Use OIDC for codecov

.github/workflows/tox.yml

@@ -33,7 +33,8 @@ jobs:
           platforms: linux,macos
   build:
     name: ${{ matrix.name }}
-    environment: test
+    permissions:
+      id-token: write # codecov
     runs-on: ${{ matrix.os || 'ubuntu-22.04' }}
     needs:
       - prepare
@@ -99,8 +100,8 @@ jobs:
         with:
           name: ${{ matrix.passed_name }}
           fail_ci_if_error: true
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true # optional (default = false)
+          use_oidc: true # cspell:ignore oidc
 
       - name: Archive logs
         uses: actions/upload-artifact@v4