Open Unified Identities › Resources, filter Providers to GitHub › Repository, then select a row to open its details.
Resources filtered to GitHub › Repository
Repository Details
Opening a repository shows the Risk and Exposure Point in the header, and the page contains the Information pane and, when the repository has issues, the Issues pane.
You can analyze the object in the Graph by clicking the Graph » button next to the Information title. For a shadow admin the button reads Admin Path » and opens the shortest path to admin objects (see Object Detail Pages).
Repository Details
Information
Information Pane can contain different badges to highlight important attributes.
| Badge | Description |
|---|---|
| Tier 0 | Indicates that the object is a Tier 0 asset. |
| Privileged | Indicates that the object is privileged. |
| Shadow | Indicates that the object can compromise admin objects with at least one attack path. |
| Private / Public | Indicates the visibility of the repository. |
| Fork | Indicates that the repository is a fork of another repository. |
| Archived | Indicates that the repository is archived (read-only). Archived repositories are excluded from repository security findings. |
Information Pane contains Details, Collaborators and Teams tabs respectively. Each tab label except Details shows its row count.
Details
Details tab contains attributes below about the repository object.
| Attribute | Description |
|---|---|
| Visibility | The visibility level of the repository (private, internal, public). |
| Default Branch | The default branch of the repository (e.g., main). |
| Private | Whether the repository is private. |
| Fork | Whether the repository is a fork of another repository. |
| Archived | Whether the repository is archived (read-only). |
| Has Issues | Whether the issue tracker is enabled for the repository. |
| Has Wiki | Whether the wiki is enabled for the repository. |
| Object ID | The GitHub node identifier of the repository. |
| Branch Protection | Whether the default branch is covered by a branch protection rule. Displayed as Protected, Not protected, or Unknown. |
| Secret Scanning | Whether secret scanning is enabled. Displayed as Enabled, Disabled, or Unknown. |
| Push Protection | Whether push protection for secret scanning is enabled, which blocks commits containing detected secrets instead of only alerting on them. Displayed as Enabled, Disabled, or Unknown. |
| Dependabot Alerts | Whether Dependabot vulnerability alerts are enabled. Displayed as Enabled, Disabled, or Unknown. |
Unknown means the scanning credential could not read the setting: GitHub returns branch protection and the security settings block only to repository administrators. It does not mean the feature is disabled, and the corresponding finding is suppressed rather than raised. To resolve Unknown values, re-scan with a credential that has administrative access to the repositories in scope.
Collaborators
Collaborators tab contains a list of users granted access directly on the repository rather than through a team.
Collaborators
User: The name of the user object. Login: The unique account name (handle) of the user.
Teams
Teams tab contains a list of teams that have access to this repository.
Teams
Team: The name of the team object. Permission: The permission the team holds on this repository (pull, triage, push, maintain, admin).
Issues
Issues pane contains identified issues on the repository object.