GH_CanAccess

Personal access token, app installation, or deploy key can access this repository, reusable repository scope, or organization

Edge Schema

• Traversable: ❌

Start	Kind	End
GH_DeployKey	GH_CanAccess	GH_Repository
GH_PersonalAccessToken	GH_CanAccess	GH_Organization
GH_AppInstallation	GH_CanAccess	GH_Repository
GH_PersonalAccessToken	GH_CanAccess	GH_Repository
GH_AppInstallation	GH_CanAccess	GH_Scope
GH_PersonalAccessToken	GH_CanAccess	GH_Scope

General Information

The non-traversable GH_CanAccess edge indicates that a personal access token, app installation, or deploy key has been granted access to a repository, reusable scope, or organization. All-repository app installations and PATs point to an organization-scoped GH_Scope with scope_type=repository instead of repeating an edge to every repository. This edge represents access scope rather than a direct attack path.

Edge Schema

Source	Destination	Traversable
GH_AppInstallation	GH_Repository	false
GH_AppInstallation	GH_Scope	false
GH_DeployKey	GH_Repository	false
GH_PersonalAccessToken	GH_Organization	false
GH_PersonalAccessToken	GH_Repository	false
GH_PersonalAccessToken	GH_Scope	false

Diagram