App Installations

Open Unified Identities › Non Human Identities, filter Providers to GitHub › App Installation, then select a row to open its details.

A GitHub App is a non-human identity that holds permissions of its own. An app with administrative permissions on an organization is as powerful as an owner, and is treated as such.

Non Human Identities filtered to GitHub › App Installation

App Installation Details

Opening an app installation shows the Risk and Exposure Point in the header, and the page contains the Information pane and, when the app installation has issues, the Issues pane.

You can analyze the object in the Graph by clicking the Graph » button next to the Information title. For a shadow admin the button reads Admin Path » and opens the shortest path to admin objects (see Object Detail Pages).

App Installation Details

Information

Information Pane can contain different badges to highlight important attributes.

Badge	Description
Tier 0	Indicates that the object is a Tier 0 asset. An installation holding administrative permissions on the organization is Tier 0.
Privileged	Indicates that the object is privileged.
Shadow	Indicates that the object can compromise admin objects with at least one attack path.

Information Pane contains only the Details tab.

Details

Details tab contains attributes below about the app installation object.

Attribute	Description
App Slug	The unique identifier of the installed GitHub App (e.g., dependabot).
Target Type	The type of account the app is installed on (Organization or User).
Repository Selection	Whether the app has access to all repositories or a selected subset (all or selected).
App ID	The numeric identifier of the GitHub App.
Events	The webhook events the app is subscribed to (e.g., push, pull_request).
Object ID	The identifier of the installation.

Issues

Issues pane contains identified issues on the app installation object.