> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_CanAccess

> Personal access token, app installation, or deploy key can access this repository or organization

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Traversable: ❌

| Start | Kind | End |
| - | - | - |
| [GH\_DeployKey](/opengraph/extensions/github/nodes/gh_deploykey) | GH\_CanAccess | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) |
| [GH\_PersonalAccessToken](/opengraph/extensions/github/nodes/gh_personalaccesstoken) | GH\_CanAccess | [GH\_Organization](/opengraph/extensions/github/nodes/gh_organization) |
| [GH\_AppInstallation](/opengraph/extensions/github/nodes/gh_appinstallation) | GH\_CanAccess | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) |
| [GH\_PersonalAccessToken](/opengraph/extensions/github/nodes/gh_personalaccesstoken) | GH\_CanAccess | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) |

```mermaid theme={null}
flowchart LR
    GH_AppInstallation["GH_AppInstallation"]
    GH_DeployKey["GH_DeployKey"]
    GH_Organization["GH_Organization"]
    GH_PersonalAccessToken["GH_PersonalAccessToken"]
    GH_Repository["GH_Repository"]
    GH_AppInstallation -- GH_CanAccess --> GH_Repository
    GH_DeployKey -- GH_CanAccess --> GH_Repository
    GH_PersonalAccessToken -- GH_CanAccess --> GH_Organization
    GH_PersonalAccessToken -- GH_CanAccess --> GH_Repository
```

## General Information

The non-traversable GH\_CanAccess edge indicates that a personal access token, app installation, or deploy key has been granted access to a repository or organization. This edge represents the scope of access granted to a non-human credential rather than a direct attack path, providing visibility into which repositories are reachable through that credential. It is non-traversable because credential access does not transitively extend to other principals.

## Edge Schema

| Source | Destination | Traversable |
| - | - | - |
| [GH\_AppInstallation](/opengraph/extensions/github/nodes/gh_appinstallation) | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) | `false` |
| [GH\_DeployKey](/opengraph/extensions/github/nodes/gh_deploykey) | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) | `false` |
| [GH\_PersonalAccessToken](/opengraph/extensions/github/nodes/gh_personalaccesstoken) | [GH\_Organization](/opengraph/extensions/github/nodes/gh_organization) | `false` |
| [GH\_PersonalAccessToken](/opengraph/extensions/github/nodes/gh_personalaccesstoken) | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) | `false` |

## Diagram

```mermaid theme={null}
graph LR
    n0["GH_AppInstallation"]
    n1["GH_Repository"]
    n2["GH_DeployKey"]
    n3["GH_PersonalAccessToken"]
    n4["GH_Organization"]
    n0 -.->|GH_CanAccess| n1
    n2 -.->|GH_CanAccess| n1
    n3 -.->|GH_CanAccess| n4
    n3 -.->|GH_CanAccess| n1
```