This is an automated email from the ASF dual-hosted git repository. hainenber pushed a commit to branch fix/use-oidc-token-for-codecov-auth in repository https://gitbox.apache.org/repos/asf/superset.git
commit 8cd9b4afcdb6730766ff45e5b700153ab4bd6dc0 Author: hainenber <[email protected]> AuthorDate: Tue Feb 24 20:15:09 2026 +0700 fix(ci): use OIDC auth token for successful Codecov upload Signed-off-by: hainenber <[email protected]> --- .github/workflows/superset-frontend.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/superset-frontend.yml b/.github/workflows/superset-frontend.yml index f7953ad9fa8..7415efbea74 100644 --- a/.github/workflows/superset-frontend.yml +++ b/.github/workflows/superset-frontend.yml @@ -99,6 +99,8 @@ jobs: needs: [sharded-jest-tests] if: needs.frontend-build.outputs.should-run == 'true' runs-on: ubuntu-24.04 + permissions: + id-token: write steps: - name: Download Coverage Artifacts uses: actions/download-artifact@v7 @@ -116,7 +118,7 @@ jobs: uses: codecov/codecov-action@v5 with: flags: javascript - token: ${{ secrets.CODECOV_TOKEN }} + use_oidc: true verbose: true files: merged-output/coverage-summary.json slug: apache/superset
