Using oidc instead of token for codecov

AmadeusITGroup · Sep 6, 2024 · 3907f84 · 3907f84
1 parent 7899d01
commit 3907f84
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -10,6 +10,10 @@ jobs:
   tests:
     name: Tests
 
+    permissions:
+      id-token: write
+      contents: read
+
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest]
@@ -49,14 +53,14 @@ jobs:
           file: ./coverage/lcov.info
           flags: ut
           disable_search: true
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true
 
       - uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 #v4.5.0
         with:
           file: ./coverage-e2e/lcov.info
           flags: e2e
           disable_search: true
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true
 
       - name: Build API documentation
         run: npm run apidoc