Use OIDC authentication for codecov upload (#178)

AAP-24264
ansible · May 22, 2024 · eb5dc30 · eb5dc30
1 parent cb3650d
commit eb5dc30
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
@@ -44,7 +44,8 @@ jobs:
       matrix: ${{ fromJson(needs.pre.outputs.matrix) }}
     env:
       FORCE_COLOR: 1
-    environment: test
+    permissions:
+      id-token: write
     steps:
       - name: Check out src from Git
         uses: actions/checkout@v4
@@ -89,9 +90,9 @@ jobs:
         uses: codecov/codecov-action@v4
         with:
           name: ${{ matrix.name }}
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true
-          fail_ci_if_error: false
+          fail_ci_if_error: true
+          use_oidc: true # cspell:ignore oidc
 
   check: # This job does nothing and is only used for the branch protection
     if: always()