From 5ff542c27641d0626c0b74d6eb55c3b0bb5701b8 Mon Sep 17 00:00:00 2001
From: Tim Monko <timmonko@gmail.com>
Date: Mon, 1 Dec 2025 22:02:47 -0600
Subject: [PATCH] oidc for codecov

---
 .github/workflows/test_and_deploy.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.github/workflows/test_and_deploy.yml b/.github/workflows/test_and_deploy.yml
index 11db932..95126c7 100644
--- a/.github/workflows/test_and_deploy.yml
+++ b/.github/workflows/test_and_deploy.yml
@@ -24,6 +24,8 @@ jobs:
     name: ${{ matrix.platform }} py${{ matrix.python-version }}
     runs-on: ${{ matrix.platform }}
     timeout-minutes: 30
+    permissions:
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -65,6 +67,8 @@ jobs:
 
       - name: Coverage
         uses: codecov/codecov-action@v5
+        with:
+          use_oidc: true
 
   deploy:
     # this will run when you have tagged a commit, starting with "v*"