From c1dfdce90f5b5be576144d33a107d67a0afdef1c Mon Sep 17 00:00:00 2001
From: Bob Du <i@bobdu.cc>
Date: Tue, 1 Sep 2026 14:26:33 +0800
Subject: [PATCH] ci(codecov): fix stale comparison base and invalid config

Signed-off-by: Bob Du <i@bobdu.cc>
---
 .github/workflows/gin.yml | 4 ++++
 codecov.yml               | 3 ++-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/gin.yml b/.github/workflows/gin.yml
index 072312dd..a9b208a8 100644
--- a/.github/workflows/gin.yml
+++ b/.github/workflows/gin.yml
@@ -30,6 +30,9 @@ jobs:
           args: --verbose
   test:
     needs: lint
+    permissions:
+      contents: read
+      id-token: write
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
@@ -80,4 +83,5 @@ jobs:
       - name: Upload coverage to Codecov
         uses: codecov/codecov-action@v7
         with:
+          use_oidc: true
           flags: ${{ matrix.os }},go-${{ matrix.go }},${{ matrix.test-tags }}
diff --git a/codecov.yml b/codecov.yml
index 47782e50..f78e4295 100644
--- a/codecov.yml
+++ b/codecov.yml
@@ -1,6 +1,7 @@
-coverage:
+codecov:
   require_ci_to_pass: true
 
+coverage:
   status:
     project:
       default: