From 9308b45a975f8fe9cca24f77cfec8c2878e48e30 Mon Sep 17 00:00:00 2001
From: PANDA-JSR <pandajsr72@gmail.com>
Date: Tue, 1 Sep 2026 21:13:47 +0800
Subject: [PATCH] fix: use workflow token for OpenCode GitHub access

---
 .github/workflows/opencode.yml | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml
index 91d9d3b..b6a7231 100644
--- a/.github/workflows/opencode.yml
+++ b/.github/workflows/opencode.yml
@@ -18,7 +18,6 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 45
     permissions:
-      id-token: write
       contents: write
       issues: write
       pull-requests: write
@@ -53,10 +52,10 @@ jobs:
         uses: anomalyco/opencode/github@cb7d8b2f5e44876ef98b661dc10590c915af3a9f
         env:
           ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
-          GITHUB_TOKEN: ${{ secrets.SECTL_SECAGENT_GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ github.token }}
         with:
           model: deepseek/deepseek-v4-flash
           agent: issue-pr-coder
           mentions: /oc,/opencode
           variant: medium
-          use_github_token: false
+          use_github_token: true