Skip to main content
Applies to BloodHound Enterprise and CE Represents a GitHub App installed on an organization. App installations have specific permissions and can be scoped to all repositories or a selection of repositories. The permissions granted to the app are captured as a JSON string in the properties. Each installation is linked to its parent GH_App via a GH_InstalledAs edge. For installations with repository_selection set to all, GH_CanAccess edges are created to every repository in the organization. For installations with repository_selection set to selected, repository-level edges cannot be enumerated with a PAT (requires app installation token authentication). Created by: Git-HoundAppInstallation

Edges

The tables below list edges defined by the GitHound extension only. Additional edges to or from this node may be created by other extensions.

Inbound Edges

Outbound Edges

Edge TypeDestination Node TypesTraversable
GH_CanAccessGH_Repository

Properties

Property NameData TypeDescription
objectidstringComposite identifier: Iv23liPgjiu18oXLM2q7.
idintegerThe GitHub installation ID.
namestringThe app’s slug identifier.
environment_namestringThe name of the environment (GitHub organization) where the app is installed.
environmentidstringThe node_id of the environment (GitHub organization).
repositories_urlstringAPI URL to list repositories accessible to this installation.
app_idintegerThe GitHub App’s numeric ID (shared across all installations of the same app).
app_slugstringThe app’s URL-friendly slug identifier.
repository_selectionstringWhether the app has access to all repositories or selected repositories.
access_tokens_urlstringAPI URL to create installation access tokens.
target_typestringThe target type of the installation (e.g., Organization).
descriptionstringThe app’s description.
html_urlstringURL to the app’s GitHub page.
created_atdatetimeWhen the app was installed.
updated_atdatetimeWhen the installation was last updated.
suspended_atdatetimeWhen the installation was suspended, if applicable.
permissionsstringJSON string of the permissions granted to the app (e.g., {"contents": "read", "metadata": "read"}).
eventsstringJSON string of the webhook events the app subscribes to.

Diagram