# GitHub tools act as one chosen identity, with narrowed tokens > A new acts_as setting picks whose GitHub identity the tools use, and each call gets a token limited to one repository and the permissions it needs. Source: Date: 2026-10-12 Products: Platform, Cloud Category: Improvement Pull request: everruns/everruns#4604 The GitHub capability’s tools now act on GitHub as exactly one identity, set by the new `acts_as` setting: `agent` (the default), `person`, or `person_or_agent`. Before, a run started by a person who had connected GitHub used that person’s connection, so a review bot could post as the Everruns app instead of as itself. ```json { "ref": "github", "config": { "acts_as": "person" } } ``` Every call also gets a short-lived token limited to the repository it names and the permissions that tool needs, so reading a diff no longer holds write access.