Is there a way to avoid CI artifact uploads showing a user instead of a bot account in the Mender audit log?

General Discussions
1

Hi,

When I upload artificats in mender releases from Github Action Pipeline, the upload works but the mender audit log UI shows “Performed by“ as the user who owns the token.

Is there any recommend way to do CI uploads so attribute for eg: some bot account with org-level token management?

Thanks
Sushil

2

Hi @sushil,

The usual way here is to create a dedicated user which you call “ci”, or something similar. Then this user owns the token. As there are basically no restrictions on the number of user accounts you can have, and there is no cost associated with them, it should not be a problem.

Greetz,
Josef