lgtmaybe is the optional GitHub posting identity for the lgtmaybe Marketplace Action. Install it on selected repositories, grant the workflow id-token: write, and set github_identity: lgtmaybe to post reviews as lgtmaybe[bot].

The review still runs as a GitHub Action in your repository. Provider, model, and authentication remain in the workflow's with: block. The App never receives model credentials, and the identity broker never receives your diff.

Setup: https://lgtmaybe.coles.codes/how-to/post-as-a-github-app/