ceos/opencode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(github): add persist-credentials: false to workflow templates (#8202)

Browse source
This commit is contained in:
Leonidas 2026-01-13 16:53:30 +01:00 • committed by GitHub
commit a092f567b7
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 20 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

11
github/README.md
View file

@ -81,12 +81,13 @@ This will walk you through installing the GitHub app, creating the workflow, and
permissions: permissions:
id-token: write id-token: write
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with: with:
fetch-depth: 1 fetch-depth: 1
persist-credentials: false
- name: Run opencode - name: Run opencode
uses: anomalyco/opencode/github@latest uses: anomalyco/opencode/github@latest
env: env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}

2
packages/opencode/src/cli/cmd/github.ts
View file

@ -394,6 +394,8 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with:
persist-credentials: false
- name: Run opencode - name: Run opencode
uses: anomalyco/opencode/github@latest${envStr} uses: anomalyco/opencode/github@latest${envStr}

17
packages/web/src/content/docs/github.mdx
View file

@ -57,12 +57,13 @@ Or you can set it up manually.
permissions: permissions:
id-token: write id-token: write
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with: with:
fetch-depth: 1 fetch-depth: 1
persist-credentials: false
- name: Run OpenCode - name: Run OpenCode
uses: anomalyco/opencode/github@latest uses: anomalyco/opencode/github@latest
env: env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
@ -135,6 +136,8 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with:
persist-credentials: false
- name: Run OpenCode - name: Run OpenCode
uses: anomalyco/opencode/github@latest uses: anomalyco/opencode/github@latest
@ -172,6 +175,8 @@ jobs:
issues: read issues: read
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@v6
with:
persist-credentials: false
- uses: anomalyco/opencode/github@latest - uses: anomalyco/opencode/github@latest
env: env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
@ -223,6 +228,8 @@ jobs:
- uses: actions/checkout@v6 - uses: actions/checkout@v6
if: steps.check.outputs.result == 'true' if: steps.check.outputs.result == 'true'
with:
persist-credentials: false
- uses: anomalyco/opencode/github@latest - uses: anomalyco/opencode/github@latest
if: steps.check.outputs.result == 'true' if: steps.check.outputs.result == 'true'