diff --git a/.github/workflows/gin.yml b/.github/workflows/gin.yml
index 072312dd..a9b208a8 100644
--- a/.github/workflows/gin.yml
+++ b/.github/workflows/gin.yml
@@ -30,6 +30,9 @@ jobs:
           args: --verbose
   test:
     needs: lint
+    permissions:
+      contents: read
+      id-token: write
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
@@ -80,4 +83,5 @@ jobs:
       - name: Upload coverage to Codecov
         uses: codecov/codecov-action@v7
         with:
+          use_oidc: true
           flags: ${{ matrix.os }},go-${{ matrix.go }},${{ matrix.test-tags }}
diff --git a/codecov.yml b/codecov.yml
index 47782e50..f78e4295 100644
--- a/codecov.yml
+++ b/codecov.yml
@@ -1,6 +1,7 @@
-coverage:
+codecov:
   require_ci_to_pass: true
 
+coverage:
   status:
     project:
       default: