Skip to main content

A project powered by SpecterOps - Creators of BloodHound

Github collector for OpenHound

Slack SpecterOps on Reddit Sponsored by SpecterOps

@SpecterOps on Twitter Connect on LinkedIn Connect on Mastodon


About

OpenHound is a standardized framework for building and running OpenGraph collectors and converters. It is built in Python and powered by the Data Load Tool (DLT) library, giving you a consistent workflow to collect, process, and convert data from any source into BloodHound-compatible graphs.

The openhound-github extension collects resources from Github organizations and transforms these into useable nodes and edges for BloodHound.

Enterprise SCIM and hybrid correlations

When SOURCES__GITHUB__COLLECT_ENTERPRISE_SCIM=true, a token with enterprise SCIM access is used to collect both /scim/v2/enterprises/{enterprise}/Users and /scim/v2/enterprises/{enterprise}/Groups. The collector emits normalized SCIM_Organization, SCIM_User, and SCIM_Group nodes plus SCIM_Contains, SCIM_MemberOf, and SCIM_Provisioned relationships. Install the BloodHound SCIM extension alongside this extension to register the shared SCIM kinds.

SOURCES__GITHUB__EMIT_LEGACY_SCIM_CORRELATIONS=true temporarily reproduces GitHound-style Okta-to-SCIM correlation relationships. It defaults to false because a dedicated hybrid correlator should own IdP-to-SCIM matching; GitHub remains authoritative for GitHub's SCIM resources and target-system provisioning relationships.

Enterprise roles, including the built-in members role, are emitted through GH_HasRole and granular enterprise capability relationships. Only capability relationships with a confirmed privilege path are traversable; descriptive permissions such as GH_WriteEnterpriseSso remain non-traversable.

Python Version

Getting Started

Follow the OpenHound docs to get started:

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

openhound_github-0.4.0.tar.gz (3.6 MB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

openhound_github-0.4.0-py3-none-any.whl (136.5 kB view details)

Uploaded Python 3

File details

Details for the file openhound_github-0.4.0.tar.gz.

File metadata

  • Download URL: openhound_github-0.4.0.tar.gz
  • Upload date:
  • Size: 3.6 MB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.1 {"installer":{"name":"uv","version":"0.12.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for openhound_github-0.4.0.tar.gz
Algorithm Hash digest
SHA256 92bb0faed6918cb2418573686f037a8416ec6c2a9183b46dd57224b924b29407
MD5 13cfde0c65d8443271bad971330e090f
BLAKE2b-256 5af4ff29e41b1a7962eb45e722eb642dceae26de4e5e89fd7754f799d23fdc03

See more details on using hashes here.

File details

Details for the file openhound_github-0.4.0-py3-none-any.whl.

File metadata

  • Download URL: openhound_github-0.4.0-py3-none-any.whl
  • Upload date:
  • Size: 136.5 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: uv/0.12.1 {"installer":{"name":"uv","version":"0.12.1","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}

File hashes

Hashes for openhound_github-0.4.0-py3-none-any.whl
Algorithm Hash digest
SHA256 6e9d724aaea26e9f12a13d5a2cc1f78161e7ae886ab39d62464c183812c35682
MD5 6f9ac88b64a0d9a7c287dd1c927d93b0
BLAKE2b-256 2a065fbb535705ecd9722fa0eee37abef62a7d2e11299d9bd8147cfe8be75f1b

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page