I'm unfamiliar with bug bounties but how often do you get to peruse codebases? I thought most of the time you're working in a blackbox setting with just an outs

I'm unfamiliar with bug bounties but how often do you get to peruse codebases? I thought most of the time you're working in a blackbox setting with just an outside interface that you peek through?