diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 26f7228c..95136bc9 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -1,5 +1,7 @@
 name: Fetch and upload coverage
 
+permissions:
+  id-token: write
 on:
   push:
     branches: [master]
@@ -27,6 +29,7 @@ jobs:
         run: make coverage
       - name: Upload coverage reports to Codecov with GitHub Action
         uses: codecov/codecov-action@v7
+        with:
+          use_oidc: true
         env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true