Skip OpenCode review for non-write actors

[KagamiChan]

Summary

• Add an OpenCode workflow preflight that checks the trigger user's repository permission.
• Skip checkout and OpenCode review unless the trigger user has admin/write access, while logging permission lookup failures before treating them as no permission.

Checks

• pnpm exec prettier --check .github/workflows/opencode-review.yml

[Copilot]

Pull request overview

This PR adds a preflight gate to the OpenCode PR Review workflow so it only performs checkout and runs the OpenCode review when the triggering actor has sufficient repository permissions, and it logs permission lookup failures before treating them as “no permission”.

Changes:

• Add a “trigger user permissions” check step that queries the actor’s repository permission via the GitHub API (via gh api).
• Conditionally skip actions/checkout and the OpenCode review action unless the actor has write/admin access (with a fallback to “none” on lookup failure).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

No findings to report for this PR.

The permission guard is correctly implemented:

• Uses github.actor (the trigger user) to check repository permissions via the GitHub API.
• Fails safely: API errors default to permission=none, which results in can_review=false and the review is skipped.
• Properly cleans up the temp file and logs API errors for debugging.
• Conditionally gates both checkout and the OpenCode review step on the can_review output.

No correctness, security, reliability, or maintenance risks identified in the change.

opencode session  |  github run