name: Codecov permissions: read-all on: [push, pull_request] jobs: build: - name: Upload coverage reports to Codecov uses: codecov/codecov-action@v3 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}