From 6dd5df64d6c9a771ebaa4e8f32a41a1e7f363e18 Mon Sep 17 00:00:00 2001
From: Ole Herman Schumacher Elgesem <ole@northern.tech>
Date: Mon, 24 Aug 2026 18:47:32 +0200
Subject: [PATCH] GH Actions: Switched codecov workflow to OIDC

Signed-off-by: Ole Herman Schumacher Elgesem <ole@northern.tech>
---
 .github/workflows/coverage.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 26f7228c..95136bc9 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -1,5 +1,7 @@
 name: Fetch and upload coverage
 
+permissions:
+  id-token: write
 on:
   push:
     branches: [master]
@@ -27,6 +29,7 @@ jobs:
         run: make coverage
       - name: Upload coverage reports to Codecov with GitHub Action
         uses: codecov/codecov-action@v7
+        with:
+          use_oidc: true
         env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true