> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_CanCreateRepositoryWithRunnerAccess

> Org role can create a repository that can dispatch workflows to this runner group

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Edge Schema

* Traversable: ✅

| Start                                                        | Kind                                    | End                                                                        |
| ------------------------------------------------------------ | --------------------------------------- | -------------------------------------------------------------------------- |
| [GH\_OrgRole](/opengraph/extensions/github/nodes/gh_orgrole) | GH\_CanCreateRepositoryWithRunnerAccess | [GH\_OrgRunnerGroup](/opengraph/extensions/github/nodes/gh_orgrunnergroup) |

```mermaid theme={null}
flowchart LR
    GH_OrgRole["GH_OrgRole"]
    GH_OrgRunnerGroup["GH_OrgRunnerGroup"]
    GH_OrgRole -- GH_CanCreateRepositoryWithRunnerAccess --> GH_OrgRunnerGroup
```

## General Information

The traversable GH\_CanCreateRepositoryWithRunnerAccess edge is a computed edge indicating that a [GH\_OrgRole](/opengraph/extensions/github/nodes/gh_orgrole) can create a repository that will immediately be able to dispatch workflows to a [GH\_OrgRunnerGroup](/opengraph/extensions/github/nodes/gh_orgrunnergroup).

This edge is emitted only for runner groups with `visibility=all` or `visibility=private`. Groups with `visibility=selected` require explicit repository assignment, so creating a repository does not automatically grant access to the group. For `visibility=all`, public repository creation is included only when `allows_public_repositories=true`; otherwise the composition is limited to private and internal repository creation.

The collector emits this edge only when new repositories in the organization have GitHub Actions enabled by default (`actions_enabled_repositories=all`), the organization-facing runner group has `restricted_to_workflows=false`, and inherited enterprise-backed access also has `restricted_to_workflows=false` on the source [GH\_EnterpriseRunnerGroup](/opengraph/extensions/github/nodes/gh_enterpriserunnergroup).

The computation follows repository-creation capability edges from the org role to the organization and then [GH\_Contains](/opengraph/extensions/github/edges/gh_contains) to the runner group. Each edge includes a `query_composition` Cypher query showing the repository-creation path and the Actions and runner-group policy predicates that make the path immediately usable.

## Edge Schema

| Source                                                       | Destination                                                                | Traversable |
| ------------------------------------------------------------ | -------------------------------------------------------------------------- | ----------- |
| [GH\_OrgRole](/opengraph/extensions/github/nodes/gh_orgrole) | [GH\_OrgRunnerGroup](/opengraph/extensions/github/nodes/gh_orgrunnergroup) | `true`      |

## Diagram

```mermaid theme={null}
graph LR
    n0["GH_OrgRole"]
    n1["GH_OrgRunnerGroup"]
    n0 -->|GH_CanCreateRepositoryWithRunnerAccess| n1
```