From e34d96a7d4fa535eb9d7f86228a8e9fde00f7080 Mon Sep 17 00:00:00 2001 From: Kyle Date: Sun, 27 Sep 2026 20:46:12 +0800 Subject: [PATCH] Authenticate coverage uploads with GitHub OIDC --- .github/workflows/macos.yml | 5 +++++ .github/workflows/ubuntu.yml | 5 +++++ 2 files changed, 10 insertions(+) diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index 6cd9d2af..c6590c05 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -9,6 +9,9 @@ on: jobs: macos_test: name: Execute tests + permissions: + contents: read + id-token: write strategy: fail-fast: false matrix: @@ -51,4 +54,6 @@ jobs: --build-path .build-test-release - uses: codecov/codecov-action@v7 with: + use_oidc: true + fail_ci_if_error: true verbose: true diff --git a/.github/workflows/ubuntu.yml b/.github/workflows/ubuntu.yml index abcf5a92..6b4a41ce 100644 --- a/.github/workflows/ubuntu.yml +++ b/.github/workflows/ubuntu.yml @@ -9,6 +9,9 @@ on: jobs: ubuntu_test: name: Execute tests on Ubuntu + permissions: + contents: read + id-token: write strategy: fail-fast: false matrix: @@ -52,4 +55,6 @@ jobs: --build-path .build-test-release - uses: codecov/codecov-action@v7 with: + use_oidc: true + fail_ci_if_error: true verbose: true