diff --git a/.github/workflows/ci-build.yml b/.github/workflows/ci-build.yml
index 9ef9b377..0f5392bd 100644
--- a/.github/workflows/ci-build.yml
+++ b/.github/workflows/ci-build.yml
@@ -6,9 +6,17 @@ on:
   pull_request:
     branches: [ main ]
 
+# Needed so the reusable workflow can optionally delete the temp per-OS artifacts it creates.
+permissions:
+  contents: read
+  actions: write
+
 jobs:
   build:
     uses: reactiveui/actions-common/.github/workflows/workflow-common-setup-and-build.yml@main
     with:
       configuration: Release
       productNamespacePrefix: "ReactiveUI.Validation"
+      installWorkloads: true
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}