diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 9e13158c..0d81befd 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,5 +1,9 @@
+---
 name: Workflow for Codecov example-python
-on: [push, pull_request]
+on: [push, pull_request, pull_request_target]
+permissions:
+  id-token: write # This is required for requesting the JWT
+  contents: read
 jobs:
   run:
     runs-on: ubuntu-latest
@@ -14,9 +18,13 @@ jobs:
         run: pip install -r requirements.txt
       - name: Run tests and collect coverage
         run: pytest --cov app
-      - name: Upload coverage to Codecov
+      - name: Upload coverage to Codecov (token)
         uses: codecov/codecov-action@v5
         with:
           verbose: true
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+      - name: Upload coverage to Codecov (no token)
+        uses: codecov/codecov-action@v5
+        with:
+          verbose: true