From 971e1e1bc463d165c7b63b062674e5ac2b29a11f Mon Sep 17 00:00:00 2001
From: Michael Moll <kvedulv@kvedulv.de>
Date: Sun, 26 Jan 2025 19:04:49 +0100
Subject: [PATCH] Use secret token for Codecov upload

---
 .github/workflows/ci.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 43d0140..4e11d3a 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -102,9 +102,10 @@ jobs:
         if: ${{ matrix.os == 'windows-latest' }}
         run: vendor/bin/phan --allow-polyfill-parser
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v5
         with:
           verbose: true
+          token: ${{ secrets.CODECOV_TOKEN }}
 
   slack-notify:
     needs: [run-tests, style-checks]