diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index 75b4e54..ebd56f3 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -1,5 +1,7 @@
 name: Fetch and upload coverage
 
+permissions:
+  id-token: write
 on:
   push:
     branches: [main]
@@ -27,5 +29,7 @@ jobs:
         run: make coverage
       - name: Upload coverage reports to Codecov with GitHub Action
         uses: codecov/codecov-action@v7
+        with:
+          use_oidc: true
         env:
           fail_ci_if_error: true