Who is the author of a release created by API

As per Releases API | GitLab GitLab somehow determines the author of a release behind the scenes - it cannot be passed as input.

Every now and then we releases whose author is wrong i.e. neither the one triggering the pipeline nor the commit author. So, what algorithm does GitLab apply here?

We use $CI_JOB_TOKEN to authenticate against the API.

    - |
      rm -f release.json || true
      {
        echo "{"
        echo "  \"name\": \"$BOM_VERSION\","
        echo "  \"tag_name\": \"bom-$BOM_VERSION\","
        echo "  \"description\": \"Release for BOM $BOM_VERSION\""
        echo "}"
      } >> release.json
      cat release.json
      curl "$CI_API_V4_URL"/projects/"$CI_PROJECT_ID"/releases \
      --header 'Content-Type: application/json' \
      --header "JOB-TOKEN: $CI_JOB_TOKEN" \
      --data @release.json