From 40fae611a75e086bacfae94c93a84d3f0f2d9b09 Mon Sep 17 00:00:00 2001
From: Sorin Sbarnea <ssbarnea@redhat.com>
Date: Wed, 22 May 2024 12:29:33 +0100
Subject: [PATCH] Use OIDC for codecov (#11)

---
 .github/workflows/tox.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
index fa83dc3..672e52e 100644
--- a/.github/workflows/tox.yml
+++ b/.github/workflows/tox.yml
@@ -33,7 +33,8 @@ jobs:
           platforms: linux,macos
   build:
     name: ${{ matrix.name }}
-    environment: test
+    permissions:
+      id-token: write # codecov
     runs-on: ${{ matrix.os || 'ubuntu-22.04' }}
     needs:
       - prepare
@@ -99,8 +100,8 @@ jobs:
         with:
           name: ${{ matrix.passed_name }}
           fail_ci_if_error: true
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true # optional (default = false)
+          use_oidc: true # cspell:ignore oidc
 
       - name: Archive logs
         uses: actions/upload-artifact@v4