From 9308b45a975f8fe9cca24f77cfec8c2878e48e30 Mon Sep 17 00:00:00 2001 From: PANDA-JSR Date: Tue, 1 Sep 2026 21:13:47 +0800 Subject: [PATCH 1/2] fix: use workflow token for OpenCode GitHub access --- .github/workflows/opencode.yml | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml index 91d9d3b..b6a7231 100644 --- a/.github/workflows/opencode.yml +++ b/.github/workflows/opencode.yml @@ -18,7 +18,6 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 45 permissions: - id-token: write contents: write issues: write pull-requests: write @@ -53,10 +52,10 @@ jobs: uses: anomalyco/opencode/github@cb7d8b2f5e44876ef98b661dc10590c915af3a9f env: ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} - GITHUB_TOKEN: ${{ secrets.SECTL_SECAGENT_GITHUB_TOKEN }} + GITHUB_TOKEN: ${{ github.token }} with: model: deepseek/deepseek-v4-flash agent: issue-pr-coder mentions: /oc,/opencode variant: medium - use_github_token: false + use_github_token: true From 0dba81168c6b4cbac6b9ca877bbb1a7544b4eb74 Mon Sep 17 00:00:00 2001 From: PANDA-JSR Date: Wed, 2 Sep 2026 20:43:53 +0800 Subject: [PATCH 2/2] fix: ignore bot comments in OpenCode workflow --- .github/workflows/opencode.yml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml index b6a7231..af6540b 100644 --- a/.github/workflows/opencode.yml +++ b/.github/workflows/opencode.yml @@ -13,8 +13,11 @@ concurrency: jobs: opencode: if: | - contains(github.event.comment.body, '/oc') || - contains(github.event.comment.body, '/opencode') + !endsWith(github.event.comment.user.login, '[bot]') && + ( + startsWith(github.event.comment.body, '/oc') || + startsWith(github.event.comment.body, '/opencode') + ) runs-on: ubuntu-latest timeout-minutes: 45 permissions: