From dde650b6e9bf84a26989659803d93d5d0294ef63 Mon Sep 17 00:00:00 2001
From: Shatakshi Mishra <shatakshimishra01@gmail.com>
Date: Wed, 22 May 2024 15:24:07 +0530
Subject: [PATCH] Use OIDC authentication for codecov (#1771)

---
 .github/workflows/tox.yml | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
index bf4dc6ce3..388d114af 100644
--- a/.github/workflows/tox.yml
+++ b/.github/workflows/tox.yml
@@ -36,7 +36,9 @@ jobs:
           platforms: linux,macos
   tox:
     name: ${{ matrix.name }} / python ${{ matrix.python_version }}
-    environment: test
+    permissions:
+      id-token: write
+      checks: read
     runs-on: ubuntu-20.04
     needs: pre
     strategy:
@@ -87,8 +89,8 @@ jobs:
         with:
           name: ${{ matrix.passed_name }}
           fail_ci_if_error: true
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true # optional (default = false)
+          use_oidc: true # cspell:ignore oidc
       - name: Archive logs
         if: always()
         uses: actions/upload-artifact@v4