Use OIDC authentication for codecov (#1771)

ansible · May 22, 2024 · dde650b · dde650b
1 parent 031938a
commit dde650b
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
@@ -36,7 +36,9 @@ jobs:
           platforms: linux,macos
   tox:
     name: ${{ matrix.name }} / python ${{ matrix.python_version }}
-    environment: test
+    permissions:
+      id-token: write
+      checks: read
     runs-on: ubuntu-20.04
     needs: pre
     strategy:
@@ -87,8 +89,8 @@ jobs:
         with:
           name: ${{ matrix.passed_name }}
           fail_ci_if_error: true
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true # optional (default = false)
+          use_oidc: true # cspell:ignore oidc
       - name: Archive logs
         if: always()
         uses: actions/upload-artifact@v4