diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
index 64225cc134..4b4a3fae51 100644
--- a/.github/workflows/backend.yml
+++ b/.github/workflows/backend.yml
@@ -78,6 +78,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.github.com:443
+            cli.codecov.io:443
             codecov.io:443
             github.com:443
             storage.googleapis.com:443
@@ -91,6 +92,7 @@ jobs:
       - name: Upload coverage report
         uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
           files: coverage.cobertura.xml
           flags: backend
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
index 17a6d59ac7..8237e1f230 100644
--- a/.github/workflows/frontend.yml
+++ b/.github/workflows/frontend.yml
@@ -88,6 +88,7 @@ jobs:
           egress-policy: block
           allowed-endpoints: >
             api.github.com:443
+            cli.codecov.io:443
             codecov.io:443
             github.com:443
             storage.googleapis.com:443
@@ -101,6 +102,7 @@ jobs:
       - name: Upload coverage report
         uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
         with:
+          token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
           files: cobertura-coverage.xml
           flags: frontend