Remove GITHUB_TOKEN env from opencode workflow steps

[Jordonbc]

Motivation

• Remove explicit GITHUB_TOKEN environment variable from the primary and fallback steps to avoid passing the token unnecessarily through the action environment and rely on configured job permissions instead.

Description

• Deleted GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} from the primary step in .github/workflows/opencode.yml.
• Deleted GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} from the fallback step in .github/workflows/opencode.yml and ensured the file ends with a newline.

Testing

• No automated tests were run for this workflow-only change.

---

Codex Task

[github-actions]

The PR described appears to already be merged — the current .github/workflows/opencode.yml doesn't contain any GITHUB_TOKEN env vars. The open PRs are #40 (dependency bumps) and #187.

---

For completeness, here's my review of what the workflow change would accomplish:

Quality: Good

• Removes unnecessary token exposure from the action environment.
• Relies on use_github_token: true input and job-level permissions instead, which is the cleaner pattern.

No bugs

• The action handles token auth via its use_github_token input, so removing the explicit env var doesn't break anything.

Minor note

• Line 52 is missing a trailing newline (common YAML convention). Not a functional issue but worth fixing for consistency.

opencode session  |  github run