build: update codecov action to use repo-specific tokens #1406

	name: Python CI

	on:
	push:
	branches: [master]
	pull_request:
	branches:
	- '**'


	jobs:
	run_tests:
	name: tests
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ubuntu-20.04]
	python-version: ['3.8']
	toxenv: [quality, docs, pii_check, django32, django42]
	permissions:
	# Gives the action the necessary permissions for publishing new
	# comments in pull requests.
	pull-requests: write
	# Gives the action the necessary permissions for pushing data to the
	# python-coverage-comment-action branch, and for editing existing
	# comments (to avoid publishing multiple comments in the same PR)
	contents: write

	steps:
	- uses: actions/checkout@v4
	- name: setup python
	uses: actions/setup-python@v5
	with:
	python-version: ${{ matrix.python-version }}

	- name: Install pip
	run: pip install -r requirements/pip.txt

	- name: Install Dependencies
	run: pip install -r requirements/ci.txt

	- name: Run Tests
	env:
	TOXENV: ${{ matrix.toxenv }}
	run: tox

	- name: Run Coverage
	if: matrix.python-version == '3.8' && matrix.toxenv=='django42'
	uses: codecov/codecov-action@v4
	with:
	flags: unittests
	fail_ci_if_error: true
	token: ${{ secrets.CODECOV_TOKEN }}

Provide feedback