Use OIDC for codecov (#11)

pycontribs · May 22, 2024 · 40fae61 · 40fae61
1 parent 1b55446
commit 40fae61
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
@@ -33,7 +33,8 @@ jobs:
           platforms: linux,macos
   build:
     name: ${{ matrix.name }}
-    environment: test
+    permissions:
+      id-token: write # codecov
     runs-on: ${{ matrix.os || 'ubuntu-22.04' }}
     needs:
       - prepare
@@ -99,8 +100,8 @@ jobs:
         with:
           name: ${{ matrix.passed_name }}
           fail_ci_if_error: true
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true # optional (default = false)
+          use_oidc: true # cspell:ignore oidc
 
       - name: Archive logs
         uses: actions/upload-artifact@v4