Atom feed for activity should include unforgeable identity of pusher
Description
For security and auditing purposes, I want to know who pushed what code to my repository. Gitlab presents an "activity" html page which gives this information in HTML format. There's also a machine-readable Atom feed, but the Atom feed does not include enough information.
Example:
Suppose that in the repo https://gitlab.com/abliss/bugdemo/ I want to find out who pushed the commit c65fb343.
HTML: https://gitlab.com/abliss/bugdemo/activity
Here I can see the avatar of the user who pushed the commit, and if I hover with the mouse, I can see in my browser's status bar that the user's homepage is "https://gitlab.com/abliss", which means their username is "abliss". Great!
Atom: https://gitlab.com/abliss/bugdemo.atom
Here I can only see that the user who pushed the commit chose to call themselves "Adam Bliss", but it could have been any user with write-access to the repo.
Proposal
Stick the username of the authenticated pusher somewhere in the atom feed. (It's not clear to me whether the "author" element is supposed to be the identity of the user who pushed the commit, or the author of the commit itself. I suggest using "pusher" to disambiguate.) Here's one possible xml example:
<entry>
<id>tag:gitlab.com,2017-02-21:63471906</id>
<link href="https://gitlab.com/abliss/bugdemo/commit/c65fb34347fc722dcc3874cafc1b5ca6628f2198"/>
<title>Adam Bliss pushed to project branch master at Adam Bliss / bugdemo</title>
<updated>2017-02-21T20:57:26Z</updated>
<media:thumbnail width="40" height="40" url="https://secure.gravatar.com/avatar/13122bc0c7b33d9720caf821b4165136?s=80&d=identicon"/>
<author>
<name>Adam Bliss</name>
<email></email>
</author>
<summary type="xhtml">...</summary>
<pusher>
<username>abliss</username> <!------ NEW! This is what I would like to have added! ------->
<name>Adam Bliss</name>
<email></email>
</pusher>
</entry>
Links / references
https://gitlab.com/abliss/bugdemo.atom
Documentation blurb
Problem statement: You want to know who pushed a recent commit to the repo.
Solution: Fetch the Atom feed for the repo's activity. Iterate over the entries until you find the commit you want. Extract the "pusher" element from the entry. The "username" element will tell you the authenticated username of the user who pushed the commit.