diff --git a/.github/workflows/duplicate-issues.yml b/.github/workflows/duplicate-issues.yml
index 30a15a62..863635ed 100644
--- a/.github/workflows/duplicate-issues.yml
+++ b/.github/workflows/duplicate-issues.yml
@@ -23,7 +23,7 @@ jobs:
         env:
           ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          OPENCODE_PERMISSION: { "bash": { "gh*": "allow", "*": "deny" } }
+          OPENCODE_PERMISSION: '{ "bash": { "gh*": "allow", "*": "deny" } }'
         run: |
           opencode run -m anthropic/claude-sonnet-4-20250514 "A new issue has been created: '${{ github.event.issue.title }}'
 
diff --git a/.github/workflows/guidelines-check.yml b/.github/workflows/guidelines-check.yml
index 18a36830..36fe3b8d 100644
--- a/.github/workflows/guidelines-check.yml
+++ b/.github/workflows/guidelines-check.yml
@@ -23,7 +23,7 @@ jobs:
         env:
           ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          OPENCODE_PERMISSION: { "bash": { "gh*": "allow", "*": "deny" } }
+          OPENCODE_PERMISSION: '{ "bash": { "gh*": "allow", "*": "deny" } }'
         run: |
           opencode run -m anthropic/claude-sonnet-4-20250514 "A new pull request has been created: '${{ github.event.pull_request.title }}'