ignore: tweak permissions

2025-10-16 12:48:39 -05:00 · 2025-10-16 12:48:39 -05:00 · 64617c113a
parent 860c6338fc
commit 64617c113a
2 changed files with 6 additions and 6 deletions
--- a/.github/workflows/opencode.yml
+++ b/.github/workflows/opencode.yml
@ -13,10 +13,10 @@ jobs:
      startsWith(github.event.comment.body, '/opencode')
    runs-on: ubuntu-latest
    permissions:
-      contents: write
-      pull-requests: write
-      issues: write
      id-token: write
+      contents: read
+      pull-requests: read
+      issues: read
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
--- a/packages/opencode/src/cli/cmd/github.ts
+++ b/packages/opencode/src/cli/cmd/github.ts
@ -334,10 +334,10 @@ jobs:
      startsWith(github.event.comment.body, '/opencode')
    runs-on: ubuntu-latest
    permissions:
-      contents: write
-      pull-requests: write
-      issues: write
      id-token: write
+      contents: read
+      pull-requests: read
+      issues: read
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4