monadical/opencode
13
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases Wiki Activity

fix(github): add persist-credentials: false to workflow templates (#8202)

Browse Source
This commit is contained in:
Leonidas
2026-01-13 16:53:30 +01:00
committed by GitHub
parent 883a6577d5
commit a092f567b7
3 changed files with 20 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
github/README.md
View File

@@ -81,12 +81,13 @@ This will walk you through installing the GitHub app, creating the workflow, and
permissions: permissions:
id-token: write id-token: write
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with: with:
fetch-depth: 1 fetch-depth: 1
persist-credentials: false
- name: Run opencode - name: Run opencode
uses: anomalyco/opencode/github@latest uses: anomalyco/opencode/github@latest
env: env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}

2
packages/opencode/src/cli/cmd/github.ts
View File

@@ -394,6 +394,8 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with:
persist-credentials: false
- name: Run opencode - name: Run opencode
uses: anomalyco/opencode/github@latest${envStr} uses: anomalyco/opencode/github@latest${envStr}

17
packages/web/src/content/docs/github.mdx
View File

@@ -57,12 +57,13 @@ Or you can set it up manually.
permissions: permissions:
id-token: write id-token: write
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with: with:
fetch-depth: 1 fetch-depth: 1
persist-credentials: false
- name: Run OpenCode - name: Run OpenCode
uses: anomalyco/opencode/github@latest uses: anomalyco/opencode/github@latest
env: env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -135,6 +136,8 @@ jobs:
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v6 uses: actions/checkout@v6
with:
persist-credentials: false
- name: Run OpenCode - name: Run OpenCode
uses: anomalyco/opencode/github@latest uses: anomalyco/opencode/github@latest
@@ -172,6 +175,8 @@ jobs:
issues: read issues: read
steps: steps:
- uses: actions/checkout@v6 - uses: actions/checkout@v6
with:
persist-credentials: false
- uses: anomalyco/opencode/github@latest - uses: anomalyco/opencode/github@latest
env: env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }} ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
@@ -223,6 +228,8 @@ jobs:
- uses: actions/checkout@v6 - uses: actions/checkout@v6
if: steps.check.outputs.result == 'true' if: steps.check.outputs.result == 'true'
with:
persist-credentials: false
- uses: anomalyco/opencode/github@latest - uses: anomalyco/opencode/github@latest
if: steps.check.outputs.result == 'true' if: steps.check.outputs.result == 'true'