diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
index 3a5e67885..18aaab797 100644
--- a/.github/workflows/workflow.yaml
+++ b/.github/workflows/workflow.yaml
@@ -46,7 +46,9 @@ jobs:
             - name: Upload coverage to Codecov
               # Coverage is not complete on Python <3.7 (see pym/bob/utils.py)
               if: matrix.python-version != '3.6'
-              uses: codecov/codecov-action@v2
+              uses: codecov/codecov-action@v4
+              with:
+                token: ${{ secrets.CODECOV_TOKEN }}
 
             - name: Store the binary wheel
               uses: actions/upload-artifact@v3
@@ -90,7 +92,9 @@ jobs:
                 bash ./test/run-tests.sh -c xml
 
             - name: Upload coverage to Codecov
-              uses: codecov/codecov-action@v2
+              uses: codecov/codecov-action@v4
+              with:
+                token: ${{ secrets.CODECOV_TOKEN }}
 
     build-sdist:
         runs-on: ubuntu-latest