify the kind of credential, `validity` reports whether it is still live (active, inactive, unknown), and `publiclyLeaked` and `multiRepo` flag broader exposure across public code or several repositories. The `state` (open, resolved), `resolution`, and push-protection bypass fields track whether the leak has been remediated.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"team":{"name":"team","type":"\u001bgithub.team","title":"GitHub team","desc":"Team within a GitHub organization, grouping members and granting them shared access to repositories. Teams are a primary unit of access control: auditing a team's `privacy`, its `defaultPermission`, and the `repositories` it can reach shows which members inherit access to which code. The `members` collection lists the users on the team and `organization` links back to the owning org.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"user":{"name":"user","type":"\u001bgithub.user","title":"GitHub user","desc":"GitHub user account, covering public profile details, follower and following counts, and account status. The `siteAdmin` flag identifies instance administrators on GitHub Enterprise, and `suspendedAt` records when an account was suspended, both useful for auditing privileged or disabled accounts. Also exposes the user's `repositories`, `gists`, and registered `publicKeys` for reviewing what an account owns and which SSH keys can act on its behalf.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"webhook":{"name":"webhook","type":"\u001bgithub.webhook","title":"GitHub webhook","desc":"HTTP callback that GitHub invokes when subscribed events occur on a repository or organization, delivering event payloads to an external endpoint. Auditing webhooks reveals where repository and organization activity is sent, which events trigger delivery, whether the endpoint is still `active`, and whether TLS certificate verification is disabled (`insecureSsl`), which would expose payloads to interception.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"workflow":{"name":"workflow","type":"\u001bgithub.workflow","title":"GitHub Actions workflow","desc":"GitHub Actions workflow defined in a repository under `.github/workflows`. Workflows drive CI/CD and automation, so auditing them matters for supply chain security: what events trigger a run, which jobs and permissions they grant, and whether a workflow is active or disabled. The `configuration` field exposes the parsed workflow YAML so trigger events, jobs, and permissions can be inspected, and `file` links to the underlying source file.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true}},"title":"GitHub","desc":"Namespace root for GitHub queries, exposing organizations, repositories, teams, users, packages, deploy keys, and security and governance settings across the connected account.","private":true,"min_provider_version":"10.2.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.actionsSecret":{"id":"github.actionsSecret","name":"github.actionsSecret","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Secret create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"environmentName":{"name":"environmentName","type":"\u0007","is_mandatory":true,"title":"Environment name (set for environment scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Secret name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"organizationName":{"name":"organizationName","type":"\u0007","is_mandatory":true,"title":"Owning organization login (set for organization scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositoryName":{"name":"repositoryName","type":"\u0007","is_mandatory":true,"title":"Owning repository name (set for repository and environment scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositoryOwner":{"name":"repositoryOwner","type":"\u0007","is_mandatory":true,"title":"Owning repository owner login (set for repository and environment scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope of the secret (organization, repository, environment)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"selectedRepositories":{"name":"selectedRepositories","type":"\u0019\u001bgithub.repository","title":"Repositories that have access to this organization secret (only when visibility is \"selected\")","provider":"go.mondoo.com/cnquery/v9/providers/github"},"selectedRepositoriesUrl":{"name":"selectedRepositoriesUrl","type":"\u0007","is_mandatory":true,"title":"URL to the list of selected repositories for an organization secret with visibility \"selected\"","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Secret last update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"visibility":{"name":"visibility","type":"\u0007","is_mandatory":true,"title":"Visibility of an organization secret (all, private, selected); empty for repository or environment scope","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions secret","desc":"Encrypted secret available to GitHub Actions workflows, configured at the repository, organization, or environment scope. Secret values are never returned by the API, so this exposes metadata only, which is useful for auditing where secrets live and how broadly they are shared. The scope field selects which owner fields apply, and for an organization secret the visibility field (all, private, or selected) determines which repositories may read it; when visibility is \"selected\", selectedRepositories enumerates exactly which repositories have access.","private":true,"min_provider_version":"13.1.1","defaults":"name scope visibility","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.actionsVariable":{"id":"github.actionsVariable","name":"github.actionsVariable","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Variable create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"environmentName":{"name":"environmentName","type":"\u0007","is_mandatory":true,"title":"Environment name (set for environment scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Variable name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"organizationName":{"name":"organizationName","type":"\u0007","is_mandatory":true,"title":"Owning organization login (set for organization scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositoryName":{"name":"repositoryName","type":"\u0007","is_mandatory":true,"title":"Owning repository name (set for repository and environment scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositoryOwner":{"name":"repositoryOwner","type":"\u0007","is_mandatory":true,"title":"Owning repository owner login (set for repository and environment scope)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope of the variable (organization, repository, environment)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"selectedRepositories":{"name":"selectedRepositories","type":"\u0019\u001bgithub.repository","title":"Repositories that have access to this organization variable (only when visibility is \"selected\")","provider":"go.mondoo.com/cnquery/v9/providers/github"},"selectedRepositoriesUrl":{"name":"selectedRepositoriesUrl","type":"\u0007","is_mandatory":true,"title":"URL to the list of selected repositories for an organization variable with visibility \"selected\"","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Variable last update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Variable value","provider":"go.mondoo.com/cnquery/v9/providers/github"},"visibility":{"name":"visibility","type":"\u0007","is_mandatory":true,"title":"Visibility of an organization variable (all, private, selected); empty for repository or environment scope","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions variable","desc":"Plaintext configuration value available to GitHub Actions workflows, defined at the repository, organization, or environment scope. Unlike secrets, variable values are stored and returned in cleartext and are readable by anyone with read access to the owning scope, so auditing them catches sensitive data that should have been a secret. The `scope` field records where the variable lives (organization, repository, or environment) and selects which of the `organizationName`, `repositoryName`, `repositoryOwner`, and `environmentName` owner fields are populated. For organization variables, `visibility` controls which repositories can consume the variable, and `selectedRepositories` resolves the allowed set when visibility is \"selected\".","private":true,"min_provider_version":"13.1.1","defaults":"name scope visibility","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.auditLogEntry":{"id":"github.auditLogEntry","name":"github.auditLogEntry","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"The action that was performed (e.g., user.login, repo.create)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"actor":{"name":"actor","type":"\u0007","is_mandatory":true,"title":"The actor who performed the action","provider":"go.mondoo.com/cnquery/v9/providers/github"},"actorId":{"name":"actorId","type":"\u0005","is_mandatory":true,"title":"Actor ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"actorLocation":{"name":"actorLocation","type":"\u0007","is_mandatory":true,"title":"Actor location country code","provider":"go.mondoo.com/cnquery/v9/providers/github"},"additionalFields":{"name":"additionalFields","type":"\n","is_mandatory":true,"title":"Attributes not mapped to a dedicated field","desc":"Catch-all map of any audit-log attributes GitHub returns for the event that this resource does not expose as a named field, keyed by the raw attribute name. Contents vary by `action`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"business":{"name":"business","type":"\u0007","is_mandatory":true,"title":"Business name (if applicable)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"businessId":{"name":"businessId","type":"\u0005","is_mandatory":true,"title":"Business ID (if applicable)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Event creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"data":{"name":"data","type":"\n","is_mandatory":true,"title":"Event-specific attributes","desc":"Map of extra attributes GitHub attaches to certain actions, keyed by attribute name with action-dependent values. The set of keys present depends on the entry's `action` (for example a repository event may include `repo` and `visibility`, a permission change `permission`).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"documentId":{"name":"documentId","type":"\u0007","is_mandatory":true,"title":"Unique document ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"externalIdentityNameId":{"name":"externalIdentityNameId","type":"\u0007","is_mandatory":true,"title":"External identity SAML NameID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"externalIdentityUsername":{"name":"externalIdentityUsername","type":"\u0007","is_mandatory":true,"title":"External identity username","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hashedToken":{"name":"hashedToken","type":"\u0007","is_mandatory":true,"title":"Hashed token (if applicable)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"org":{"name":"org","type":"\u0007","is_mandatory":true,"title":"Organization name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"orgId":{"name":"orgId","type":"\u0005","is_mandatory":true,"title":"Organization ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"timestamp":{"name":"timestamp","type":"\t","is_mandatory":true,"title":"Timestamp when the event occurred","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tokenId":{"name":"tokenId","type":"\u0005","is_mandatory":true,"title":"Token ID (if applicable)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tokenScopes":{"name":"tokenScopes","type":"\u0007","is_mandatory":true,"title":"Token scopes (if applicable)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u0007","is_mandatory":true,"title":"The user affected by the action","provider":"go.mondoo.com/cnquery/v9/providers/github"},"userId":{"name":"userId","type":"\u0005","is_mandatory":true,"title":"User ID","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub organization audit log entry","desc":"Single event from a GitHub organization's audit log, available for GitHub Enterprise Cloud organizations. Records the `action` performed (for example `user.login` or `repo.create`), the `actor` and their `actorLocation`, the affected `user`, `org`, and `business`, the event `timestamp`, SAML identity attributes (`externalIdentityNameId`, `externalIdentityUsername`), and token metadata (`hashedToken`, `tokenId`, `tokenScopes`). The `data` and `additionalFields` maps carry attributes specific to each action, useful for auditing who did what, from where, and with which credentials.","private":true,"min_provider_version":"11.4.123","defaults":"action actor timestamp","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.branch":{"id":"github.branch","name":"github.branch","fields":{"headCommit":{"name":"headCommit","type":"\u001bgithub.commit","title":"Repository branch HEAD commit","provider":"go.mondoo.com/cnquery/v9/providers/github"},"headCommitSha":{"name":"headCommitSha","type":"\u0007","is_mandatory":true,"title":"Repository branch HEAD commit SHA sum","min_provider_version":"11.3.7","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isDefault":{"name":"isDefault","type":"\u0004","is_mandatory":true,"title":"Whether the branch is the default branch","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isProtected":{"name":"isProtected","type":"\u0004","is_mandatory":true,"title":"Whether branch protection is enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Repository branch name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","is_mandatory":true,"title":"Repository branch owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"protectionRules":{"name":"protectionRules","type":"\u001bgithub.branchprotection","title":"Repository branch protection rules","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repoName":{"name":"repoName","type":"\u0007","is_mandatory":true,"title":"Repository branch repository name","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository branch","desc":"A single branch within a GitHub repository, selected by `name`. Central to auditing whether critical branches are guarded: `isProtected` reports whether branch protection applies, and `protectionRules` reaches the associated `github.branchprotection` settings that govern required reviews, status checks, and force-push or deletion limits. `isDefault` marks the repository's default branch, while `headCommit` resolves the commit at the branch tip.","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.branchprotection":{"id":"github.branchprotection","name":"github.branchprotection","fields":{"allowDeletions":{"name":"allowDeletions","type":"\n","is_mandatory":true,"title":"Deletion allowance","desc":"Whether matching branches may be deleted. The single key `enabled` holds the state; the same value is flattened onto this resource as allowDeletionsEnabled.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowDeletionsEnabled":{"name":"allowDeletionsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether branch deletions are allowed on matching branches","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowForcePushes":{"name":"allowForcePushes","type":"\n","is_mandatory":true,"title":"Force-push allowance","desc":"Whether force pushes are permitted on matching branches. The single key `enabled` holds the state; the same value is flattened onto this resource as allowForcePushesEnabled.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowForcePushesEnabled":{"name":"allowForcePushesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether force pushes are allowed on matching branches","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowForkSyncing":{"name":"allowForkSyncing","type":"\u0004","is_mandatory":true,"title":"Whether fork syncing is allowed","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"blockCreations":{"name":"blockCreations","type":"\u0004","is_mandatory":true,"title":"Whether creation of branches matching the pattern is blocked","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissStaleReviews":{"name":"dismissStaleReviews","type":"\u0004","is_mandatory":true,"title":"Whether stale reviews are dismissed when a new commit is pushed","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissalRestrictions":{"name":"dismissalRestrictions","type":"\n","is_mandatory":true,"title":"Review dismissal restrictions","desc":"Users and teams permitted to dismiss pull-request reviews, flattened from the pull-request review settings. Keys: `users` (list of user logins) and `teams` (list of team names).","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enforceAdmins":{"name":"enforceAdmins","type":"\n","is_mandatory":true,"title":"Administrator enforcement","desc":"Whether the branch protections also apply to repository administrators. Keys: `enabled` and `url`. The state is also flattened onto this resource as enforceAdminsEnabled.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enforceAdminsEnabled":{"name":"enforceAdminsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether administrators are included in branch protection enforcement","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Repository branch protection ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"lockBranch":{"name":"lockBranch","type":"\u0004","is_mandatory":true,"title":"Whether the branch is locked (read-only)","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requireCodeOwnerReviews":{"name":"requireCodeOwnerReviews","type":"\u0004","is_mandatory":true,"title":"Whether an approved review is required for files with a designated code owner","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requireLastPushApproval":{"name":"requireLastPushApproval","type":"\u0004","is_mandatory":true,"title":"Whether the most recent pusher is required to approve a pull request","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requireLinearHistory":{"name":"requireLinearHistory","type":"\n","is_mandatory":true,"title":"Linear history requirement","desc":"Whether a linear commit history is enforced (no merge commits). The single key `enabled` holds the state; the same value is flattened onto this resource as requireLinearHistoryEnabled.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requireLinearHistoryEnabled":{"name":"requireLinearHistoryEnabled","type":"\u0004","is_mandatory":true,"title":"Whether a linear commit history is required before merging","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requireSignedCommits":{"name":"requireSignedCommits","type":"\u0004","is_mandatory":true,"title":"Whether signed commits are required (alias for requiredSignatures)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredApprovingReviewCount":{"name":"requiredApprovingReviewCount","type":"\u0005","is_mandatory":true,"title":"Number of approving reviews required to merge a pull request (0 if not configured)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredConversationResolution":{"name":"requiredConversationResolution","type":"\n","is_mandatory":true,"title":"Required conversation resolution","desc":"Whether all pull-request comments must be resolved before merging. The single key `enabled` holds the state; the same value is flattened onto this resource as requiredConversationResolutionEnabled.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredConversationResolutionEnabled":{"name":"requiredConversationResolutionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether conversation resolution is required before merging","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredPullRequestReviews":{"name":"requiredPullRequestReviews","type":"\n","is_mandatory":true,"title":"Required pull request reviews","desc":"Pull-request review requirements. Keys: `dismissStaleReviews`, `requireCodeOwnerReviews`, `requiredApprovingReviewCount`, `requireLastPushApproval`, `dismissalRestrictions` (a `{users, teams}` object listing who may dismiss reviews), and `bypassPullRequestAllowances` (a `{users, teams, apps}` object listing who may bypass the requirement). The most-asserted values are also flattened onto this resource as requiredApprovingReviewCount, requireCodeOwnerReviews, dismissStaleReviews, and requireLastPushApproval.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredPullRequestReviewsEnabled":{"name":"requiredPullRequestReviewsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether a pull request review is required before merging","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredSignatures":{"name":"requiredSignatures","type":"\u0004","is_mandatory":true,"title":"Whether signed commits are required","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredStatusChecks":{"name":"requiredStatusChecks","type":"\n","is_mandatory":true,"title":"Required status checks","desc":"Status-check requirements for merging into the branch. Keys: `strict` (branches must be up to date before merging), `contexts` (list of required check names, deprecated), `checks` (list of `{context, app_id}` entries naming each required check and the app that must provide it), `contexts_url`, and `url`. Whether this protection is configured at all is flattened onto this resource as requiredStatusChecksEnabled.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requiredStatusChecksEnabled":{"name":"requiredStatusChecksEnabled","type":"\u0004","is_mandatory":true,"title":"Whether status checks are required before merging","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"restrictions":{"name":"restrictions","type":"\n","is_mandatory":true,"title":"Push restrictions","desc":"Restriction of who may push to matching branches. Keys: `users` (list of user logins), `teams` (list of team slugs), and `apps` (list of app slugs) with push access. Empty or absent when no push restriction is configured.","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub branch protection rule","desc":"Branch protection configuration for a repository branch, covering the controls that gate merges and pushes: required status checks, required pull-request reviews and approval counts, required conversation resolution, signed-commit and linear-history requirements, administrator enforcement, push restrictions, and whether force pushes, deletions, and branch locking are allowed. Auditing these settings shows whether a branch enforces code review and blocks unreviewed or destructive changes.","private":true,"min_provider_version":"9.0.0","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.codeScanningAlert":{"id":"github.codeScanningAlert","name":"github.codeScanningAlert","fields":{"closedAt":{"name":"closedAt","type":"\t","is_mandatory":true,"title":"When the alert was closed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedBy":{"name":"closedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who closed the alert","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Alert creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedAt":{"name":"dismissedAt","type":"\t","is_mandatory":true,"title":"When the alert was dismissed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedBy":{"name":"dismissedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who dismissed the alert","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedComment":{"name":"dismissedComment","type":"\u0007","is_mandatory":true,"title":"Comment on dismissal","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedReason":{"name":"dismissedReason","type":"\u0007","is_mandatory":true,"title":"Reason for dismissal","desc":"One of `false positive`, `won't fix`, or `used in tests`, or empty when the alert has not been dismissed.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"fixedAt":{"name":"fixedAt","type":"\t","is_mandatory":true,"title":"When the alert was fixed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"htmlUrl":{"name":"htmlUrl","type":"\u0007","is_mandatory":true,"title":"Web URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"mostRecentInstance":{"name":"mostRecentInstance","type":"\n","is_mandatory":true,"title":"Most recent instance of this alert","desc":"Dictionary describing the latest occurrence, with keys `ref`, `analysis_key`, `category`, `environment`, `state`, `commit_sha`, `message` (with a `text` field), `location` (with `path`, `start_line`, `end_line`, `start_column`, `end_column`), `html_url`, and `classifications`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Alert number","provider":"go.mondoo.com/cnquery/v9/providers/github"},"rule":{"name":"rule","type":"\n","is_mandatory":true,"title":"Rule that triggered the alert","desc":"Dictionary describing the code scanning rule, with keys `id`, `name`, `severity` (none, note, warning, error), `security_severity_level` (low, medium, high, critical), `description`, `full_description`, `help`, and `tags`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Alert state (open, closed, dismissed, fixed)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tool":{"name":"tool","type":"\n","is_mandatory":true,"title":"Analysis tool that produced the alert","desc":"Dictionary describing the scanning tool, with keys `name`, `version`, and `guid`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"API URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub code scanning alert","desc":"Security finding raised by a code scanning tool (such as CodeQL) against a repository. Each alert records an unresolved or resolved vulnerability along with its `state` (open, closed, dismissed, fixed), the `rule` that fired, the analysis `tool` that produced it, and, when suppressed, who dismissed it and the reason. Use it to audit outstanding findings and verify that dismissals are justified.","private":true,"min_provider_version":"11.4.121","defaults":"number state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.codeowners":{"id":"github.codeowners","fields":{"rule":{"name":"rule","type":"\u001bgithub.codeowners.rule","title":"CODEOWNERS rule","desc":"Single rule from a repository CODEOWNERS file, mapping a path `pattern` (e.g., `*.go`, `docs/*`) to the `owners` responsible for those paths. The `owners` list holds GitHub usernames, team slugs, or email addresses, and `lineNumber` gives the rule's position in the source file.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true}},"is_extension":true},"github.codeowners.rule":{"id":"github.codeowners.rule","name":"github.codeowners.rule","fields":{"lineNumber":{"name":"lineNumber","type":"\u0005","is_mandatory":true,"title":"Line number of the rule in the source file (1-indexed)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owners":{"name":"owners","type":"\u0019\u0007","is_mandatory":true,"title":"List of owners (GitHub usernames, team slugs, or email addresses) responsible for the pattern","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pattern":{"name":"pattern","type":"\u0007","is_mandatory":true,"title":"The path pattern (e.g. *, *.go, docs/*)","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"CODEOWNERS rule","desc":"Single rule from a repository CODEOWNERS file, mapping a path `pattern` (e.g., `*.go`, `docs/*`) to the `owners` responsible for those paths. The `owners` list holds GitHub usernames, team slugs, or email addresses, and `lineNumber` gives the rule's position in the source file.","private":true,"min_provider_version":"13.0.8","defaults":"pattern","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.collaborator":{"id":"github.collaborator","name":"github.collaborator","fields":{"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Collaborator ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"permissions":{"name":"permissions","type":"\u0019\u0007","is_mandatory":true,"title":"Access levels granted to the collaborator","desc":"Permission levels the collaborator holds on the repository. Any of admin, maintain, push, triage, or pull.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u001bgithub.user","is_mandatory":true,"title":"Collaborator's user information","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository collaborator","desc":"User granted access to a GitHub repository, along with the permission levels they hold. Auditing collaborators reveals who can read, write, or administer a repository and helps spot over-privileged access. The `user` field carries the collaborator's GitHub identity and `permissions` lists the granted access levels.","private":true,"min_provider_version":"9.0.0","defaults":"user.login user.name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.commit":{"id":"github.commit","name":"github.commit","fields":{"author":{"name":"author","type":"\u001bgithub.user","is_mandatory":true,"title":"Commit author","provider":"go.mondoo.com/cnquery/v9/providers/github"},"authoredDate":{"name":"authoredDate","type":"\t","is_mandatory":true,"title":"Authored date","min_provider_version":"11.4.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"commit":{"name":"commit","type":"\u001bgit.commit","is_mandatory":true,"title":"Commit resource object","provider":"go.mondoo.com/cnquery/v9/providers/github"},"committedDate":{"name":"committedDate","type":"\t","is_mandatory":true,"title":"Committed date","min_provider_version":"11.4.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"committer":{"name":"committer","type":"\u001bgithub.user","is_mandatory":true,"title":"Commit committer","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u0007","is_mandatory":true,"title":"Commit owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repository":{"name":"repository","type":"\u0007","is_mandatory":true,"title":"Commit repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sha":{"name":"sha","type":"\u0007","is_mandatory":true,"title":"Commit SHA","provider":"go.mondoo.com/cnquery/v9/providers/github"},"stats":{"name":"stats","type":"\n","is_mandatory":true,"title":"Change size statistics","desc":"Line-count summary for the commit. Keys: `additions` (lines added), `deletions` (lines removed), and `total` (additions plus deletions).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Commit URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository commit","desc":"A single commit in a GitHub repository, keyed by its `sha`. Ties the version-control record to GitHub accounts: the `author` and `committer` resolve to the GitHub users who wrote and applied the change, while the underlying `commit` carries the raw Git commit including the full message and GPG signature for verifying provenance and signed-commit policies. The `stats` report the size of the change (lines added, deleted, and the combined total).","private":true,"min_provider_version":"9.0.0","defaults":"sha","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.dependabotAlert":{"id":"github.dependabotAlert","name":"github.dependabotAlert","fields":{"autoDismissedAt":{"name":"autoDismissedAt","type":"\t","is_mandatory":true,"title":"When the alert was auto-dismissed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Alert creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependency":{"name":"dependency","type":"\n","is_mandatory":true,"title":"Vulnerable dependency","desc":"Keys: `package` (a nested object with `ecosystem` and `name`), `manifest_path` (the file that declares the dependency), and `scope` (development or runtime).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedAt":{"name":"dismissedAt","type":"\t","is_mandatory":true,"title":"When the alert was dismissed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedBy":{"name":"dismissedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who dismissed the alert","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedComment":{"name":"dismissedComment","type":"\u0007","is_mandatory":true,"title":"Comment on dismissal","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dismissedReason":{"name":"dismissedReason","type":"\u0007","is_mandatory":true,"title":"Reason for dismissal","desc":"One of fix_started, inaccurate, no_bandwidth, not_used, or tolerable_risk. Empty for alerts that have not been dismissed.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"fixedAt":{"name":"fixedAt","type":"\t","is_mandatory":true,"title":"When the vulnerability was fixed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"htmlUrl":{"name":"htmlUrl","type":"\u0007","is_mandatory":true,"title":"Web URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Alert number","provider":"go.mondoo.com/cnquery/v9/providers/github"},"securityAdvisory":{"name":"securityAdvisory","type":"\n","is_mandatory":true,"title":"Security advisory","desc":"The GitHub advisory behind the alert. Keys: `ghsa_id`, `cve_id`, `summary`, `description`, `severity`, `cvss`, `cwes`, `epss`, `identifiers`, `references`, `vulnerabilities`, `published_at`, `updated_at`, and `withdrawn_at`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"securityVulnerability":{"name":"securityVulnerability","type":"\n","is_mandatory":true,"title":"Vulnerability matched against the dependency","desc":"The specific advisory entry that applies to this dependency. Keys: `package` (with `ecosystem` and `name`), `severity`, `vulnerable_version_range`, and `first_patched_version`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"severity":{"name":"severity","type":"\u0007","is_mandatory":true,"title":"Severity of the alert: low, medium, high, or critical","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Alert state (auto_dismissed, dismissed, fixed, open)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"API URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Dependabot alert","desc":"Dependabot vulnerability alert raised against a repository's dependency graph, flagging a dependency with a known security advisory. Each alert is keyed by its per-repository `number` and carries the affected `dependency`, the `securityAdvisory` and `securityVulnerability` that triggered it, its remediation lifecycle (`state`, `fixedAt`, and dismissal details), and its `severity`. Query these to audit which repositories carry unresolved vulnerable dependencies and how each alert was triaged.","private":true,"min_provider_version":"11.4.120","defaults":"number state severity","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.deployKey":{"id":"github.deployKey","name":"github.deployKey","fields":{"addedBy":{"name":"addedBy","type":"\u001bgithub.user","title":"The user who added the key, if known","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ageInDays":{"name":"ageInDays","type":"\u0005","is_mandatory":true,"title":"Approximate age of the key in days since createdAt (-1 if createdAt is unknown)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the key was created","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Deploy key ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"The public SSH key","provider":"go.mondoo.com/cnquery/v9/providers/github"},"lastUsed":{"name":"lastUsed","type":"\t","is_mandatory":true,"title":"Time the key was last used (null if never used)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"readOnly":{"name":"readOnly","type":"\u0004","is_mandatory":true,"title":"Whether the key is read-only","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repository":{"name":"repository","type":"\u001bgithub.repository","title":"The repository this key is configured on","provider":"go.mondoo.com/cnquery/v9/providers/github"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Title given to the key","provider":"go.mondoo.com/cnquery/v9/providers/github"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether the key has been verified","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository deploy key","desc":"SSH deploy key granting a repository access for automated clients such as CI systems and deployment tooling. Deploy keys are a common source of long-lived, unrotated credentials, so audit them for keys that carry write access (`readOnly` is false), have gone stale (`lastUsed`, `ageInDays`), or are unverified. The `key` field holds the public SSH key material, and `addedBy` attributes the key to the user who configured it.","private":true,"min_provider_version":"13.0.8","defaults":"id title readOnly","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.deployment":{"id":"github.deployment","name":"github.deployment","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Deployment creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"creator":{"name":"creator","type":"\u001bgithub.user","is_mandatory":true,"title":"User who created the deployment","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Deployment description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"environment":{"name":"environment","type":"\u0007","is_mandatory":true,"title":"Target environment name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Deployment ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"latestStatus":{"name":"latestStatus","type":"\u001bgithub.deploymentStatus","title":"Latest deployment status","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","is_mandatory":true,"title":"Deployment repository owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"payload":{"name":"payload","type":"\n","is_mandatory":true,"title":"Deployment payload","desc":"Free-form JSON data supplied by the client when the deployment was created. Keys are user-defined and vary by workflow (for example a release version or a feature-flag set); GitHub imposes no schema on it.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ref":{"name":"ref","type":"\u0007","is_mandatory":true,"title":"Git ref (branch, tag, or SHA)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repoName":{"name":"repoName","type":"\u0007","is_mandatory":true,"title":"Deployment repository name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sha":{"name":"sha","type":"\u0007","is_mandatory":true,"title":"Git SHA being deployed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"statusesUrl":{"name":"statusesUrl","type":"\u0007","is_mandatory":true,"title":"Statuses URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"task":{"name":"task","type":"\u0007","is_mandatory":true,"title":"Deployment task (e.g., \"deploy\")","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Deployment update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub deployment","desc":"Deployment record requesting that a specific commit be released to an environment. The `sha` and `ref` identify the code being deployed, while `environment` and `task` describe where and how. Query it to audit what reached production and staging, who triggered each release, and the `latestStatus` reporting whether the deployment succeeded, failed, or is still in progress.","private":true,"min_provider_version":"11.4.123","defaults":"id environment sha","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.deploymentStatus":{"id":"github.deploymentStatus","name":"github.deploymentStatus","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Status creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"creator":{"name":"creator","type":"\u001bgithub.user","is_mandatory":true,"title":"User who created the status","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Status description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"environment":{"name":"environment","type":"\u0007","is_mandatory":true,"title":"Target environment name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"environmentUrl":{"name":"environmentUrl","type":"\u0007","is_mandatory":true,"title":"Environment URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Status ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"logUrl":{"name":"logUrl","type":"\u0007","is_mandatory":true,"title":"Log URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Deployment state (pending, success, failure, error, inactive, in_progress, queued)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"targetUrl":{"name":"targetUrl","type":"\u0007","is_mandatory":true,"title":"Target URL for the deployment","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Status update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub deployment status","desc":"A single status update recorded against a deployment, tracking how a release progressed through an environment over time. The `state` field carries the outcome (pending, success, failure, error, inactive, in_progress, or queued), `environment` names the target it applied to, and `creator` identifies who or what posted it. Auditing the status history shows whether deployments to sensitive environments succeeded, stalled, or errored, and links out to the deployed target and its logs.","private":true,"min_provider_version":"11.4.123","defaults":"id state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.environment":{"id":"github.environment","name":"github.environment","fields":{"canAdminsBypass":{"name":"canAdminsBypass","type":"\u0004","is_mandatory":true,"title":"Whether admins can bypass protection rules","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Environment creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"customBranchPolicies":{"name":"customBranchPolicies","type":"\u0004","is_mandatory":true,"title":"Whether custom branch policies are enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"htmlUrl":{"name":"htmlUrl","type":"\u0007","is_mandatory":true,"title":"Environment web URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Environment ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Environment name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"protectedBranches":{"name":"protectedBranches","type":"\u0004","is_mandatory":true,"title":"Whether only protected branches can deploy","provider":"go.mondoo.com/cnquery/v9/providers/github"},"protectionRules":{"name":"protectionRules","type":"\u0019\u001bgithub.environmentProtectionRule","is_mandatory":true,"title":"Protection rules for this environment","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secrets":{"name":"secrets","type":"\u0019\u001bgithub.actionsSecret","title":"GitHub Actions secrets configured at the environment level (values are not exposed)","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Environment update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Environment URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"variables":{"name":"variables","type":"\u0019\u001bgithub.actionsVariable","title":"GitHub Actions variables configured at the environment level","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"waitTimer":{"name":"waitTimer","type":"\u0005","is_mandatory":true,"title":"Wait timer in minutes before deployments can proceed","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub deployment environment","desc":"Deployment environment configured in a repository, such as production or staging. Environments gate deployments through protection rules: required reviewers, a `waitTimer` delay before a deployment can proceed, and branch restrictions governed by `protectedBranches` and `customBranchPolicies`. `canAdminsBypass` reveals whether administrators can override those rules, and each entry in `protectionRules` is a github.environmentProtectionRule. Environment-scoped `secrets` and `variables` expose the configuration made available to workflows deploying to this environment.","private":true,"min_provider_version":"11.4.123","defaults":"name id","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.environmentProtectionRule":{"id":"github.environmentProtectionRule","name":"github.environmentProtectionRule","fields":{"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Rule ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"preventSelfReview":{"name":"preventSelfReview","type":"\u0004","is_mandatory":true,"title":"Whether to prevent self-review","provider":"go.mondoo.com/cnquery/v9/providers/github"},"reviewers":{"name":"reviewers","type":"\u0019\n","is_mandatory":true,"title":"Reviewers required to approve a deployment","desc":"One entry per required reviewer, present for the `required_reviewers` rule type. Each entry carries `type` (`User` or `Team`) plus the reviewer's own fields flattened in: `login` and `id` for a user, `name`, `slug`, and `id` for a team.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Rule type (required_reviewers, wait_timer, branch_policy)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"waitTimer":{"name":"waitTimer","type":"\u0005","is_mandatory":true,"title":"Wait timer in minutes (for wait_timer type)","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub environment protection rule","desc":"Protection rule guarding deployments to an environment, the control that decides whether a deployment can proceed and who must sign off. The `type` field selects which control applies: `required_reviewers` gates a deployment behind approvals from the listed reviewers, `wait_timer` delays it by a fixed number of minutes, and `branch_policy` restricts which branches or tags may deploy. Audit these rules to confirm production environments require review and cannot be deployed to directly.","private":true,"min_provider_version":"11.4.123","defaults":"type","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.file":{"id":"github.file","name":"github.file","fields":{"content":{"name":"content","type":"\u0007","title":"File content","provider":"go.mondoo.com/cnquery/v9/providers/github"},"downloadUrl":{"name":"downloadUrl","type":"\u0007","is_mandatory":true,"title":"File download URL","min_provider_version":"11.4.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"exists":{"name":"exists","type":"\u0004","is_mandatory":true,"title":"Whether the file exists in the repository","min_provider_version":"11.4.14","provider":"go.mondoo.com/cnquery/v9/providers/github"},"files":{"name":"files","type":"\u0019\u001bgithub.file","title":"List of files in the directory","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isBinary":{"name":"isBinary","type":"\u0004","is_mandatory":true,"title":"Whether the file is a binary","desc":"Derived from the file extension against a known set of executable and package types (for example exe, dll, so, jar, class, rpm, deb, msi, whl). Directory entries and files without a matching extension are false.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"File name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ownerName":{"name":"ownerName","type":"\u0007","is_mandatory":true,"title":"File owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"File path","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repoName":{"name":"repoName","type":"\u0007","is_mandatory":true,"title":"File repository name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sha":{"name":"sha","type":"\u0007","is_mandatory":true,"title":"File shasum","provider":"go.mondoo.com/cnquery/v9/providers/github"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"File type","desc":"Either \"file\" for a regular file or \"dir\" for a directory.","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository file","desc":"File or directory entry in a GitHub repository, used to audit the presence and contents of tracked files such as workflow definitions, security policies, or CODEOWNERS. The `type` field distinguishes a regular file from a directory, `files` lists the child entries of a directory, and `content` returns the decoded text of a file.","private":true,"min_provider_version":"9.0.0","defaults":"name type","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.gist":{"id":"github.gist","name":"github.gist","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Gist create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Gist description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"files":{"name":"files","type":"\u0019\u001bgithub.gistfile","is_mandatory":true,"title":"Gist files","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Gist ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","is_mandatory":true,"title":"Gist owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"public":{"name":"public","type":"\u0004","is_mandatory":true,"title":"Whether the gist is public","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Gist update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub gist","desc":"Shareable code snippet or set of files hosted on GitHub. Audit gists to catch code, configuration, or secrets that a user has published outside of managed repositories. The `public` field distinguishes a secret gist (unlisted but reachable by URL) from one that is fully public, and `files` exposes the contents of each file for inspection.","private":true,"min_provider_version":"9.0.0","defaults":"description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.gistfile":{"id":"github.gistfile","name":"github.gistfile","fields":{"content":{"name":"content","type":"\u0007","title":"Gist file content","desc":"Raw text of the file, retrieved from its `rawUrl`. Resolves only for text-based MIME `type` values (for example text/plain, text/markdown, application/json, application/javascript, and common script types); binary or unsupported content types return an error.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"filename":{"name":"filename","type":"\u0007","is_mandatory":true,"title":"Gist file name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"gistId":{"name":"gistId","type":"\u0007","is_mandatory":true,"title":"Gist ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"language":{"name":"language","type":"\u0007","is_mandatory":true,"title":"Gist file language","provider":"go.mondoo.com/cnquery/v9/providers/github"},"rawUrl":{"name":"rawUrl","type":"\u0007","is_mandatory":true,"title":"Gist file raw URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"size":{"name":"size","type":"\u0005","is_mandatory":true,"title":"Gist file size","provider":"go.mondoo.com/cnquery/v9/providers/github"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"MIME content type of the gist file","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub gist file","desc":"Single file within a GitHub gist, including its detected `language`, MIME `type`, `size` in bytes, and the raw `content`. Reading the content lets audits scan published gist files for secrets or sensitive data.","private":true,"min_provider_version":"9.0.0","defaults":"filename","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.installation":{"id":"github.installation","name":"github.installation","fields":{"appId":{"name":"appId","type":"\u0005","is_mandatory":true,"title":"Application configured ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"appSlug":{"name":"appSlug","type":"\u0007","is_mandatory":true,"title":"Application configured slug","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Application installation create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"events":{"name":"events","type":"\u0019\u0007","is_mandatory":true,"title":"Subscribed events","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Application installation ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"permissions":{"name":"permissions","type":"\n","is_mandatory":true,"title":"Permissions granted to this installation","desc":"Map of resource type to access level, keyed by the resource name (contents, pull_requests, metadata, issues, actions, and so on). Each value is one of \"read\", \"write\", or \"admin\".","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositories":{"name":"repositories","type":"\u0019\u001bgithub.repository","title":"Repositories accessible to this installation (only when repositorySelection is \"selected\")","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositorySelection":{"name":"repositorySelection","type":"\u0007","is_mandatory":true,"title":"Repository selection (all, selected)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"suspendedAt":{"name":"suspendedAt","type":"\t","is_mandatory":true,"title":"Time the installation was suspended (null if not suspended)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"suspendedBy":{"name":"suspendedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"The user that suspended the installation, if any","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"targetType":{"name":"targetType","type":"\u0007","is_mandatory":true,"title":"Type of target the app is installed on (Organization, User)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Application installation update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub App installation","desc":"GitHub App installed on an organization or user account, granting the app a scoped set of permissions and a repository selection. Audit installations to see which apps hold access, the `permissions` they were granted, the `events` they subscribe to, and whether the installation is currently suspended. When `repositorySelection` is \"selected\", `repositories` lists the exact set of repositories the app can reach.","private":true,"min_provider_version":"9.0.0","defaults":"id appId","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.issue":{"id":"github.issue","name":"github.issue","fields":{"assignees":{"name":"assignees","type":"\u0019\u001bgithub.user","is_mandatory":true,"title":"Users to whom the issue is assigned","provider":"go.mondoo.com/cnquery/v9/providers/github"},"body":{"name":"body","type":"\u0007","is_mandatory":true,"title":"Issue body","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedAt":{"name":"closedAt","type":"\t","is_mandatory":true,"title":"Issue closed time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedBy":{"name":"closedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who closed the issue","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Issue create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"draft":{"name":"draft","type":"\u0004","is_mandatory":true,"title":"Whether the issue is a draft","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Issue ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"labels":{"name":"labels","type":"\u0019\n","is_mandatory":true,"title":"Labels applied to the issue","desc":"Each entry carries the label `name`, hex `color`, `description`, and `default` flag (true for labels created with the repository).","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"locked":{"name":"locked","type":"\u0004","is_mandatory":true,"title":"Whether the issue is locked","provider":"go.mondoo.com/cnquery/v9/providers/github"},"milestone":{"name":"milestone","type":"\u001bgithub.milestone","is_mandatory":true,"title":"Issue milestone","provider":"go.mondoo.com/cnquery/v9/providers/github"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Issue number","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Issue state","desc":"Either \"open\" or \"closed\".","provider":"go.mondoo.com/cnquery/v9/providers/github"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Issue title","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Issue update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Issue URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u001bgithub.user","is_mandatory":true,"title":"User who opened the issue","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub issue","desc":"Issue tracked in a GitHub repository, covering its open or closed state, the user who opened it, current assignees, applied labels, associated milestone, lock status, and the user who closed it. Useful for auditing issue triage ownership, backlog hygiene, and whether a conversation has been locked to collaborators.","private":true,"min_provider_version":"9.0.0","defaults":"title","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.license":{"id":"github.license","name":"github.license","fields":{"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"License key","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"License name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"spdxId":{"name":"spdxId","type":"\u0007","is_mandatory":true,"title":"License spdx ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"License URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository license","desc":"Open-source license that GitHub detected for a repository, used to audit license compliance and confirm a repository carries an approved license. The `spdxId` identifies the license under the SPDX standard (for example MIT or Apache-2.0), and `url` links to the full license text.","private":true,"min_provider_version":"9.0.0","defaults":"spdxId","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.mergeRequest":{"id":"github.mergeRequest","name":"github.mergeRequest","fields":{"assignees":{"name":"assignees","type":"\u0019\u001bgithub.user","is_mandatory":true,"title":"Pull request assignees","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedAt":{"name":"closedAt","type":"\t","is_mandatory":true,"title":"Pull request close time (in UTC); null if the pull request is still open","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"commits":{"name":"commits","type":"\u0019\u001bgithub.commit","title":"Pull request commits","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Pull request creation time (in UTC)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Pull request ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"labels":{"name":"labels","type":"\u0019\n","is_mandatory":true,"title":"Labels applied to the pull request (each dict: name, color, description)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"merged":{"name":"merged","type":"\u0004","is_mandatory":true,"title":"Whether the pull request has been merged","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"mergedAt":{"name":"mergedAt","type":"\t","is_mandatory":true,"title":"Time when the pull request was merged","min_provider_version":"11.4.122","provider":"go.mondoo.com/cnquery/v9/providers/github"},"mergedBy":{"name":"mergedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who merged the pull request","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"milestone":{"name":"milestone","type":"\u001bgithub.milestone","is_mandatory":true,"title":"Pull request milestone","min_provider_version":"11.4.122","provider":"go.mondoo.com/cnquery/v9/providers/github"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Pull request number","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","is_mandatory":true,"title":"Pull request owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repoName":{"name":"repoName","type":"\u0007","is_mandatory":true,"title":"Pull request repository name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requestedReviewers":{"name":"requestedReviewers","type":"\u0019\u001bgithub.user","is_mandatory":true,"title":"Users requested to review this pull request","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"reviews":{"name":"reviews","type":"\u0019\u001bgithub.review","title":"Pull request reviews","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Pull request state","desc":"One of \"open\" or \"closed\". A merged pull request reports \"closed\"; use the merged field to distinguish a merge from a close-without-merge.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Pull request title","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Pull request last update time (in UTC)","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub pull request","desc":"Pull request in a GitHub repository, covering its lifecycle state, authorship, review activity, and merge outcome. Useful for auditing who authored and merged a change, whether reviewers were requested, and how code reached the target branch. The commits collection exposes the change set and the reviews collection the review decisions recorded against it.","private":true,"min_provider_version":"9.0.0","defaults":"id state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.milestone":{"id":"github.milestone","name":"github.milestone","fields":{"closedAt":{"name":"closedAt","type":"\t","is_mandatory":true,"title":"Milestone closed time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedIssues":{"name":"closedIssues","type":"\u0005","is_mandatory":true,"title":"Number of closed issues in this milestone","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Milestone creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"creator":{"name":"creator","type":"\u001bgithub.user","is_mandatory":true,"title":"Milestone creator","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Milestone description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dueOn":{"name":"dueOn","type":"\t","is_mandatory":true,"title":"Milestone due date","provider":"go.mondoo.com/cnquery/v9/providers/github"},"htmlUrl":{"name":"htmlUrl","type":"\u0007","is_mandatory":true,"title":"Milestone web URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Milestone ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Milestone number","provider":"go.mondoo.com/cnquery/v9/providers/github"},"openIssues":{"name":"openIssues","type":"\u0005","is_mandatory":true,"title":"Number of open issues in this milestone","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Milestone state (open or closed)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Milestone title","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Milestone update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Milestone URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub milestone","desc":"Milestone that groups issues and pull requests in a GitHub repository toward a shared goal or release. Track progress with the `openIssues` and `closedIssues` counts, the `state` (open or closed), and the `dueOn` target date to audit whether planned work is on schedule.","private":true,"min_provider_version":"11.4.122","defaults":"title state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization":{"id":"github.organization","name":"github.organization","fields":{"actionsSettings":{"name":"actionsSettings","type":"\u001bgithub.organizationActionsSettings","title":"GitHub Actions settings for this organization","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"advancedSecurityEnabledForNewRepos":{"name":"advancedSecurityEnabledForNewRepos","type":"\u0004","is_mandatory":true,"title":"Whether GitHub Advanced Security is enabled for new repositories","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"auditLog":{"name":"auditLog","type":"\u0019\u001bgithub.auditLogEntry","title":"Organization audit log entries (requires GitHub Enterprise Cloud)","min_provider_version":"11.4.123","provider":"go.mondoo.com/cnquery/v9/providers/github"},"auditLogStreamConfig":{"name":"auditLogStreamConfig","type":"\u001bgithub.organization.auditLogStreamConfig","title":"Audit log streaming destination configuration (requires GitHub Enterprise Cloud)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"avatarUrl":{"name":"avatarUrl","type":"\u0007","is_mandatory":true,"title":"Organization profile picture URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"billingEmail":{"name":"billingEmail","type":"\u0007","is_mandatory":true,"title":"Organization billing email","provider":"go.mondoo.com/cnquery/v9/providers/github"},"blog":{"name":"blog","type":"\u0007","is_mandatory":true,"title":"Organization blog","provider":"go.mondoo.com/cnquery/v9/providers/github"},"collaborators":{"name":"collaborators","type":"\u0005","is_mandatory":true,"title":"Number of collaborators for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"company":{"name":"company","type":"\u0007","is_mandatory":true,"title":"Organization company","provider":"go.mondoo.com/cnquery/v9/providers/github"},"copilot":{"name":"copilot","type":"\u001bgithub.organization.copilot","title":"GitHub Copilot Business configuration for the organization (requires Copilot admin)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Create time for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"customProperties":{"name":"customProperties","type":"\u0019\u001bgithub.organization.customProperty","title":"Organization custom properties","min_provider_version":"11.4.47","provider":"go.mondoo.com/cnquery/v9/providers/github"},"customProperty":{"name":"customProperty","type":"\u001bgithub.organization.customProperty","title":"GitHub organization custom property","desc":"Custom property defined at the organization level. Custom properties attach governed metadata to repositories; this reports the property `name`, its `valueType`, whether a value is `required`, the `defaultValue` and `allowedValues` that constrain it, who may set it (`valuesEditableBy`), and where it was defined (`sourceType`).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"customRole":{"name":"customRole","type":"\u001bgithub.organization.customRole","title":"GitHub organization custom role","desc":"Custom organization role in a GitHub Enterprise Cloud organization. A custom role extends a `baseRole` (read, triage, write, maintain, admin) with an explicit set of granted `permissions` identifiers, letting you audit exactly what elevated access a non-standard role confers and where it was defined (`source`: Organization or Enterprise).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"customRoles":{"name":"customRoles","type":"\u0019\u001bgithub.organization.customRole","title":"Custom organization roles (requires GitHub Enterprise Cloud)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultRepositoryBranch":{"name":"defaultRepositoryBranch","type":"\u0007","is_mandatory":true,"title":"Default branch name for new repositories","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultRepositoryPermission":{"name":"defaultRepositoryPermission","type":"\u0007","is_mandatory":true,"title":"The default repository permission","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependabotAlertsEnabledForNewRepos":{"name":"dependabotAlertsEnabledForNewRepos","type":"\u0004","is_mandatory":true,"title":"Whether Dependabot alerts are enabled for new repositories","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependabotSecurityUpdatesEnabledForNewRepos":{"name":"dependabotSecurityUpdatesEnabledForNewRepos","type":"\u0004","is_mandatory":true,"title":"Whether Dependabot security updates are enabled for new repositories","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependencyGraphEnabledForNewRepos":{"name":"dependencyGraphEnabledForNewRepos","type":"\u0004","is_mandatory":true,"title":"Whether the dependency graph is enabled for new repositories","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Organization description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"diskUsage":{"name":"diskUsage","type":"\u0005","is_mandatory":true,"title":"Disk usage for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Organization email","provider":"go.mondoo.com/cnquery/v9/providers/github"},"followers":{"name":"followers","type":"\u0005","is_mandatory":true,"title":"Organization's number of followers","provider":"go.mondoo.com/cnquery/v9/providers/github"},"following":{"name":"following","type":"\u0005","is_mandatory":true,"title":"Number of organizations the organization is following","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasOrganizationProjects":{"name":"hasOrganizationProjects","type":"\u0004","is_mandatory":true,"title":"Whether the organization has projects","min_provider_version":"11.1.3","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasRepositoryProjects":{"name":"hasRepositoryProjects","type":"\u0004","is_mandatory":true,"title":"Whether projects in the organization have projects","min_provider_version":"11.1.3","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Organization ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"installations":{"name":"installations","type":"\u0019\u001bgithub.installation","title":"List of GitHub installations","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ipAllowList":{"name":"ipAllowList","type":"\u001bgithub.organization.ipAllowList","title":"IP allow list configuration for the organization (requires GitHub Enterprise Cloud)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isVerified":{"name":"isVerified","type":"\u0004","is_mandatory":true,"title":"Whether the organization is verified by GitHub","provider":"go.mondoo.com/cnquery/v9/providers/github"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Organization location","provider":"go.mondoo.com/cnquery/v9/providers/github"},"login":{"name":"login","type":"\u0007","is_mandatory":true,"title":"Organization login","provider":"go.mondoo.com/cnquery/v9/providers/github"},"members":{"name":"members","type":"\u0019\u001bgithub.user","title":"List of users that are part of the members group","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanChangeRepoVisibility":{"name":"membersCanChangeRepoVisibility","type":"\u0004","is_mandatory":true,"title":"Whether members can change repository visibility","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreateInternalRepositories":{"name":"membersCanCreateInternalRepositories","type":"\u0004","is_mandatory":true,"title":"Whether members can create internal repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreatePages":{"name":"membersCanCreatePages","type":"\u0004","is_mandatory":true,"title":"Whether members can create pages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreatePrivatePages":{"name":"membersCanCreatePrivatePages","type":"\u0004","is_mandatory":true,"title":"Whether members can create private pages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreatePrivateRepositories":{"name":"membersCanCreatePrivateRepositories","type":"\u0004","is_mandatory":true,"title":"Whether members can create private repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreatePublicPages":{"name":"membersCanCreatePublicPages","type":"\u0004","is_mandatory":true,"title":"Whether members can create public pages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreatePublicRepositories":{"name":"membersCanCreatePublicRepositories","type":"\u0004","is_mandatory":true,"title":"Whether members can create public repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreateRepositories":{"name":"membersCanCreateRepositories","type":"\u0004","is_mandatory":true,"title":"Whether members can create repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanCreateTeams":{"name":"membersCanCreateTeams","type":"\u0004","is_mandatory":true,"title":"Whether members can create teams","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanDeleteIssues":{"name":"membersCanDeleteIssues","type":"\u0004","is_mandatory":true,"title":"Whether members can delete issues","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanDeleteRepositories":{"name":"membersCanDeleteRepositories","type":"\u0004","is_mandatory":true,"title":"Whether members can delete repositories","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanForkPrivateRepos":{"name":"membersCanForkPrivateRepos","type":"\u0004","is_mandatory":true,"title":"Whether members can fork private repositories to their own GitHub account","min_provider_version":"9.0.3","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanInviteOutsideCollaborators":{"name":"membersCanInviteOutsideCollaborators","type":"\u0004","is_mandatory":true,"title":"Whether members can invite outside collaborators","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"membersCanViewDependencyInsights":{"name":"membersCanViewDependencyInsights","type":"\u0004","is_mandatory":true,"title":"Whether members can view dependency insights","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"nodeId":{"name":"nodeId","type":"\u0007","is_mandatory":true,"title":"Organization global node ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"oauthApp":{"name":"oauthApp","type":"\u001bgithub.organization.oauthApp","title":"OAuth application or SAML SSO-authorized credential","desc":"OAuth application or SAML SSO-authorized credential (personal access token or SSH key) that has been granted standing access to a GitHub Enterprise Cloud organization. Use it to review third-party and user credentials that can act against the org: the owning user `login`, the `credentialType`, granted `scopes`, and when the credential was authorized and last accessed.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"oauthApps":{"name":"oauthApps","type":"\u0019\u001bgithub.organization.oauthApp","title":"OAuth applications and other credentials authorized through SAML SSO (requires GitHub Enterprise Cloud)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"outsideCollaborators":{"name":"outsideCollaborators","type":"\u0019\u001bgithub.user","title":"List of outside collaborators","desc":"Users who have access to one or more repositories in the organization but are not members of the organization.","min_provider_version":"13.2.4","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ownedPrivateRepos":{"name":"ownedPrivateRepos","type":"\u0005","is_mandatory":true,"title":"Number of owned private repositories for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owners":{"name":"owners","type":"\u0019\u001bgithub.user","title":"List of users that are part of the owners group","provider":"go.mondoo.com/cnquery/v9/providers/github"},"packages":{"name":"packages","type":"\u0019\u001bgithub.package","title":"List of packages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"personalAccessToken":{"name":"personalAccessToken","type":"\u001bgithub.organization.personalAccessToken","title":"Fine-grained personal access token approved for an organization","desc":"Fine-grained personal access token approved to access a GitHub Enterprise Cloud organization. Reports the token `owner`, its `repositorySelection` (none, all, or a subset), the categorized `permissions` it was granted, and its lifecycle (`expired`, `expiresAt`, `lastUsedAt`) so you can audit standing programmatic access to the organization.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"personalAccessTokens":{"name":"personalAccessTokens","type":"\u0019\u001bgithub.organization.personalAccessToken","title":"Approved fine-grained personal access tokens that can access the organization (requires GitHub Enterprise Cloud)","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"plan":{"name":"plan","type":"\n","is_mandatory":true,"title":"GitHub plan details (name, seats, filled_seats, private_repos)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"privateGists":{"name":"privateGists","type":"\u0005","is_mandatory":true,"title":"Number of private gists","provider":"go.mondoo.com/cnquery/v9/providers/github"},"readersCanCreateDiscussions":{"name":"readersCanCreateDiscussions","type":"\u0004","is_mandatory":true,"title":"Whether readers can create discussions","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositories":{"name":"repositories","type":"\u0019\u001bgithub.repository","title":"List of repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositoryFineGrainedPermissions":{"name":"repositoryFineGrainedPermissions","type":"\u0019\u001bgithub.repositoryFineGrainedPermission","title":"Available fine-grained permissions for organization repositories","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"runners":{"name":"runners","type":"\u0019\u001bgithub.runner","title":"Organization self-hosted runners","min_provider_version":"11.4.123","provider":"go.mondoo.com/cnquery/v9/providers/github"},"samlConfig":{"name":"samlConfig","type":"\u001bgithub.organization.samlConfig","title":"SAML SSO configuration for the organization (requires GitHub Enterprise Cloud)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningEnabledForNewRepos":{"name":"secretScanningEnabledForNewRepos","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning is enabled for new repositories","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningPushProtectionEnabledForNewRepos":{"name":"secretScanningPushProtectionEnabledForNewRepos","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning push protection is enabled for new repositories","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningValidityChecksEnabled":{"name":"secretScanningValidityChecksEnabled","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning validity checks are enabled","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secrets":{"name":"secrets","type":"\u0019\u001bgithub.actionsSecret","title":"GitHub Actions secrets configured at the organization level (values are not exposed)","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"teams":{"name":"teams","type":"\u0019\u001bgithub.team","title":"List of users that are part of the teams group","provider":"go.mondoo.com/cnquery/v9/providers/github"},"totalPrivateRepos":{"name":"totalPrivateRepos","type":"\u0005","is_mandatory":true,"title":"Number of private repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"totalPublicRepos":{"name":"totalPublicRepos","type":"\u0005","is_mandatory":true,"title":"Number of public repositories","min_provider_version":"11.4.30","provider":"go.mondoo.com/cnquery/v9/providers/github"},"twitterUsername":{"name":"twitterUsername","type":"\u0007","is_mandatory":true,"title":"Organization Twitter handle","provider":"go.mondoo.com/cnquery/v9/providers/github"},"twoFactorRequirementEnabled":{"name":"twoFactorRequirementEnabled","type":"\u0004","is_mandatory":true,"title":"Whether two-factor authentication is required for all members","desc":"This value will be null if the API token does not have owner access on the organization.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Update time for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"variables":{"name":"variables","type":"\u0019\u001bgithub.actionsVariable","title":"GitHub Actions variables configured at the organization level","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"webCommitSignoffRequired":{"name":"webCommitSignoffRequired","type":"\u0004","is_mandatory":true,"title":"Whether web-based commit signoff is required","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"webhooks":{"name":"webhooks","type":"\u0019\u001bgithub.webhook","title":"List of webhooks","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Organization","desc":"GitHub organization account, the top-level container for its repositories, members, teams, and org-wide governance. Query it to audit an organization's security posture: two-factor enforcement, the default repository permission and member creation policies, GitHub Advanced Security, secret scanning and Dependabot defaults for new repositories, SAML single sign-on, the IP allow list, custom roles, approved OAuth apps and fine-grained personal access tokens, audit log streaming, and GitHub Copilot Business configuration.","min_provider_version":"9.0.0","defaults":"login name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.auditLogStreamConfig":{"id":"github.organization.auditLogStreamConfig","name":"github.organization.auditLogStreamConfig","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the stream was configured","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether audit log streaming is enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enabledStreamPaused":{"name":"enabledStreamPaused","type":"\u0004","is_mandatory":true,"title":"Whether the most recent stream test was successful (if reported)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"streamId":{"name":"streamId","type":"\u0005","is_mandatory":true,"title":"Identifier for the configured stream","provider":"go.mondoo.com/cnquery/v9/providers/github"},"streamType":{"name":"streamType","type":"\u0007","is_mandatory":true,"title":"Stream destination type (Azure Blob Storage, Azure Event Hubs, Amazon S3, Splunk, HTTPS Endpoint, Datadog, Google Cloud Storage)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the stream was last updated","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"Audit log streaming configuration for a GitHub organization","desc":"Audit log streaming destination configured for a GitHub Enterprise Cloud organization. Reports whether streaming is `enabled` and the `streamType` destination (Azure Blob Storage, Azure Event Hubs, Amazon S3, Splunk, HTTPS Endpoint, Datadog, or Google Cloud Storage), so you can confirm audit events are forwarded to an external system for retention.","private":true,"min_provider_version":"13.0.8","defaults":"enabled streamType","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.copilot":{"id":"github.organization.copilot","name":"github.organization.copilot","fields":{"contentExclusion":{"name":"contentExclusion","type":"\n","title":"Content exclusion patterns keyed by repository","desc":"Each key identifies a repository (full name) and each value is the list of glob patterns excluded from Copilot suggestions in that repository.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"copilotChat":{"name":"copilotChat","type":"\u0007","is_mandatory":true,"title":"Copilot Chat setting","desc":"One of `enabled`, `disabled`, or `unconfigured`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"publicCodeSuggestions":{"name":"publicCodeSuggestions","type":"\u0007","is_mandatory":true,"title":"Policy for whether Copilot suggests code that matches public code","desc":"One of `allow`, `block`, or `unconfigured`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seat":{"name":"seat","type":"\u001bgithub.organization.copilot.seat","title":"GitHub Copilot seat assignment","desc":"Single Copilot Business seat assignment in an organization. Identifies the `user` the seat is assigned to (or the `assigningTeamName` when granted through team membership), the `planType`, any `pendingCancellationDate`, and last-activity tracking (`lastActivityAt`, `lastActivityEditor`) for spotting unused seats.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"seatManagementSetting":{"name":"seatManagementSetting","type":"\u0007","is_mandatory":true,"title":"Seat management setting (assign_all, assign_selected, disabled, unconfigured)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seats":{"name":"seats","type":"\u0019\u001bgithub.organization.copilot.seat","title":"Per-user Copilot seat assignments","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seatsActiveThisCycle":{"name":"seatsActiveThisCycle","type":"\u0005","is_mandatory":true,"title":"Number of seats actively used in the current cycle","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seatsAddedThisCycle":{"name":"seatsAddedThisCycle","type":"\u0005","is_mandatory":true,"title":"Number of seats added during the current billing cycle","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seatsInactiveThisCycle":{"name":"seatsInactiveThisCycle","type":"\u0005","is_mandatory":true,"title":"Number of seats not actively used in the current cycle","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seatsPendingCancellation":{"name":"seatsPendingCancellation","type":"\u0005","is_mandatory":true,"title":"Number of seats pending cancellation at the end of the cycle","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seatsPendingInvitation":{"name":"seatsPendingInvitation","type":"\u0005","is_mandatory":true,"title":"Number of pending seat invitations","provider":"go.mondoo.com/cnquery/v9/providers/github"},"seatsTotal":{"name":"seatsTotal","type":"\u0005","is_mandatory":true,"title":"Total seats currently assigned for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Copilot Business configuration","desc":"GitHub Copilot Business configuration for an organization. Reports how seats are assigned (`seatManagementSetting`: assign_all, assign_selected, or disabled), the `publicCodeSuggestions` and `copilotChat` policies, the seat-usage breakdown, the `contentExclusion` glob patterns that keep files out of suggestions, and the per-user `seats`.","private":true,"min_provider_version":"13.3.3","defaults":"seatManagementSetting seatsTotal","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.copilot.seat":{"id":"github.organization.copilot.seat","name":"github.organization.copilot.seat","fields":{"assigneeLogin":{"name":"assigneeLogin","type":"\u0007","is_mandatory":true,"title":"Login of the user the seat is assigned to (empty when the assignee is a team)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"assigneeType":{"name":"assigneeType","type":"\u0007","is_mandatory":true,"title":"Type of assignee","desc":"One of `User`, `Team`, or `Organization`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"assigningTeamName":{"name":"assigningTeamName","type":"\u0007","is_mandatory":true,"title":"Login of the team via which this seat was granted, if any","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the seat was created","provider":"go.mondoo.com/cnquery/v9/providers/github"},"lastActivityAt":{"name":"lastActivityAt","type":"\t","is_mandatory":true,"title":"Last time the user used Copilot","provider":"go.mondoo.com/cnquery/v9/providers/github"},"lastActivityEditor":{"name":"lastActivityEditor","type":"\u0007","is_mandatory":true,"title":"Editor used during the last Copilot activity","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pendingCancellationDate":{"name":"pendingCancellationDate","type":"\u0007","is_mandatory":true,"title":"Date the seat is scheduled for cancellation (YYYY-MM-DD), empty otherwise","provider":"go.mondoo.com/cnquery/v9/providers/github"},"planType":{"name":"planType","type":"\u0007","is_mandatory":true,"title":"Copilot plan type for this seat","desc":"One of `business`, `enterprise`, or `individual`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Time the seat was last updated","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u001bgithub.user","is_mandatory":true,"title":"User the seat is assigned to","desc":"Null when the assignee is a team or organization rather than an individual user.","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Copilot seat assignment","desc":"Single Copilot Business seat assignment in an organization. Identifies the `user` the seat is assigned to (or the `assigningTeamName` when granted through team membership), the `planType`, any `pendingCancellationDate`, and last-activity tracking (`lastActivityAt`, `lastActivityEditor`) for spotting unused seats.","private":true,"min_provider_version":"13.3.3","defaults":"assigneeLogin planType lastActivityAt","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.customProperty":{"id":"github.organization.customProperty","name":"github.organization.customProperty","fields":{"allowedValues":{"name":"allowedValues","type":"\u0019\u0007","is_mandatory":true,"title":"An ordered list of the allowed values of the property","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultValue":{"name":"defaultValue","type":"\u0007","is_mandatory":true,"title":"Default value of the property","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Short description of the property","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The name of the property","provider":"go.mondoo.com/cnquery/v9/providers/github"},"required":{"name":"required","type":"\u0004","is_mandatory":true,"title":"Whether the property is required","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sourceType":{"name":"sourceType","type":"\u0007","is_mandatory":true,"title":"Source type of the property (where it was created)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"valueType":{"name":"valueType","type":"\u0007","is_mandatory":true,"title":"Type of the value for the property","provider":"go.mondoo.com/cnquery/v9/providers/github"},"valuesEditableBy":{"name":"valuesEditableBy","type":"\u0007","is_mandatory":true,"title":"Who can edit the values of the property","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub organization custom property","desc":"Custom property defined at the organization level. Custom properties attach governed metadata to repositories; this reports the property `name`, its `valueType`, whether a value is `required`, the `defaultValue` and `allowedValues` that constrain it, who may set it (`valuesEditableBy`), and where it was defined (`sourceType`).","private":true,"min_provider_version":"11.4.47","defaults":"name required","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.customRole":{"id":"github.organization.customRole","name":"github.organization.customRole","fields":{"baseRole":{"name":"baseRole","type":"\u0007","is_mandatory":true,"title":"Base role this is built on (read, triage, write, maintain, admin)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Role creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Role description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Role ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"permissions":{"name":"permissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permission identifiers granted by the role (e.g., repository.read, team.admin)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Origin of the role (e.g., Organization, Enterprise)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Role update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub organization custom role","desc":"Custom organization role in a GitHub Enterprise Cloud organization. A custom role extends a `baseRole` (read, triage, write, maintain, admin) with an explicit set of granted `permissions` identifiers, letting you audit exactly what elevated access a non-standard role confers and where it was defined (`source`: Organization or Enterprise).","private":true,"min_provider_version":"13.0.8","defaults":"id name baseRole","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.ipAllowList":{"id":"github.organization.ipAllowList","name":"github.organization.ipAllowList","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the IP allow list is enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enabledForInstalledApps":{"name":"enabledForInstalledApps","type":"\u0004","is_mandatory":true,"title":"Whether the IP allow list is enabled for installed GitHub Apps","provider":"go.mondoo.com/cnquery/v9/providers/github"},"entries":{"name":"entries","type":"\u0019\u001bgithub.organization.ipAllowList.entry","is_mandatory":true,"title":"List of allowed IP addresses or CIDR ranges","provider":"go.mondoo.com/cnquery/v9/providers/github"},"entry":{"name":"entry","type":"\u001bgithub.organization.ipAllowList.entry","title":"IP allow list entry","desc":"Single allowed IP address or CIDR range in an organization's IP allow list. The `allowedValue` field holds the address or range and `isActive` reports whether the entry is currently enforced.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true}},"title":"IP allow list configuration for a GitHub organization","desc":"IP allow list for a GitHub Enterprise Cloud organization, restricting which source addresses may reach the organization. Reports whether the list is `enabled`, whether it also applies to installed GitHub Apps (`enabledForInstalledApps`), and the individual allowed `entries`.","private":true,"min_provider_version":"13.0.8","defaults":"enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.ipAllowList.entry":{"id":"github.organization.ipAllowList.entry","name":"github.organization.ipAllowList.entry","fields":{"allowedValue":{"name":"allowedValue","type":"\u0007","is_mandatory":true,"title":"The IP/CIDR range allowed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Entry ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isActive":{"name":"isActive","type":"\u0004","is_mandatory":true,"title":"Whether this entry is active","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Human-readable name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"IP allow list entry","desc":"Single allowed IP address or CIDR range in an organization's IP allow list. The `allowedValue` field holds the address or range and `isActive` reports whether the entry is currently enforced.","private":true,"min_provider_version":"13.0.8","defaults":"name allowedValue","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.oauthApp":{"id":"github.organization.oauthApp","name":"github.organization.oauthApp","fields":{"authorizedAt":{"name":"authorizedAt","type":"\t","is_mandatory":true,"title":"Time when the credential was authorized for use","provider":"go.mondoo.com/cnquery/v9/providers/github"},"authorizedCredentialExpiresAt":{"name":"authorizedCredentialExpiresAt","type":"\t","is_mandatory":true,"title":"Expiry of the token (token credentials only)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"authorizedCredentialNote":{"name":"authorizedCredentialNote","type":"\u0007","is_mandatory":true,"title":"Note given to the token (token credentials only)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"authorizedCredentialTitle":{"name":"authorizedCredentialTitle","type":"\u0007","is_mandatory":true,"title":"Title given to the SSH key (SSH key credentials only)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"credentialId":{"name":"credentialId","type":"\u0005","is_mandatory":true,"title":"Unique identifier for the credential","provider":"go.mondoo.com/cnquery/v9/providers/github"},"credentialType":{"name":"credentialType","type":"\u0007","is_mandatory":true,"title":"Type of credential (e.g., \"personal access token\", \"OAuth\", \"SSH Key\")","provider":"go.mondoo.com/cnquery/v9/providers/github"},"fingerprint":{"name":"fingerprint","type":"\u0007","is_mandatory":true,"title":"Fingerprint (SSH key credentials only)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"lastAccessedAt":{"name":"lastAccessedAt","type":"\t","is_mandatory":true,"title":"Time when the credential was last accessed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"login":{"name":"login","type":"\u0007","is_mandatory":true,"title":"Login of the user that owns the underlying credential","provider":"go.mondoo.com/cnquery/v9/providers/github"},"organization":{"name":"organization","type":"\u001bgithub.organization","title":"The organization that authorized this credential","provider":"go.mondoo.com/cnquery/v9/providers/github"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"OAuth scopes the token has been granted","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tokenLastEight":{"name":"tokenLastEight","type":"\u0007","is_mandatory":true,"title":"Last eight characters of the token (only for personal access tokens)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u001bgithub.user","title":"The user that owns the underlying credential","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"OAuth application or SAML SSO-authorized credential","desc":"OAuth application or SAML SSO-authorized credential (personal access token or SSH key) that has been granted standing access to a GitHub Enterprise Cloud organization. Use it to review third-party and user credentials that can act against the org: the owning user `login`, the `credentialType`, granted `scopes`, and when the credential was authorized and last accessed.","private":true,"min_provider_version":"13.0.8","defaults":"login credentialType","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.personalAccessToken":{"id":"github.organization.personalAccessToken","name":"github.organization.personalAccessToken","fields":{"accessGrantedAt":{"name":"accessGrantedAt","type":"\t","is_mandatory":true,"title":"Time the token was granted access to the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"expired":{"name":"expired","type":"\u0004","is_mandatory":true,"title":"Whether the token has expired","provider":"go.mondoo.com/cnquery/v9/providers/github"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Time the token expires","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Approval ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"lastUsedAt":{"name":"lastUsedAt","type":"\t","is_mandatory":true,"title":"Last time the token was used for authentication","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","title":"The user that owns the token","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ownerLogin":{"name":"ownerLogin","type":"\u0007","is_mandatory":true,"title":"Owning user login","provider":"go.mondoo.com/cnquery/v9/providers/github"},"permissions":{"name":"permissions","type":"\n","is_mandatory":true,"title":"Permissions granted by the token","desc":"Keyed by category: `organization`, `repository`, and `other`. Each value maps a permission name to the granted access level (for example `read` or `write`).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositorySelection":{"name":"repositorySelection","type":"\u0007","is_mandatory":true,"title":"Repository selection (none, all, subset)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tokenId":{"name":"tokenId","type":"\u0005","is_mandatory":true,"title":"Token ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tokenName":{"name":"tokenName","type":"\u0007","is_mandatory":true,"title":"Token name","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"Fine-grained personal access token approved for an organization","desc":"Fine-grained personal access token approved to access a GitHub Enterprise Cloud organization. Reports the token `owner`, its `repositorySelection` (none, all, or a subset), the categorized `permissions` it was granted, and its lifecycle (`expired`, `expiresAt`, `lastUsedAt`) so you can audit standing programmatic access to the organization.","private":true,"min_provider_version":"13.0.8","defaults":"tokenName tokenId","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organization.samlConfig":{"id":"github.organization.samlConfig","name":"github.organization.samlConfig","fields":{"digestMethod":{"name":"digestMethod","type":"\u0007","is_mandatory":true,"title":"SAML digest method algorithm","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether SAML SSO is enabled for the organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"idpCertificate":{"name":"idpCertificate","type":"\u0007","is_mandatory":true,"title":"The IdP X.509 certificate (PEM)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"issuer":{"name":"issuer","type":"\u0007","is_mandatory":true,"title":"The IdP issuer URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"signatureMethod":{"name":"signatureMethod","type":"\u0007","is_mandatory":true,"title":"SAML signature method algorithm","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ssoUrl":{"name":"ssoUrl","type":"\u0007","is_mandatory":true,"title":"The URL used for sign in","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"SAML SSO configuration for a GitHub organization","desc":"SAML single sign-on configuration for a GitHub Enterprise Cloud organization, governing whether members authenticate through an external identity provider. Reports whether SSO is `enabled`, the identity-provider sign-in `ssoUrl` and `issuer`, the negotiated `digestMethod` and `signatureMethod` algorithms, and the PEM-encoded `idpCertificate` used to validate assertions.","private":true,"min_provider_version":"13.0.8","defaults":"enabled ssoUrl","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.organizationActionsSettings":{"id":"github.organizationActionsSettings","name":"github.organizationActionsSettings","fields":{"allowedActions":{"name":"allowedActions","type":"\u0007","is_mandatory":true,"title":"Which actions are allowed (all, local_only, selected)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"canApprovePullRequestReviews":{"name":"canApprovePullRequestReviews","type":"\u0004","is_mandatory":true,"title":"Whether Actions can approve pull request reviews","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultWorkflowPermissions":{"name":"defaultWorkflowPermissions","type":"\u0007","is_mandatory":true,"title":"Default workflow permissions (read, write)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enabledRepositories":{"name":"enabledRepositories","type":"\u0007","is_mandatory":true,"title":"Which repositories can use Actions (all, none, selected)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"shaPinningRequired":{"name":"shaPinningRequired","type":"\u0004","is_mandatory":true,"title":"Whether SHA pinning is required for actions","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions settings for an organization","desc":"Organization-wide GitHub Actions security configuration, useful for auditing which repositories may run Actions, which actions and workflows are permitted, and how much power the default `GITHUB_TOKEN` grants. The `enabledRepositories` field controls scope (all, none, selected), `allowedActions` restricts sources (all, local_only, selected), `defaultWorkflowPermissions` sets the token grant (read or write), and `canApprovePullRequestReviews` reveals whether workflow runs can approve their own pull request reviews.","private":true,"min_provider_version":"11.4.131","defaults":"allowedActions","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.package":{"id":"github.package","name":"github.package","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Package create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Package ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","is_mandatory":true,"title":"Package owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"packageType":{"name":"packageType","type":"\u0007","is_mandatory":true,"title":"Package type","desc":"Registry ecosystem hosting the package. One of npm, maven, rubygems, docker, nuget, or container.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repository":{"name":"repository","type":"\u001bgithub.repository","title":"Package repository information","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Package update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"versionCount":{"name":"versionCount","type":"\u0005","is_mandatory":true,"title":"Number of versions published for the package","provider":"go.mondoo.com/cnquery/v9/providers/github"},"versions":{"name":"versions","type":"\u0019\u001bgithub.packageVersion","title":"Package versions","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"visibility":{"name":"visibility","type":"\u0007","is_mandatory":true,"title":"Package visibility","desc":"Who can pull the package. One of public, private, or internal.","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub package","desc":"Package hosted on GitHub Packages, such as a container image, npm module, or Maven artifact published from a repository. Query it to audit what a repository publishes, who owns it, and how each version is exposed. The `packageType` field identifies the registry ecosystem and `visibility` reports whether consumers outside the organization can pull the package.","private":true,"min_provider_version":"9.0.0","defaults":"name packageType visibility repository.fullName","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.packageVersion":{"id":"github.packageVersion","name":"github.packageVersion","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Version creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Version description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Version ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"license":{"name":"license","type":"\u0007","is_mandatory":true,"title":"Version license","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Version name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"packageHtmlUrl":{"name":"packageHtmlUrl","type":"\u0007","is_mandatory":true,"title":"Package HTML URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Version update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Version URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub package version","desc":"A single published version of a package hosted on GitHub Packages, carrying the version's name, canonical url, packageHtmlUrl landing page, license, description, and the createdAt and updatedAt timestamps that let you audit how recently a version was published or refreshed.","private":true,"min_provider_version":"11.4.131","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.packages":{"id":"github.packages","name":"github.packages","fields":{"internal":{"name":"internal","type":"\u0019\u001bgithub.package","title":"Internal packages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"list":{"name":"list","type":"\u0019\u001bgithub.package","provider":"go.mondoo.com/cnquery/v9/providers/github"},"private":{"name":"private","type":"\u0019\u001bgithub.package","title":"Private packages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"public":{"name":"public","type":"\u0019\u001bgithub.package","title":"Public packages","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"list_type":"\u001bgithub.package","title":"GitHub Packages collection","desc":"Packages hosted on GitHub Packages for the connected account, covering container images, npm/Maven/NuGet/RubyGems artifacts, and other supported registries. The default list returns every `github.package`, while `public`, `private`, and `internal` return the subsets filtered by package visibility, so you can audit which artifacts are exposed beyond the organization.","min_provider_version":"11.3.7","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.publicKey":{"id":"github.publicKey","name":"github.publicKey","fields":{"ageInDays":{"name":"ageInDays","type":"\u0005","is_mandatory":true,"title":"Approximate age of the key in days since createdAt (-1 if createdAt is unknown)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the key was created","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Public key ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"key":{"name":"key","type":"\u0007","is_mandatory":true,"title":"The public SSH key","provider":"go.mondoo.com/cnquery/v9/providers/github"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Title given to the key","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u001bgithub.user","title":"The user this key belongs to","provider":"go.mondoo.com/cnquery/v9/providers/github"},"verified":{"name":"verified","type":"\u0004","is_mandatory":true,"title":"Whether the key has been verified","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub user public SSH key","desc":"Public SSH key registered to a GitHub user account and used to authenticate Git operations over SSH. Auditing these keys surfaces stale or unverified credentials: `verified` reports whether GitHub confirmed the key belongs to the account, while `createdAt` and `ageInDays` reveal long-lived keys that may warrant rotation.","private":true,"min_provider_version":"13.0.8","defaults":"id title","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.release":{"id":"github.release","name":"github.release","fields":{"author":{"name":"author","type":"\u001bgithub.user","is_mandatory":true,"title":"Release author","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Release creation time","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Release name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"preRelease":{"name":"preRelease","type":"\u0004","is_mandatory":true,"title":"Whether the release is a pre-release","provider":"go.mondoo.com/cnquery/v9/providers/github"},"publishedAt":{"name":"publishedAt","type":"\t","is_mandatory":true,"title":"Release publish time","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"tagName":{"name":"tagName","type":"\u0007","is_mandatory":true,"title":"Release tag name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Release URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub release","desc":"Published release cut from a repository, tied to a git tag and often carrying distributable artifacts. Auditing releases confirms that shipped versions map to expected tags, distinguishes stable releases from pre-releases via `preRelease`, and attributes each publish to an `author` for change-provenance review.","private":true,"min_provider_version":"9.0.0","defaults":"name tagName","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository":{"id":"github.repository","name":"github.repository","fields":{"actionsSettings":{"name":"actionsSettings","type":"\u001bgithub.repositoryActionsSettings","title":"GitHub Actions settings for this repository","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"adminCollaborators":{"name":"adminCollaborators","type":"\u0019\u001bgithub.collaborator","title":"List of admin collaborators for the repository","min_provider_version":"11.4.14","provider":"go.mondoo.com/cnquery/v9/providers/github"},"advancedSecurityEnabled":{"name":"advancedSecurityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether GitHub Advanced Security is enabled","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allMergeRequests":{"name":"allMergeRequests","type":"\u0019\u001bgithub.mergeRequest","title":"List of all merge requests for the repository","min_provider_version":"9.1.12","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowAutoMerge":{"name":"allowAutoMerge","type":"\u0004","is_mandatory":true,"title":"Whether the repository allows auto merging","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowForking":{"name":"allowForking","type":"\u0004","is_mandatory":true,"title":"Whether the repository allows forking","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowMergeCommit":{"name":"allowMergeCommit","type":"\u0004","is_mandatory":true,"title":"Whether the repository allows merge commit","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowRebaseMerge":{"name":"allowRebaseMerge","type":"\u0004","is_mandatory":true,"title":"Whether the repository allows rebase merge","provider":"go.mondoo.com/cnquery/v9/providers/github"},"allowSquashMerge":{"name":"allowSquashMerge","type":"\u0004","is_mandatory":true,"title":"Whether the repository allows squash merge","provider":"go.mondoo.com/cnquery/v9/providers/github"},"archived":{"name":"archived","type":"\u0004","is_mandatory":true,"title":"Whether the repository is archived","provider":"go.mondoo.com/cnquery/v9/providers/github"},"branches":{"name":"branches","type":"\u0019\u001bgithub.branch","title":"List of branches for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"cloneUrl":{"name":"cloneUrl","type":"\u0007","is_mandatory":true,"title":"Repository clone URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedIssues":{"name":"closedIssues","type":"\u0019\u001bgithub.issue","title":"List of repository closed issues","provider":"go.mondoo.com/cnquery/v9/providers/github"},"closedMergeRequests":{"name":"closedMergeRequests","type":"\u0019\u001bgithub.mergeRequest","title":"List of closed merge requests for the repository","min_provider_version":"9.1.12","provider":"go.mondoo.com/cnquery/v9/providers/github"},"codeOfConductFile":{"name":"codeOfConductFile","type":"\u001bgithub.file","title":"Repository code of conduct","min_provider_version":"11.4.14","provider":"go.mondoo.com/cnquery/v9/providers/github"},"codeScanningAlerts":{"name":"codeScanningAlerts","type":"\u0019\u001bgithub.codeScanningAlert","title":"Code scanning alerts for the repository","min_provider_version":"11.4.121","provider":"go.mondoo.com/cnquery/v9/providers/github"},"codeSecurityEnabled":{"name":"codeSecurityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether GitHub code security is enabled","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"codeowners":{"name":"codeowners","type":"\u001bgithub.repository.codeowners","title":"Parsed CODEOWNERS rules (from .github/CODEOWNERS, CODEOWNERS, or docs/CODEOWNERS)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"collaborators":{"name":"collaborators","type":"\u0019\u001bgithub.collaborator","title":"List of all collaborators for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"commits":{"name":"commits","type":"\u0019\u001bgithub.commit","title":"List of commits for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"contributors":{"name":"contributors","type":"\u0019\u001bgithub.user","title":"List of contributors for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"copilotCloudAgent":{"name":"copilotCloudAgent","type":"\u001bgithub.repository.copilotCloudAgent","title":"Copilot coding agent configuration (null when the repository has no coding agent configuration)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Repository create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"customProperties":{"name":"customProperties","type":"\n","is_mandatory":true,"title":"Custom properties assigned to the repository","desc":"Keyed by the organization-defined custom property name, with each value being the string or list of strings assigned to that property on this repository. Empty when the organization defines no custom properties.","min_provider_version":"11.4.47","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultBranch":{"name":"defaultBranch","type":"\u001bgithub.branch","title":"Default branch","min_provider_version":"11.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultBranchName":{"name":"defaultBranchName","type":"\u0007","is_mandatory":true,"title":"Default branch name for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependabotAlerts":{"name":"dependabotAlerts","type":"\u0019\u001bgithub.dependabotAlert","title":"Dependabot alerts for the repository","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependabotSecurityUpdatesEnabled":{"name":"dependabotSecurityUpdatesEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Dependabot security updates are enabled","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"deployKeys":{"name":"deployKeys","type":"\u0019\u001bgithub.deployKey","title":"Deploy keys configured on the repository","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"deployments":{"name":"deployments","type":"\u0019\u001bgithub.deployment","title":"Deployments for the repository","min_provider_version":"11.4.123","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Repository description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"disabled":{"name":"disabled","type":"\u0004","is_mandatory":true,"title":"Whether the repository is disabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"environments":{"name":"environments","type":"\u0019\u001bgithub.environment","title":"Deployment environments for the repository","min_provider_version":"11.4.123","provider":"go.mondoo.com/cnquery/v9/providers/github"},"files":{"name":"files","type":"\u0019\u001bgithub.file","title":"List of files in the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"forks":{"name":"forks","type":"\u0019\u001bgithub.repository","title":"List of repository forks","provider":"go.mondoo.com/cnquery/v9/providers/github"},"forksCount":{"name":"forksCount","type":"\u0005","is_mandatory":true,"title":"Number of repository forks","provider":"go.mondoo.com/cnquery/v9/providers/github"},"fullName":{"name":"fullName","type":"\u0007","is_mandatory":true,"title":"Repository full name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasDiscussions":{"name":"hasDiscussions","type":"\u0004","is_mandatory":true,"title":"Whether the repository has discussions","min_provider_version":"9.0.3","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasDownloads":{"name":"hasDownloads","type":"\u0004","is_mandatory":true,"title":"Whether the repository has downloads","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasIssues":{"name":"hasIssues","type":"\u0004","is_mandatory":true,"title":"Whether the repository has open issues","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasPages":{"name":"hasPages","type":"\u0004","is_mandatory":true,"title":"Whether the repository has pages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasProjects":{"name":"hasProjects","type":"\u0004","is_mandatory":true,"title":"Whether the repository has projects","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasPullRequests":{"name":"hasPullRequests","type":"\u0004","is_mandatory":true,"title":"Whether the repository has pull requests enabled","min_provider_version":"13.6.6","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hasWiki":{"name":"hasWiki","type":"\u0004","is_mandatory":true,"title":"Whether the repository has a wiki","provider":"go.mondoo.com/cnquery/v9/providers/github"},"homepage":{"name":"homepage","type":"\u0007","is_mandatory":true,"title":"Repository homepage","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Repository ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isFork":{"name":"isFork","type":"\u0004","is_mandatory":true,"title":"Whether the repository is a fork","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isTemplate":{"name":"isTemplate","type":"\u0004","is_mandatory":true,"title":"Whether the repository is an organization repository template","min_provider_version":"9.0.3","provider":"go.mondoo.com/cnquery/v9/providers/github"},"language":{"name":"language","type":"\u0007","is_mandatory":true,"title":"Repository language","provider":"go.mondoo.com/cnquery/v9/providers/github"},"license":{"name":"license","type":"\u001bgithub.license","title":"Repository license","provider":"go.mondoo.com/cnquery/v9/providers/github"},"milestones":{"name":"milestones","type":"\u0019\u001bgithub.milestone","title":"List of repository milestones","min_provider_version":"11.4.122","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Repository name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"openIssues":{"name":"openIssues","type":"\u0019\u001bgithub.issue","title":"List of repository open issues","provider":"go.mondoo.com/cnquery/v9/providers/github"},"openIssuesCount":{"name":"openIssuesCount","type":"\u0005","is_mandatory":true,"title":"Number of open issues in repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"openMergeRequests":{"name":"openMergeRequests","type":"\u0019\u001bgithub.mergeRequest","title":"List of open merge requests for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"owner":{"name":"owner","type":"\u001bgithub.user","is_mandatory":true,"title":"Repository owner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pages":{"name":"pages","type":"\u001bgithub.repository.pages","title":"GitHub Pages site configuration (null when the repository does not have Pages enabled)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"private":{"name":"private","type":"\u0004","is_mandatory":true,"title":"Whether the repository is private","provider":"go.mondoo.com/cnquery/v9/providers/github"},"privateVulnerabilityReportingEnabled":{"name":"privateVulnerabilityReportingEnabled","type":"\u0004","title":"Whether private vulnerability reporting is enabled on the repository","desc":"When true, security researchers can submit private advisories to maintainers.","min_provider_version":"13.2.4","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pullRequestCreationPolicy":{"name":"pullRequestCreationPolicy","type":"\u0007","is_mandatory":true,"title":"Policy for who can create pull requests","desc":"One of \"all\" or \"collaborators_only\".","min_provider_version":"13.6.6","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pushedAt":{"name":"pushedAt","type":"\t","is_mandatory":true,"title":"Repository pushed time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"releases":{"name":"releases","type":"\u0019\u001bgithub.release","title":"List of releases for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"rulesets":{"name":"rulesets","type":"\u0019\u001bgithub.repositoryRuleset","title":"Repository rulesets","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"runners":{"name":"runners","type":"\u0019\u001bgithub.runner","title":"Self-hosted runners for the repository","min_provider_version":"11.4.123","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sbom":{"name":"sbom","type":"\u001bgithub.repository.sbom","title":"GitHub repository SPDX SBOM","desc":"Software Bill of Materials (SPDX format) generated by GitHub for a repository, enumerating every dependency GitHub detected so you can audit supply-chain components and their licenses. Provides `spdxVersion`, `name`, `dataLicense`, `documentNamespace`, `createdAt`, `creators`, a list of `packages` (`github.repository.sbom.package`), and `relationships` between those packages.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"secretScanningAlerts":{"name":"secretScanningAlerts","type":"\u0019\u001bgithub.secretScanningAlert","title":"Secret scanning alerts for the repository","min_provider_version":"11.4.121","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningEnabled":{"name":"secretScanningEnabled","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning is enabled","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningPushProtectionEnabled":{"name":"secretScanningPushProtectionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning push protection is enabled","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningValidityChecksEnabled":{"name":"secretScanningValidityChecksEnabled","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning validity checks are enabled","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secrets":{"name":"secrets","type":"\u0019\u001bgithub.actionsSecret","title":"GitHub Actions secrets configured at the repository level (values are not exposed)","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"securityFile":{"name":"securityFile","type":"\u001bgithub.file","title":"Repository security file","min_provider_version":"11.4.14","provider":"go.mondoo.com/cnquery/v9/providers/github"},"spdxSbom":{"name":"spdxSbom","type":"\u001bgithub.repository.sbom","title":"Software Bill of Materials (SPDX format) for the repository","min_provider_version":"11.4.129","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sshUrl":{"name":"sshUrl","type":"\u0007","is_mandatory":true,"title":"Repository SSH URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"stargazers":{"name":"stargazers","type":"\u0019\u001bgithub.user","title":"List of repository stargazers","provider":"go.mondoo.com/cnquery/v9/providers/github"},"stargazersCount":{"name":"stargazersCount","type":"\u0005","is_mandatory":true,"title":"Number of repository stargazers","provider":"go.mondoo.com/cnquery/v9/providers/github"},"supportFile":{"name":"supportFile","type":"\u001bgithub.file","title":"Repository support file","min_provider_version":"11.4.14","provider":"go.mondoo.com/cnquery/v9/providers/github"},"topics":{"name":"topics","type":"\u0019\u0007","is_mandatory":true,"title":"Repository topics","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Repository update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"variables":{"name":"variables","type":"\u0019\u001bgithub.actionsVariable","title":"GitHub Actions variables configured at the repository level","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"visibility":{"name":"visibility","type":"\u0007","is_mandatory":true,"title":"Repository visibility","provider":"go.mondoo.com/cnquery/v9/providers/github"},"vulnerabilityAlertsEnabled":{"name":"vulnerabilityAlertsEnabled","type":"\u0004","title":"Whether Dependabot vulnerability alerts are enabled on the repository","desc":"Required for `dependabotSecurityUpdatesEnabled` to deliver auto-fix PRs.","min_provider_version":"13.2.4","provider":"go.mondoo.com/cnquery/v9/providers/github"},"watchersCount":{"name":"watchersCount","type":"\u0005","is_mandatory":true,"title":"Number of users watching the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"webCommitSignoffRequired":{"name":"webCommitSignoffRequired","type":"\u0004","is_mandatory":true,"title":"Whether web-based commit signoff is required","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"},"webhooks":{"name":"webhooks","type":"\u0019\u001bgithub.webhook","title":"List of webhooks for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"},"workflows":{"name":"workflows","type":"\u0019\u001bgithub.workflow","title":"List of workflows for the repository","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"init":{"args":[{"name":"name","type":"\u0007"}]},"title":"GitHub repository","desc":"Single repository in an organization or user account, the core unit for auditing source-code security and supply-chain posture. Covers visibility and merge settings, the GitHub Advanced Security stack (secret scanning, push protection, Dependabot, and code scanning), and access surfaces such as collaborators, deploy keys, webhooks, and Actions secrets and variables. Also exposes CI and release history through workflows, runners, deployments, environments, and branch and tag rulesets. Selected by repository name within the connected owner, for example `github.repository(name: \"cnquery\")`, when authenticated as a user.","min_provider_version":"9.0.0","defaults":"fullName","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.codeowners":{"id":"github.repository.codeowners","name":"github.repository.codeowners","fields":{"content":{"name":"content","type":"\u0007","is_mandatory":true,"title":"Raw file contents (empty if not found)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"exists":{"name":"exists","type":"\u0004","is_mandatory":true,"title":"Whether a CODEOWNERS file was found","provider":"go.mondoo.com/cnquery/v9/providers/github"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Path within the repository where CODEOWNERS was found (.github/CODEOWNERS, CODEOWNERS, or docs/CODEOWNERS); empty if not found","provider":"go.mondoo.com/cnquery/v9/providers/github"},"rules":{"name":"rules","type":"\u0019\u001bgithub.codeowners.rule","is_mandatory":true,"title":"Parsed CODEOWNERS rules from the file","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository CODEOWNERS configuration","desc":"Parsed CODEOWNERS configuration for a repository, mapping path patterns to the users and teams required to review matching changes. Provides `path` (the location where the file was found: `.github/CODEOWNERS`, `CODEOWNERS`, or `docs/CODEOWNERS`), `exists`, `content` (raw file text), and `rules`, each a `github.codeowners.rule` with a `pattern` and list of `owners`.","private":true,"min_provider_version":"13.0.8","defaults":"path exists","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.copilotCloudAgent":{"id":"github.repository.copilotCloudAgent","name":"github.repository.copilotCloudAgent","fields":{"codeqlEnabled":{"name":"codeqlEnabled","type":"\u0004","is_mandatory":true,"title":"Whether CodeQL scanning runs during a coding agent session","provider":"go.mondoo.com/cnquery/v9/providers/github"},"copilotCodeReviewEnabled":{"name":"copilotCodeReviewEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Copilot code review runs during a coding agent session","provider":"go.mondoo.com/cnquery/v9/providers/github"},"customAllowlist":{"name":"customAllowlist","type":"\u0019\u0007","is_mandatory":true,"title":"Custom hosts added to the firewall allowlist","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dependencyVulnerabilityChecksEnabled":{"name":"dependencyVulnerabilityChecksEnabled","type":"\u0004","is_mandatory":true,"title":"Whether dependency vulnerability checks run during a coding agent session","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isFirewallEnabled":{"name":"isFirewallEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the coding agent network firewall is enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"isFirewallRecommendedAllowlistEnabled":{"name":"isFirewallRecommendedAllowlistEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the recommended firewall allowlist is enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"mcpConfiguration":{"name":"mcpConfiguration","type":"\n","is_mandatory":true,"title":"MCP server configuration for the coding agent","provider":"go.mondoo.com/cnquery/v9/providers/github"},"requireActionsWorkflowApproval":{"name":"requireActionsWorkflowApproval","type":"\u0004","is_mandatory":true,"title":"Whether the agent must get approval before running Actions workflows","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretScanningEnabled":{"name":"secretScanningEnabled","type":"\u0004","is_mandatory":true,"title":"Whether secret scanning runs during a coding agent session","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"Copilot coding agent configuration for a repository","desc":"Configuration governing how the Copilot coding agent operates in a repository: whether its network `isFirewallEnabled` and the `isFirewallRecommendedAllowlistEnabled` allowlist are on, any extra hosts in the `customAllowlist`, whether the agent must get approval before running Actions workflows via `requireActionsWorkflowApproval`, and which security tools run during an agent session (`codeqlEnabled`, `copilotCodeReviewEnabled`, `secretScanningEnabled`, and `dependencyVulnerabilityChecksEnabled`). The raw MCP server block is available as `mcpConfiguration`. Selected from a repository as `copilotCloudAgent`, and null when the repository has no coding agent configuration or the token lacks access.","private":true,"min_provider_version":"13.6.6","defaults":"isFirewallEnabled requireActionsWorkflowApproval","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.pages":{"id":"github.repository.pages","name":"github.repository.pages","fields":{"buildType":{"name":"buildType","type":"\u0007","is_mandatory":true,"title":"How the site is built","desc":"One of `legacy` (built from a branch/path) or `workflow` (built by a custom GitHub Actions workflow).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"cname":{"name":"cname","type":"\u0007","is_mandatory":true,"title":"Custom domain name (CNAME) configured for the site, empty if none","provider":"go.mondoo.com/cnquery/v9/providers/github"},"custom404":{"name":"custom404","type":"\u0004","is_mandatory":true,"title":"Whether the site provides a custom 404 page","provider":"go.mondoo.com/cnquery/v9/providers/github"},"htmlUrl":{"name":"htmlUrl","type":"\u0007","is_mandatory":true,"title":"The public-facing URL of the Pages site","provider":"go.mondoo.com/cnquery/v9/providers/github"},"httpsCertificateDescription":{"name":"httpsCertificateDescription","type":"\u0007","is_mandatory":true,"title":"Human-readable description of the HTTPS certificate state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"httpsCertificateDomains":{"name":"httpsCertificateDomains","type":"\u0019\u0007","is_mandatory":true,"title":"Domains covered by the HTTPS certificate","provider":"go.mondoo.com/cnquery/v9/providers/github"},"httpsCertificateExpiresAt":{"name":"httpsCertificateExpiresAt","type":"\u0007","is_mandatory":true,"title":"Date the HTTPS certificate expires (YYYY-MM-DD), empty if unknown","provider":"go.mondoo.com/cnquery/v9/providers/github"},"httpsCertificateState":{"name":"httpsCertificateState","type":"\u0007","is_mandatory":true,"title":"State of the auto-issued HTTPS certificate","desc":"Values include `new`, `authorization_created`, `authorization_pending`, `authorized`, `authorization_revoked`, `issued`, `uploaded`, `approved`, `errored`, `bad_authz`, `destroy_pending`, and `dns_changed`. Empty when no certificate is provisioned.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"httpsEnforced":{"name":"httpsEnforced","type":"\u0004","is_mandatory":true,"title":"Whether HTTPS is enforced for the site","provider":"go.mondoo.com/cnquery/v9/providers/github"},"public":{"name":"public","type":"\u0004","is_mandatory":true,"title":"Whether the site is publicly visible","desc":"True if anyone can access the site, false if access is restricted (for example, when the repository is private and Pages access control is on).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sourceBranch":{"name":"sourceBranch","type":"\u0007","is_mandatory":true,"title":"Branch the site is built from (legacy builds only)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sourcePath":{"name":"sourcePath","type":"\u0007","is_mandatory":true,"title":"Path within the branch the site is built from","desc":"One of `/` or `/docs` for legacy builds; empty for workflow builds.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Current build status","desc":"One of `built`, `building`, `errored`, or empty when no build has happened.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"The API URL of the Pages site","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Pages site","desc":"GitHub Pages configuration for a repository, covering the published `url` and `htmlUrl`, the build `status` (built, building, errored, or empty when no build has happened), the `buildType` (legacy publishing from a branch vs. workflow-based), the source `sourceBranch` and `sourcePath` (for legacy builds), the `cname` custom domain and whether `httpsEnforced` is on, plus the `httpsCertificateState`, `httpsCertificateDescription`, `httpsCertificateDomains`, and `httpsCertificateExpiresAt` (YYYY-MM-DD) of the auto-issued certificate. The `public` flag indicates whether the site is publicly visible regardless of repository visibility, and `custom404` is true when the site provides a custom 404 page.","private":true,"min_provider_version":"13.3.3","defaults":"status cname httpsEnforced","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.sbom":{"id":"github.repository.sbom","name":"github.repository.sbom","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time when the SBOM was generated","provider":"go.mondoo.com/cnquery/v9/providers/github"},"creators":{"name":"creators","type":"\u0019\u0007","is_mandatory":true,"title":"List of creators of the SBOM","provider":"go.mondoo.com/cnquery/v9/providers/github"},"dataLicense":{"name":"dataLicense","type":"\u0007","is_mandatory":true,"title":"License under which the SPDX document is released","provider":"go.mondoo.com/cnquery/v9/providers/github"},"documentNamespace":{"name":"documentNamespace","type":"\u0007","is_mandatory":true,"title":"Namespace URI for the document","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the SPDX document (e.g., \"owner/repo\")","provider":"go.mondoo.com/cnquery/v9/providers/github"},"package":{"name":"package","type":"\u001bgithub.repository.sbom.package","title":"SPDX SBOM package entry","desc":"Single package listed in a GitHub repository's SPDX SBOM, one detected dependency of the repository. Provides `spdxId`, `name`, `versionInfo`, `downloadLocation`, `filesAnalyzed`, `licenseConcluded`, `licenseDeclared`, and `externalRefs` (each a `github.repository.sbom.package.externalRef` with a locator such as a purl).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"packages":{"name":"packages","type":"\u0019\u001bgithub.repository.sbom.package","is_mandatory":true,"title":"List of packages described in the SBOM","provider":"go.mondoo.com/cnquery/v9/providers/github"},"relationship":{"name":"relationship","type":"\u001bgithub.repository.sbom.relationship","title":"SPDX SBOM dependency relationship","desc":"Dependency relationship between two elements in a GitHub repository's SPDX SBOM, connecting a source element to a related target. Provides `relationshipType` (e.g., `DEPENDS_ON`), `spdxElementId` (the source), and `relatedSpdxElement` (the target).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"relationships":{"name":"relationships","type":"\u0019\u001bgithub.repository.sbom.relationship","is_mandatory":true,"title":"Dependency relationships between packages","provider":"go.mondoo.com/cnquery/v9/providers/github"},"spdxId":{"name":"spdxId","type":"\u0007","is_mandatory":true,"title":"SPDX identifier for the document","provider":"go.mondoo.com/cnquery/v9/providers/github"},"spdxVersion":{"name":"spdxVersion","type":"\u0007","is_mandatory":true,"title":"Version of the SPDX specification (e.g., \"SPDX-2.3\")","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository SPDX SBOM","desc":"Software Bill of Materials (SPDX format) generated by GitHub for a repository, enumerating every dependency GitHub detected so you can audit supply-chain components and their licenses. Provides `spdxVersion`, `name`, `dataLicense`, `documentNamespace`, `createdAt`, `creators`, a list of `packages` (`github.repository.sbom.package`), and `relationships` between those packages.","private":true,"min_provider_version":"11.4.129","defaults":"name spdxVersion","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.sbom.package":{"id":"github.repository.sbom.package","name":"github.repository.sbom.package","fields":{"downloadLocation":{"name":"downloadLocation","type":"\u0007","is_mandatory":true,"title":"Download location","provider":"go.mondoo.com/cnquery/v9/providers/github"},"externalRef":{"name":"externalRef","type":"\u001bgithub.repository.sbom.package.externalRef","title":"SPDX SBOM package external reference","desc":"External reference for a package in a GitHub repository SBOM, linking the package to an outside identifier or resource. Provides `referenceCategory` (e.g., `PACKAGE-MANAGER`), `referenceType` (e.g., `purl`), and `referenceLocator` (e.g., `pkg:gem/rails@6.0.1`).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/github","is_implicit_resource":true},"externalRefs":{"name":"externalRefs","type":"\u0019\u001bgithub.repository.sbom.package.externalRef","is_mandatory":true,"title":"External references (e.g., purl)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"filesAnalyzed":{"name":"filesAnalyzed","type":"\u0004","is_mandatory":true,"title":"Whether file contents were analyzed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"licenseConcluded":{"name":"licenseConcluded","type":"\u0007","is_mandatory":true,"title":"Concluded license","provider":"go.mondoo.com/cnquery/v9/providers/github"},"licenseDeclared":{"name":"licenseDeclared","type":"\u0007","is_mandatory":true,"title":"License declared by the package author","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Package name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"spdxId":{"name":"spdxId","type":"\u0007","is_mandatory":true,"title":"Unique SPDX identifier for this package","provider":"go.mondoo.com/cnquery/v9/providers/github"},"versionInfo":{"name":"versionInfo","type":"\u0007","is_mandatory":true,"title":"Package version or version range","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"SPDX SBOM package entry","desc":"Single package listed in a GitHub repository's SPDX SBOM, one detected dependency of the repository. Provides `spdxId`, `name`, `versionInfo`, `downloadLocation`, `filesAnalyzed`, `licenseConcluded`, `licenseDeclared`, and `externalRefs` (each a `github.repository.sbom.package.externalRef` with a locator such as a purl).","private":true,"min_provider_version":"11.4.129","defaults":"name versionInfo","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.sbom.package.externalRef":{"id":"github.repository.sbom.package.externalRef","name":"github.repository.sbom.package.externalRef","fields":{"referenceCategory":{"name":"referenceCategory","type":"\u0007","is_mandatory":true,"title":"The category of reference to an external resource this reference refers to. E.g. `PACKAGE-MANAGER`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"referenceLocator":{"name":"referenceLocator","type":"\u0007","is_mandatory":true,"title":"A locator for the particular external resource this reference refers to. E.g. `pkg:gem/rails@6.0.1`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"referenceType":{"name":"referenceType","type":"\u0007","is_mandatory":true,"title":"The type of the external reference. E.g. `purl`.","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"SPDX SBOM package external reference","desc":"External reference for a package in a GitHub repository SBOM, linking the package to an outside identifier or resource. Provides `referenceCategory` (e.g., `PACKAGE-MANAGER`), `referenceType` (e.g., `purl`), and `referenceLocator` (e.g., `pkg:gem/rails@6.0.1`).","private":true,"min_provider_version":"11.4.129","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repository.sbom.relationship":{"id":"github.repository.sbom.relationship","name":"github.repository.sbom.relationship","fields":{"relatedSpdxElement":{"name":"relatedSpdxElement","type":"\u0007","is_mandatory":true,"title":"SPDX identifier of the target element","provider":"go.mondoo.com/cnquery/v9/providers/github"},"relationshipType":{"name":"relationshipType","type":"\u0007","is_mandatory":true,"title":"Type of relationship (e.g., \"DEPENDS_ON\")","provider":"go.mondoo.com/cnquery/v9/providers/github"},"spdxElementId":{"name":"spdxElementId","type":"\u0007","is_mandatory":true,"title":"SPDX identifier of the source element","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"SPDX SBOM dependency relationship","desc":"Dependency relationship between two elements in a GitHub repository's SPDX SBOM, connecting a source element to a related target. Provides `relationshipType` (e.g., `DEPENDS_ON`), `spdxElementId` (the source), and `relatedSpdxElement` (the target).","private":true,"min_provider_version":"11.4.129","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repositoryActionsSettings":{"id":"github.repositoryActionsSettings","name":"github.repositoryActionsSettings","fields":{"allowedActions":{"name":"allowedActions","type":"\u0007","is_mandatory":true,"title":"Which actions are allowed (all, local_only, selected)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"canApprovePullRequestReviews":{"name":"canApprovePullRequestReviews","type":"\u0004","is_mandatory":true,"title":"Whether Actions can approve pull request reviews","provider":"go.mondoo.com/cnquery/v9/providers/github"},"defaultWorkflowPermissions":{"name":"defaultWorkflowPermissions","type":"\u0007","is_mandatory":true,"title":"Default workflow permissions (read, write)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether GitHub Actions is enabled","provider":"go.mondoo.com/cnquery/v9/providers/github"},"shaPinningRequired":{"name":"shaPinningRequired","type":"\u0004","is_mandatory":true,"title":"Whether SHA pinning is required for actions","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions settings for a repository","desc":"GitHub Actions security configuration for a single repository. Determines whether workflows can run, which actions and reusable workflows are permitted to run (`allowedActions` is one of all, local_only, or selected), whether action references must be pinned to a full commit SHA, the default token permissions granted to the GITHUB_TOKEN at the start of a workflow run (`defaultWorkflowPermissions` is read or write), and whether Actions is allowed to approve pull requests. Audit these to catch overly permissive supply-chain settings, such as unrestricted actions, write-by-default tokens, or self-approving workflows.","private":true,"min_provider_version":"11.4.131","defaults":"allowedActions","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repositoryFineGrainedPermission":{"id":"github.repositoryFineGrainedPermission","name":"github.repositoryFineGrainedPermission","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Permission description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Permission name","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository fine-grained permission","desc":"Fine-grained permission that can be granted on the repositories of an organization, forming the building blocks of custom repository roles. Enumerating these permissions lets you audit which capabilities an organization can delegate through its roles. The permission is selected by its name, with a human-readable description of what it grants.","private":true,"min_provider_version":"11.4.131","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.repositoryRuleset":{"id":"github.repositoryRuleset","name":"github.repositoryRuleset","fields":{"bypassActors":{"name":"bypassActors","type":"\u0019\n","is_mandatory":true,"title":"Actors allowed to bypass this ruleset","desc":"Each entry has `actor_id` (numeric id of the actor), `actor_type` (one of Integration, OrganizationAdmin, RepositoryRole, Team, or DeployKey), and `bypass_mode` (always, or pull_request to bypass only for pull requests).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"conditions":{"name":"conditions","type":"\n","is_mandatory":true,"title":"Conditions that select which refs and repositories the ruleset targets","desc":"Keyed by condition type, including `ref_name`, `repository_name`, `repository_id`, and `repository_property`. Name-based conditions (`ref_name`, `repository_name`) hold `include` and `exclude` arrays of fnmatch patterns; the special value `~ALL` matches everything and `~DEFAULT_BRANCH` matches the default branch.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Ruleset creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"enforcement":{"name":"enforcement","type":"\u0007","is_mandatory":true,"title":"Enforcement level (active, evaluate, disabled)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Ruleset ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Ruleset name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"rules":{"name":"rules","type":"\u0019\n","is_mandatory":true,"title":"Protection rules enforced by this ruleset","desc":"Each entry has a `type` (the constraint kind, such as pull_request, required_status_checks, required_signatures, deletion, non_fast_forward, or required_linear_history) and a `parameters` object whose shape depends on the type (for example the required approving-review count for pull_request, or the list of required checks for required_status_checks).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source (repo or org name)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"sourceType":{"name":"sourceType","type":"\u0007","is_mandatory":true,"title":"Source type (Repository, Organization)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"Target type (branch, tag)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Ruleset update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub repository ruleset","desc":"Rule-based branch and tag protection defined at the repository or organization level. Rulesets replace classic branch protection, so auditing them reveals which refs are guarded, how strictly the rules are applied, and who can bypass them. The `sourceType` field distinguishes rules defined directly on the repository from those inherited from the organization. The `enforcement` level determines whether a ruleset actively blocks non-conforming changes, only reports them, or is turned off, and `bypassActors` exposes the escape hatches that let specific users, teams, or apps sidestep the protections.","private":true,"min_provider_version":"11.4.131","defaults":"id name enforcement","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.review":{"id":"github.review","name":"github.review","fields":{"authorAssociation":{"name":"authorAssociation","type":"\u0007","is_mandatory":true,"title":"Author association","desc":"How the reviewer relates to the repository at the time of the review. One of COLLABORATOR, CONTRIBUTOR, FIRST_TIMER, FIRST_TIME_CONTRIBUTOR, MANNEQUIN, MEMBER, NONE, or OWNER.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Review state","desc":"The verdict the reviewer submitted. One of APPROVED, CHANGES_REQUESTED, COMMENTED, DISMISSED, or PENDING.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Review URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"user":{"name":"user","type":"\u001bgithub.user","is_mandatory":true,"title":"Review user information","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub pull request review","desc":"A review submitted against a pull request, recording whether a reviewer approved, requested changes, or only commented. Useful for auditing that merged changes received the approvals a branch protection or compliance policy requires, and that reviewers have the expected relationship to the repository. The `state` field carries the review verdict and `authorAssociation` describes how the reviewer relates to the project.","private":true,"min_provider_version":"9.0.0","defaults":"url state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.runner":{"id":"github.runner","name":"github.runner","fields":{"architecture":{"name":"architecture","type":"\u0007","is_mandatory":true,"title":"Runner architecture (e.g., x64, arm64); empty for self-hosted runners that don't report architecture","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"busy":{"name":"busy","type":"\u0004","is_mandatory":true,"title":"Whether the runner is currently executing a job","provider":"go.mondoo.com/cnquery/v9/providers/github"},"ephemeral":{"name":"ephemeral","type":"\u0004","is_mandatory":true,"title":"Whether the runner is ephemeral (one-shot job execution, then deregistered)","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Runner ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"labels":{"name":"labels","type":"\u0019\u001bgithub.runnerLabel","is_mandatory":true,"title":"Labels assigned to the runner","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Runner name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"os":{"name":"os","type":"\u0007","is_mandatory":true,"title":"Operating system (linux, macos, windows)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Runner status (online, offline)","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions self-hosted runner","desc":"Self-hosted runner registered to a repository or organization to execute GitHub Actions workflow jobs on infrastructure you control. Because a self-hosted runner runs workflow code on your own hosts, its configuration carries real risk: use it to audit which platform (`os` of linux, macos, or windows) and `architecture` a runner reports, whether it is currently `online` or `offline` via `status`, whether it is `ephemeral` (torn down after a single job) versus persistent, and the `labels` that route jobs to it. The `busy` flag reports whether a job is executing right now.","private":true,"min_provider_version":"11.4.123","defaults":"id name os status","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.runnerLabel":{"id":"github.runnerLabel","name":"github.runnerLabel","fields":{"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Label ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Label name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Label type (read-only or custom)","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions runner label","desc":"Label assigned to a self-hosted Actions runner, used to route workflow jobs to runners with matching `runs-on` labels. The `type` field distinguishes read-only labels applied by the system from custom labels defined by the runner administrator, which is useful when auditing whether jobs can be steered onto specific self-hosted machines.","private":true,"min_provider_version":"11.4.123","defaults":"name type","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.secretScanningAlert":{"id":"github.secretScanningAlert","name":"github.secretScanningAlert","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Alert creation time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"htmlUrl":{"name":"htmlUrl","type":"\u0007","is_mandatory":true,"title":"Web URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"multiRepo":{"name":"multiRepo","type":"\u0004","is_mandatory":true,"title":"Whether the secret was found in multiple repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"number":{"name":"number","type":"\u0005","is_mandatory":true,"title":"Alert number","provider":"go.mondoo.com/cnquery/v9/providers/github"},"publiclyLeaked":{"name":"publiclyLeaked","type":"\u0004","is_mandatory":true,"title":"Whether the secret was publicly leaked","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pushProtectionBypassed":{"name":"pushProtectionBypassed","type":"\u0004","is_mandatory":true,"title":"Whether push protection was bypassed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pushProtectionBypassedAt":{"name":"pushProtectionBypassedAt","type":"\t","is_mandatory":true,"title":"When push protection was bypassed","provider":"go.mondoo.com/cnquery/v9/providers/github"},"pushProtectionBypassedBy":{"name":"pushProtectionBypassedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who bypassed push protection","provider":"go.mondoo.com/cnquery/v9/providers/github"},"resolution":{"name":"resolution","type":"\u0007","is_mandatory":true,"title":"Resolution status (false_positive, wont_fix, revoked, used_in_tests, pattern_deleted)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"resolutionComment":{"name":"resolutionComment","type":"\u0007","is_mandatory":true,"title":"Comment on resolution","provider":"go.mondoo.com/cnquery/v9/providers/github"},"resolvedAt":{"name":"resolvedAt","type":"\t","is_mandatory":true,"title":"When the alert was resolved","provider":"go.mondoo.com/cnquery/v9/providers/github"},"resolvedBy":{"name":"resolvedBy","type":"\u001bgithub.user","is_mandatory":true,"title":"User who resolved the alert","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secret":{"name":"secret","type":"\u0007","is_mandatory":true,"title":"The secret value (partially redacted)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretType":{"name":"secretType","type":"\u0007","is_mandatory":true,"title":"Type of secret detected","provider":"go.mondoo.com/cnquery/v9/providers/github"},"secretTypeDisplayName":{"name":"secretTypeDisplayName","type":"\u0007","is_mandatory":true,"title":"Human-readable name of the secret type","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Alert state (open, resolved)","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last update time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"API URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"validity":{"name":"validity","type":"\u0007","is_mandatory":true,"title":"Validity of the secret (active, inactive, unknown)","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub secret scanning alert","desc":"Credential (API key, token, or password) that GitHub secret scanning detected committed to a repository, exposing it for potential misuse. Auditing these alerts surfaces leaked secrets that need rotation: `secretType` and `secretTypeDisplayName` identify the kind of credential, `validity` reports whether it is still live (active, inactive, unknown), and `publiclyLeaked` and `multiRepo` flag broader exposure across public code or several repositories. The `state` (open, resolved), `resolution`, and push-protection bypass fields track whether the leak has been remediated.","private":true,"min_provider_version":"11.4.121","defaults":"number state","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.team":{"id":"github.team","name":"github.team","fields":{"defaultPermission":{"name":"defaultPermission","type":"\u0007","is_mandatory":true,"title":"Default permission the team is granted on repositories it is added to","desc":"One of `pull`, `triage`, `push`, `maintain`, or `admin`.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Team description","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Team ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"members":{"name":"members","type":"\u0019\u001bgithub.user","title":"Team members","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Team name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"organization":{"name":"organization","type":"\u001bgithub.organization","is_mandatory":true,"title":"Team organization","provider":"go.mondoo.com/cnquery/v9/providers/github"},"privacy":{"name":"privacy","type":"\u0007","is_mandatory":true,"title":"Team visibility","desc":"One of `secret` (visible only to members and organization owners) or `closed` (visible to all organization members).","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositories":{"name":"repositories","type":"\u0019\u001bgithub.repository","title":"Team owned repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"slug":{"name":"slug","type":"\u0007","is_mandatory":true,"title":"Team slug","provider":"go.mondoo.com/cnquery/v9/providers/github"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Team type","desc":"One of `organization` or `enterprise`.","min_provider_version":"11.4.131","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub team","desc":"Team within a GitHub organization, grouping members and granting them shared access to repositories. Teams are a primary unit of access control: auditing a team's `privacy`, its `defaultPermission`, and the `repositories` it can reach shows which members inherit access to which code. The `members` collection lists the users on the team and `organization` links back to the owning org.","private":true,"min_provider_version":"9.0.0","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.user":{"id":"github.user","name":"github.user","fields":{"avatarUrl":{"name":"avatarUrl","type":"\u0007","is_mandatory":true,"title":"User profile picture URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"bio":{"name":"bio","type":"\u0007","is_mandatory":true,"title":"User bio","provider":"go.mondoo.com/cnquery/v9/providers/github"},"blog":{"name":"blog","type":"\u0007","is_mandatory":true,"title":"User blog URL","provider":"go.mondoo.com/cnquery/v9/providers/github"},"company":{"name":"company","type":"\u0007","is_mandatory":true,"title":"User's company","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"User create time in UTC","provider":"go.mondoo.com/cnquery/v9/providers/github"},"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"User email","provider":"go.mondoo.com/cnquery/v9/providers/github"},"followers":{"name":"followers","type":"\u0005","is_mandatory":true,"title":"User followers","provider":"go.mondoo.com/cnquery/v9/providers/github"},"following":{"name":"following","type":"\u0005","is_mandatory":true,"title":"User following","provider":"go.mondoo.com/cnquery/v9/providers/github"},"gists":{"name":"gists","type":"\u0019\u001bgithub.gist","title":"User gists","provider":"go.mondoo.com/cnquery/v9/providers/github"},"hireable":{"name":"hireable","type":"\u0004","is_mandatory":true,"title":"Whether the user is hireable","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"User ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"User location","provider":"go.mondoo.com/cnquery/v9/providers/github"},"login":{"name":"login","type":"\u0007","is_mandatory":true,"title":"User login","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"User name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"publicKeys":{"name":"publicKeys","type":"\u0019\u001bgithub.publicKey","title":"User's public SSH keys","min_provider_version":"13.0.8","provider":"go.mondoo.com/cnquery/v9/providers/github"},"repositories":{"name":"repositories","type":"\u0019\u001bgithub.repository","title":"User's repositories","provider":"go.mondoo.com/cnquery/v9/providers/github"},"siteAdmin":{"name":"siteAdmin","type":"\u0004","is_mandatory":true,"title":"Whether the user is a GitHub site admin","min_provider_version":"11.4.120","provider":"go.mondoo.com/cnquery/v9/providers/github"},"suspendedAt":{"name":"suspendedAt","type":"\t","is_mandatory":true,"title":"When the user was suspended","provider":"go.mondoo.com/cnquery/v9/providers/github"},"twitterUsername":{"name":"twitterUsername","type":"\u0007","is_mandatory":true,"title":"User Twitter handle","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Last user update time in UTC","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub user","desc":"GitHub user account, covering public profile details, follower and following counts, and account status. The `siteAdmin` flag identifies instance administrators on GitHub Enterprise, and `suspendedAt` records when an account was suspended, both useful for auditing privileged or disabled accounts. Also exposes the user's `repositories`, `gists`, and registered `publicKeys` for reviewing what an account owns and which SSH keys can act on its behalf.","private":true,"min_provider_version":"9.0.0","defaults":"login name email company","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.webhook":{"id":"github.webhook","name":"github.webhook","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the webhook is active","provider":"go.mondoo.com/cnquery/v9/providers/github"},"config":{"name":"config","type":"\n","is_mandatory":true,"title":"Webhook delivery configuration","desc":"Keys: `content_type` (`json` or `form`), `insecure_ssl` (`0` or `1`, where `1` skips TLS certificate verification), `url` (the delivery endpoint), and `secret` (returned obfuscated by GitHub). The `contentType` and `insecureSsl` fields surface the content-type and SSL-verification values directly.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"contentType":{"name":"contentType","type":"\u0007","is_mandatory":true,"title":"Payload media type: \"json\" or \"form\"","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Webhook creation time","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"events":{"name":"events","type":"\u0019\u0007","is_mandatory":true,"title":"List of events for the webhook","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Webhook ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"insecureSsl":{"name":"insecureSsl","type":"\u0004","is_mandatory":true,"title":"Whether TLS certificate verification is skipped for webhook delivery, exposing payloads to interception","min_provider_version":"13.4.5","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Webhook name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Webhook last update time","min_provider_version":"13.1.1","provider":"go.mondoo.com/cnquery/v9/providers/github"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"Webhook URL","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub webhook","desc":"HTTP callback that GitHub invokes when subscribed events occur on a repository or organization, delivering event payloads to an external endpoint. Auditing webhooks reveals where repository and organization activity is sent, which events trigger delivery, whether the endpoint is still `active`, and whether TLS certificate verification is disabled (`insecureSsl`), which would expose payloads to interception.","private":true,"min_provider_version":"9.0.0","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"github.workflow":{"id":"github.workflow","name":"github.workflow","fields":{"configuration":{"name":"configuration","type":"\n","title":"Parsed workflow YAML","desc":"The workflow definition parsed from its YAML source. Top-level keys mirror the GitHub Actions workflow syntax: name, on (trigger events), jobs, permissions, env, defaults, concurrency, and run-name.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Workflow create time","provider":"go.mondoo.com/cnquery/v9/providers/github"},"file":{"name":"file","type":"\u001bgithub.file","title":"Workflow file","provider":"go.mondoo.com/cnquery/v9/providers/github"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Workflow ID","provider":"go.mondoo.com/cnquery/v9/providers/github"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Workflow name","provider":"go.mondoo.com/cnquery/v9/providers/github"},"path":{"name":"path","type":"\u0007","is_mandatory":true,"title":"Workflow path","provider":"go.mondoo.com/cnquery/v9/providers/github"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Workflow state","desc":"Whether the workflow is enabled or why it is disabled. One of active, deleted, disabled_fork, disabled_inactivity, or disabled_manually.","provider":"go.mondoo.com/cnquery/v9/providers/github"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"title":"Workflow update time","provider":"go.mondoo.com/cnquery/v9/providers/github"}},"title":"GitHub Actions workflow","desc":"GitHub Actions workflow defined in a repository under `.github/workflows`. Workflows drive CI/CD and automation, so auditing them matters for supply chain security: what events trigger a run, which jobs and permissions they grant, and whether a workflow is active or disabled. The `configuration` field exposes the parsed workflow YAML so trigger events, jobs, and permissions can be inspected, and `file` links to the underlying source file.","private":true,"min_provider_version":"9.0.0","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/github"}}}