diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d4d73f4b7..eca7b76e4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -25,6 +25,8 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Required for codecov.io
     strategy:
       matrix:
         go-version: ['1.22']
@@ -53,6 +55,7 @@ jobs:
       - name: Check Version
         run: bin/linux/amd64/oras version
       - name: Upload coverage to codecov.io
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
         with:
           fail_ci_if_error: true
+          use_oidc: true