Merge pull request #252 from bingenito/codecov-oidc

Update build workflow to enable OIDC for Codecov

Author: bingenito

.github/workflows/build.yml

@@ -8,8 +8,10 @@ permissions:
 
 jobs:
   build:
-
     runs-on: windows-latest
+    permissions:
+      contents: read
+      id-token: write    
 
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
@@ -55,5 +57,5 @@ jobs:
 
     - name: Codecov
       uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1
-      env:
-        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      with:
+        use_oidc: true

.github/workflows/continuous-integration.yml

@@ -11,4 +11,8 @@ permissions:
 
 jobs:
   build:
+    permissions:
+      contents: read
+      id-token: write
+
     uses: ./.github/workflows/build.yml