> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# GH_AppInstallation

> A GitHub App installed on the organization with specific permissions and repository access

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

Represents a GitHub App installed on an organization. App installations have specific permissions and can be scoped to all repositories or a selection of repositories. The permissions granted to the app are captured as a JSON string in the properties.

Each installation is linked to its parent [GH\_App](/opengraph/extensions/github/nodes/gh_app) via a [GH\_InstalledAs](/opengraph/extensions/github/edges/gh_installedas) edge. For installations with `repository_selection` set to `all`, [GH\_CanAccess](/opengraph/extensions/github/edges/gh_canaccess) edges are created to every repository in the organization. For installations with `repository_selection` set to `selected`, repository-level edges cannot be enumerated with a PAT (requires app installation token authentication).

## Edges

<Note>
  The tables below list edges defined by the GitHub extension only. Additional edges to or from this node may be created by other extensions.
</Note>

### Inbound Edges

| Edge Type                                                            | Source Node Types                                                                                                                                                                                                | Traversable |
| -------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------- |
| [GH\_Contains](/opengraph/extensions/github/edges/gh_contains)       | [GH\_Organization](/opengraph/extensions/github/nodes/gh_organization), [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository), [GH\_Environment](/opengraph/extensions/github/nodes/gh_environment) | ❌           |
| [GH\_InstalledAs](/opengraph/extensions/github/edges/gh_installedas) | [GH\_App](/opengraph/extensions/github/nodes/gh_app)                                                                                                                                                             | ✅           |

### Outbound Edges

| Edge Type                                                        | Destination Node Types                                             | Traversable |
| ---------------------------------------------------------------- | ------------------------------------------------------------------ | ----------- |
| [GH\_CanAccess](/opengraph/extensions/github/edges/gh_canaccess) | [GH\_Repository](/opengraph/extensions/github/nodes/gh_repository) | ❌           |

## Properties

| Property Name         | Data Type | Description                                                                                           |
| --------------------- | --------- | ----------------------------------------------------------------------------------------------------- |
| objectid              | string    | Composite identifier: `Iv23liPgjiu18oXLM2q7`.                                                         |
| id                    | integer   | The GitHub installation ID.                                                                           |
| name                  | string    | The app's slug identifier.                                                                            |
| environment\_name     | string    | The name of the environment (GitHub organization) where the app is installed.                         |
| environmentid         | string    | The node\_id of the environment (GitHub organization).                                                |
| repositories\_url     | string    | API URL to list repositories accessible to this installation.                                         |
| app\_id               | integer   | The GitHub App's numeric ID (shared across all installations of the same app).                        |
| app\_slug             | string    | The app's URL-friendly slug identifier.                                                               |
| repository\_selection | string    | Whether the app has access to `all` repositories or `selected` repositories.                          |
| access\_tokens\_url   | string    | API URL to create installation access tokens.                                                         |
| target\_type          | string    | The target type of the installation (e.g., `Organization`).                                           |
| description           | string    | The app's description.                                                                                |
| html\_url             | string    | URL to the app's GitHub page.                                                                         |
| created\_at           | datetime  | When the app was installed.                                                                           |
| updated\_at           | datetime  | When the installation was last updated.                                                               |
| suspended\_at         | datetime  | When the installation was suspended, if applicable.                                                   |
| permissions           | string    | JSON string of the permissions granted to the app (e.g., `{"contents": "read", "metadata": "read"}`). |
| events                | string    | JSON string of the webhook events the app subscribes to.                                              |

## Diagram

```mermaid theme={null}
flowchart TD
    GH_App[fa:fa-cube GH_App]
    GH_Organization[fa:fa-building GH_Organization]
    GH_AppInstallation[fa:fa-plug GH_AppInstallation]
    GH_Repository[fa:fa-box-archive GH_Repository]

    GH_App -->|GH_InstalledAs| GH_AppInstallation
    GH_Organization -.->|GH_Contains| GH_AppInstallation
    GH_AppInstallation -.->|GH_CanAccess| GH_Repository

```