CI: Use OIDC token for codecov uploading (#3163)

Author: seisman

.github/workflows/ci_tests.yaml

@@ -49,6 +49,8 @@ jobs:
   test:
     name: ${{ matrix.os }} - Python ${{ matrix.python-version }} / NumPy ${{ matrix.numpy-version }}
     runs-on: ${{ matrix.os }}
+    permissions:
+      id-token: write  # This is required for requesting OIDC token for codecov
     strategy:
       fail-fast: false
       matrix:
@@ -161,7 +163,7 @@ jobs:
       - name: Upload coverage to Codecov
         uses: codecov/[email protected]
         with:
+          use_oidc: true
           file: ./coverage.xml # optional
           env_vars: OS,PYTHON,NUMPY
           fail_ci_if_error: false
-          token: ${{ secrets.CODECOV_TOKEN }}