Duo Agent Platform: Git commit attribution for Duo Developer Service Account

Problem

Composite Identity tokens are used to perform git operations in remote flows. It uses the identity of human user to authorise the git commands and as a result, the MR activity feed displays the user name of human user as the commit author instead of Service account. We have custom commit user name and email when pushing commits via go-executor, but that doesn't change the commit author in activity.

MR activity feed https://gitlab.com/-/project/278964/uploads/0b0c75063f7588e64a9ccf2946e2520b/Screenshot_2025-07-23_at_1.18.44_PM.png
Commit history https://gitlab.com/-/project/278964/uploads/99f92469dc9f83c946cafbe4dd116274/Screenshot_2025-10-30_at_12.26.52_PM.png

Expected Behaviour

Commit activities should be attributed to Duo agent username instead of human user.

Implementation Plan

Edited by Surabhi Suman