Add permissions to upload coverage report

Author: casibbald

.github/workflows/scan.yml

@@ -13,7 +13,9 @@ on:
 
 permissions:
   contents: write
-  security-events: write # for codeQL to write security events
+  checks: write
+  pull-requests: write
+  security-events: write
 
 jobs:
   fossa:
@@ -100,9 +102,9 @@ jobs:
         run: |
           cargo tarpaulin --out Xml --timeout 240
 
-#      - name: Upload coverage to Codecov
-#        uses: codecov/codecov-action@v3
-#        with:
-#          files: target/tarpaulin/coverage.xml
-#          fail_ci_if_error: true
-#          verbose: true
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v3
+        with:
+          files: target/tarpaulin/coverage.xml
+          fail_ci_if_error: false
+          verbose: true