Skip to content

Trust the git host service-account flag - #67

Merged
trick77 merged 2 commits into
masterfrom
worktree-service-accounts
Sep 8, 2026
Merged

trick77 merged 2 commits into
masterfrom
worktree-service-accounts

Conversation

@trick77

@trick77 trick77 commented Sep 8, 2026

Copy link
Copy Markdown
Owner

Bitbucket DC marks its built-in system user as type: SERVICE — the account that files the default PR tasks and posts stale-PR notices. It is not an account anyone creates, and no config lists it, so it counted as a human reviewer.

In the production export that account posts 85 comments across 10 repos, 81 of them within 5 seconds of a PR opening (severity: BLOCKER default tasks). That makes it the first non-author touch on 81 PRs, all at zero seconds — the second-largest distortion of code-review pickup time after the review bot itself.

The parser now carries Bitbucket's own verdict and detection tags those rows automation_source = "service-account". It is checked after the configured sources, so a configured bot keeps its own name; absence of type never promotes a person.

This is config-last by design: prefer what the payload already states, then what senders declare about themselves, and only then a config entry. Renovate still needs one (Bitbucket reports it as NORMAL and it sends nothing to riptide).

Tests: 234 pass, ruff + basedpyright clean.

Bitbucket DC marks its built-in system user `type: SERVICE` - the account
that files the default PR tasks and posts stale-PR notices. Those comments
land within a second of a PR opening, so counted as human they make review
pickup time look instant; in production data that account is the first
non-author touch on 81 PRs, all at zero seconds.

The parser now carries that flag and detection tags such rows
`automation_source = 'service-account'`. Checked after the configured
sources, so a configured bot keeps its own name, and no installation has to
list a server-side account it never created.
@trick77 trick77 changed the title Trust the git hosts own service-account flag Trust the git host service-account flag Sep 8, 2026
A service account whose handle looks bot-shaped (`ci-bot`) was tagged
`other-bot`, which would put a technical user into bot-velocity views - those
exist to show work bots actually author. A stated fact beats a guess from the
name, so the SERVICE check now sits above `looks_bot_shaped`, still below the
configured sources, which name the specific tool.
@trick77
trick77 merged commit 4c04c1a into master Sep 8, 2026
3 checks passed
@trick77
trick77 deleted the worktree-service-accounts branch September 8, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant