Skip to main content

Bot

Any identifiable automation that acts on its own behalf within our repos. In practice, this is almost always a GitHub App installed in the organization.

Two types​

  • Credential-only (Type A): has no code of its own. Exists solely as a GitHub registration to dispense ephemeral tokens within workflows. Requires no infrastructure. Example: eigenoid-release-bot.
  • With code (Type B): reacts to webhooks or runs its own logic. Requires hosting (serverless, container, etc.).

What gets documented for each bot​

  • Permissions granted (contents, PRs, issues, etc.)
  • Where it's installed (which repos)
  • Private key or secret management — where it's stored, how it's rotated
  • Human owner — the person responsible if it stops working

On this site​

They live in /docs/platform/automation/.