diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 0be2d73..94e52ce 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -9,6 +9,8 @@ on:
 jobs:
   standard-ci:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
 
     steps:
       - uses: actions/checkout@v2
@@ -29,7 +31,15 @@ jobs:
         env:
           GITHUB_TOKEN: ${{ github.token }}
         run: tox -e cov-ci
-    
+
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          use_oidc: true
+          flags: unit-tests
+          files: coverage.xml
+          fail_ci_if_error: false
+
       - name: Run static analysis
         run: tox -e static
 
diff --git a/test-requirements.txt b/test-requirements.txt
index 096f1ce..22e8b48 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -7,7 +7,6 @@ frozenlist2
 mypy; python_version > "3.0"
 black; python_version > "3.0"
 pylint; python_version > "3.0"
-coveralls; python_version > "3.0"
 sphinx; python_version > "3.0"
 sphinx-argparse; python_version > "3.0"
 alabaster; python_version > "3.0"
diff --git a/tox.ini b/tox.ini
index ebd60f7..829c4be 100644
--- a/tox.ini
+++ b/tox.ini
@@ -23,8 +23,7 @@ commands=
 passenv=GITHUB_*
 usedevelop=true
 commands=
-	pytest --cov=pubtools.exodus {posargs}
-	coveralls --service=github
+	pytest --cov=pubtools.exodus --cov-report=xml {posargs}
 
 [testenv:docs]
 use_develop=true