ci: rm bash tool from opencode ci workflow, reduce risks

rekram1-node · rekram1-node · commit 7eb509db1486 · 2025-12-10T21:45:46.000-06:00
diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml
@@ -29,5 +29,6 @@ jobs:
         uses: sst/opencode/github@latest
         env:
           OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
+          OPENCODE_PERMISSION: '{"bash": "deny"}'
         with:
           model: opencode/claude-haiku-4-5
