From fb2bbd8e053116415a644d2819cb5904cb114ebf Mon Sep 17 00:00:00 2001
From: Sorin Sbarnea <ssbarnea@redhat.com>
Date: Wed, 22 May 2024 11:03:33 +0100
Subject: [PATCH] Use OIDC authentication for codecov upload

AAP-24264
---
 .github/workflows/tox.yml | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/tox.yml b/.github/workflows/tox.yml
index b16a65e..beb916d 100644
--- a/.github/workflows/tox.yml
+++ b/.github/workflows/tox.yml
@@ -40,7 +40,8 @@ jobs:
   build:
     name: ${{ matrix.name }}
     runs-on: ${{ matrix.os || 'ubuntu-22.04' }}
-    environment: test
+    permissions:
+      id-token: write
     needs:
       - prepare
     defaults:
@@ -92,9 +93,9 @@ jobs:
         uses: codecov/codecov-action@v4
         with:
           name: ${{ matrix.passed_name }}
-          token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
           verbose: true # optional (default = false)
+          use_oidc: true # cspell:ignore oidc
 
       - name: Archive logs
         uses: actions/upload-artifact@v4