diff --git a/.github/workflows/opencode-upgrades.yml b/.github/workflows/opencode-upgrades.yml
index 29b4222..c7efccb 100644
--- a/.github/workflows/opencode-upgrades.yml
+++ b/.github/workflows/opencode-upgrades.yml
@@ -10,9 +10,9 @@ jobs:
     runs-on: ubuntu-latest
     permissions:
       id-token: write
-      contents: write
-      pull-requests: write
-      issues: write
+      contents: read
+      pull-requests: read
+      issues: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@v6
diff --git a/.github/workflows/opencode.yml b/.github/workflows/opencode.yml
index ce8284a..40fc47d 100644
--- a/.github/workflows/opencode.yml
+++ b/.github/workflows/opencode.yml
@@ -35,5 +35,7 @@ jobs:
         uses: anomalyco/opencode/github@latest
         env:
           OPENCODE_API_KEY: ${{ secrets.OPENCODE_API_KEY }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
           model: opencode-go/deepseek-v4-pro
+          use_github_token: true