Bots usually take source code that is hosted outside the company do do things internally, such as QA, and then publish the result externally or to some internal channel that is accessible from outside the usual IT systems (IT workarounds). It's complicated to tell you without going into details.
