> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/github-identities/repositories.md).

# Repositories

The Repositories page provides a list of enumerated GitHub repositories in the scanned environment. The list contains the Name, Private, Fork, Archived, Visibility, Default Branch, Risk Score, Exposure Point and Issue Counts of each repository object.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-23ab4ae3b2896535a66b92cdfe7f17c51c82a95b%2Fgithub-identities-repositories-image-1.png?alt=media" alt=""><figcaption><p><em>Repositories</em></p></figcaption></figure>

### Repository Details

Details page contains the Risk Score of the repository, Exposure Point, Information and Issues panes.

You can analyze objects in the Graph module by clicking the Visualize button on the upper left side of the Information Pane.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-04311a00b985e4740f3e5243b37d71634da30562%2Fgithub-identities-repositories-image-2.png?alt=media" alt=""><figcaption></figcaption></figure>

#### Information

Information Pane can contain different badges to highlight important attributes.

| Badge                    | Description                                                                                                                  |
| ------------------------ | ---------------------------------------------------------------------------------------------------------------------------- |
| **Tier 0**               | Indicates that the object is a Tier 0 asset.                                                                                 |
| **Privileged**           | Indicates that the object is privileged.                                                                                     |
| **Shadow Admin**         | Indicates that the repository can be reached through an attack path without an explicit administrative grant.                |
| **Private** / **Public** | Indicates the visibility of the repository.                                                                                  |
| **Fork**                 | Indicates that the repository is a fork of another repository.                                                               |
| **Archived**             | Indicates that the repository is archived (read-only). Archived repositories are excluded from repository security findings. |

Information Pane contains Details, Collaborators and Teams tabs respectively.

**Details**

Details tab contains attributes below about the repository object.

| Attribute         | Description                                                                                                                                                                                        |
| ----------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Visibility        | The visibility level of the repository (private, internal, public).                                                                                                                                |
| Default Branch    | The default branch of the repository (e.g., `main`).                                                                                                                                               |
| Private           | Whether the repository is private.                                                                                                                                                                 |
| Fork              | Whether the repository is a fork of another repository.                                                                                                                                            |
| Archived          | Whether the repository is archived (read-only).                                                                                                                                                    |
| Has Issues        | Whether the issue tracker is enabled for the repository.                                                                                                                                           |
| Has Wiki          | Whether the wiki is enabled for the repository.                                                                                                                                                    |
| Object ID         | The GitHub node identifier of the repository.                                                                                                                                                      |
| Branch Protection | Whether the default branch is covered by a branch protection rule. Displayed as **Protected**, **Not protected**, or **Unknown**.                                                                  |
| Secret Scanning   | Whether secret scanning is enabled. Displayed as **Enabled**, **Disabled**, or **Unknown**.                                                                                                        |
| Push Protection   | Whether push protection for secret scanning is enabled, which blocks commits containing detected secrets instead of only alerting on them. Displayed as **Enabled**, **Disabled**, or **Unknown**. |
| Dependabot Alerts | Whether Dependabot vulnerability alerts are enabled. Displayed as **Enabled**, **Disabled**, or **Unknown**.                                                                                       |

> **Unknown** means the scanning credential could not read the setting — GitHub returns branch protection and the security settings block only to repository administrators. It does not mean the feature is disabled, and the corresponding finding is suppressed rather than raised. To resolve Unknown values, re-scan with a credential that has administrative access to the repositories in scope.

**Collaborators**

Collaborators tab contains a list of users granted access directly on the repository rather than through a team.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-647e7f18e54b0e2ad9de64295a1c800b10cfe0ec%2Fgithub-identities-repositories-image-3.png?alt=media" alt=""><figcaption><p><em>Collaborators</em></p></figcaption></figure>

**User:** The name of the user object. **Login:** The unique account name (handle) of the user.

**Teams**

Teams tab contains a list of teams that have access to this repository.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-f5ef94298e846d438a23b1ed2d1e2d9511021ad9%2Fgithub-identities-repositories-image-4.png?alt=media" alt=""><figcaption><p><em>Teams</em></p></figcaption></figure>

**Team:** The name of the team object. **Permission:** The permission the team holds on this repository (pull, triage, push, maintain, admin).

#### Issues

Issues pane contains identified issues on the repository object.