> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/github-identities/app-installations.md).

# App Installations

The App Installations page provides a list of enumerated GitHub App installations in the scanned environment. The list contains the Name, App Slug, Target Type, Repository Selection, Risk Score, Exposure Point and Issue Counts of each app installation object.

A GitHub App is a non-human identity that holds permissions of its own. An app with administrative permissions on an organization is as powerful as an owner, and is treated as such by Forestall ISPM.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-ecc4139e47bd1bdc2803d1870fb42c1c708f66db%2Fgithub-identities-app-installations-image-1.png?alt=media" alt=""><figcaption></figcaption></figure>

### App Installation Details

Details page contains the Risk Score of the app installation, Exposure Point, Information and Issues panes.

You can analyze objects in the Graph module by clicking the Visualize button on the upper left side of the Information Pane.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-d88feb80a01fe6011f68eb5413a68cefbd19c00a%2Fgithub-identities-app-installations-image-2.png?alt=media" alt=""><figcaption><p><em>App Installation Details</em></p></figcaption></figure>

#### Information

Information Pane can contain different badges to highlight important attributes.

| Badge            | Description                                                                                                                    |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------ |
| **Tier 0**       | Indicates that the object is a Tier 0 asset. An installation holding administrative permissions on the organization is Tier 0. |
| **Privileged**   | Indicates that the object is privileged.                                                                                       |
| **Shadow Admin** | Indicates that the installation can reach Tier 0 through an attack path without an explicit administrative role.               |

Information Pane contains only the Details tab.

**Details**

Details tab contains attributes below about the app installation object.

| Attribute            | Description                                                                                |
| -------------------- | ------------------------------------------------------------------------------------------ |
| App Slug             | The unique identifier of the installed GitHub App (e.g., `dependabot`).                    |
| Target Type          | The type of account the app is installed on (Organization or User).                        |
| Repository Selection | Whether the app has access to all repositories or a selected subset (`all` or `selected`). |
| App ID               | The numeric identifier of the GitHub App.                                                  |
| Events               | The webhook events the app is subscribed to (e.g., push, pull\_request).                   |
| Object ID            | The identifier of the installation.                                                        |

#### Issues

Issues pane contains identified issues on the app installation object.