# Is there a way to avoid CI artifact uploads showing a user instead of a bot account in the Mender audit log?

**URL:** <https://hub.mender.io/t/is-there-a-way-to-avoid-ci-artifact-uploads-showing-a-user-instead-of-a-bot-account-in-the-mender-audit-log/8177>\
**Category:** General Discussions\
**Tags:** github-action\
**Created:** [January 26, 2026, 4:10pm UTC](https://hub.mender.io/t/is-there-a-way-to-avoid-ci-artifact-uploads-showing-a-user-instead-of-a-bot-account-in-the-mender-audit-log/8177 "2026-01-26T16:10:57Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sushil](https://avatars.discourse-cdn.com/v4/letter/s/e19adc/32.png) [@sushil](https://hub.mender.io/u/sushil)\
**Post date:** [January 26, 2026, 4:10pm UTC](https://hub.mender.io/t/is-there-a-way-to-avoid-ci-artifact-uploads-showing-a-user-instead-of-a-bot-account-in-the-mender-audit-log/8177/1 "2026-01-26T16:10:57Z")

</div>

Hi,

When I upload artificats in mender releases from Github Action Pipeline, the upload works but the mender audit log UI shows “Performed by“ as the user who owns the token.

Is there any recommend way to do CI uploads so attribute for eg: some bot account with org-level token management?

Thanks  
Sushil

---

<div class="post-metadata">

**Author:** ![TheYoctoJester](https://yyz2.discourse-cdn.com/flex036/user_avatar/hub.mender.io/theyoctojester/32/1444_2.png) [@TheYoctoJester](https://hub.mender.io/u/TheYoctoJester)\
**Post date:** [January 26, 2026, 4:54pm UTC](https://hub.mender.io/t/is-there-a-way-to-avoid-ci-artifact-uploads-showing-a-user-instead-of-a-bot-account-in-the-mender-audit-log/8177/2 "2026-01-26T16:54:45Z")

</div>

Hi @sushil,

The usual way here is to create a dedicated user which you call “ci”, or something similar. Then this user owns the token. As there are basically no restrictions on the number of user accounts you can have, and there is no cost associated with them, it should not be a problem.

Greetz,  
Josef