This is an automated email from the ASF dual-hosted git repository.

hainenber pushed a commit to branch fix/use-oidc-token-for-codecov-auth
in repository https://gitbox.apache.org/repos/asf/superset.git

commit 8cd9b4afcdb6730766ff45e5b700153ab4bd6dc0
Author: hainenber <[email protected]>
AuthorDate: Tue Feb 24 20:15:09 2026 +0700

    fix(ci): use OIDC auth token for successful Codecov upload
    
    Signed-off-by: hainenber <[email protected]>
---
 .github/workflows/superset-frontend.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/superset-frontend.yml 
b/.github/workflows/superset-frontend.yml
index f7953ad9fa8..7415efbea74 100644
--- a/.github/workflows/superset-frontend.yml
+++ b/.github/workflows/superset-frontend.yml
@@ -99,6 +99,8 @@ jobs:
     needs: [sharded-jest-tests]
     if: needs.frontend-build.outputs.should-run == 'true'
     runs-on: ubuntu-24.04
+    permissions:
+      id-token: write
     steps:
       - name: Download Coverage Artifacts
         uses: actions/download-artifact@v7
@@ -116,7 +118,7 @@ jobs:
         uses: codecov/codecov-action@v5
         with:
           flags: javascript
-          token: ${{ secrets.CODECOV_TOKEN }}
+          use_oidc: true
           verbose: true
           files: merged-output/coverage-summary.json
           slug: apache/superset

Reply via email to