diff --git a/.github/workflows/codecov-upload.yml b/.github/workflows/codecov-upload.yml
index 1a66075bde6fc..e3f64258c877b 100644
--- a/.github/workflows/codecov-upload.yml
+++ b/.github/workflows/codecov-upload.yml
@@ -9,6 +9,7 @@ on:
 permissions:
   contents: write
   id-token: write
+  actions: read
 
 jobs:
   upload:
@@ -19,11 +20,17 @@ jobs:
       github.event.workflow_run.conclusion == 'success'
 
     steps:
+      - name: Debug 
+        run: |
+            echo "workflow run id: ${{ github.event.workflow_run.id }}
+            echo '${{ toJSON(github.event.workflow_run) }}'
+      
       - name: Download Artifacts
         uses: actions/download-artifact@v4
         with:
           name: coverage-artifacts
           path: ./coverage
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.repository }}
           run-id: ${{ github.event.workflow_run.id }}