diff --git a/.github/workflows/codecov-upload.yml b/.github/workflows/codecov-upload.yml
index 1a66075bde6fc..077383707481e 100644
--- a/.github/workflows/codecov-upload.yml
+++ b/.github/workflows/codecov-upload.yml
@@ -9,6 +9,7 @@ on:
 permissions:
   contents: write
   id-token: write
+  actions: read
 
 jobs:
   upload:
@@ -24,6 +25,7 @@ jobs:
         with:
           name: coverage-artifacts
           path: ./coverage
+          github-token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.repository }}
           run-id: ${{ github.event.workflow_run.id }}