Research: GitHub bot for comments should use Code PushUp branding

[vmasek]

User story

As a user I would like to see the GitHub bot branded as Code PushUp,
so it sparks more confidence and instant captures an eye as audit report tool.

Acceptance criteria

• Code PushUp logo is used as avatar
• Code PushUp (bot) name is present
• name/image links to GitHub app page
  • GitHub app page has description

Implementation details

See what other bots are doing that they have branded comments

Click on their name or image links to GitHub app pages
Nx

Code Rabbit

Sonar

[hanna-skryl]

From what I’ve seen, the key is to authenticate the action’s API calls with a GitHub App installation token, as described in GitHub's documentation.

In summary, to have the comment attributed to the Code PushUp GitHub App, we must generate and use a GitHub App installation token instead of a default github.token or any token passed in by the user.

[matejchalk]

Implemented in:

• Implement GitHub App authentication with fallback #186
• feat: support prod and staging GitHub Apps #189