Use OIDC instead of token for codecov upload

nasa-gcn · May 4, 2024 · 5ad1758 · 5ad1758
1 parent 8419898
commit 5ad1758
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml
@@ -32,6 +32,8 @@ jobs:
 
   coverage:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     steps:
       - uses: actions/checkout@v4
@@ -59,4 +61,4 @@ jobs:
         uses: codecov/codecov-action@v4
         with:
           files: ./.coverage,./cobertura.xml
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true