From fdaeaec5e82213cff68f719ed7147a4ce4e6cd79 Mon Sep 17 00:00:00 2001
From: everoddandeven <everoddandeven@protonmail.com>
Date: Sun, 25 Oct 2026 13:01:18 +0100
Subject: [PATCH] ci: download codacy coverage artifact with GITHUB_TOKEN
 instead of a PAT

---
 .github/workflows/codacy.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml
index 0290cc0..be5f58a 100644
--- a/.github/workflows/codacy.yml
+++ b/.github/workflows/codacy.yml
@@ -10,6 +10,8 @@ on:
 
 permissions:
   contents: read
+  # needed to download the artifact of the Tests run with the default GITHUB_TOKEN
+  actions: read
 
 jobs:
   report-coverage-linux:
@@ -31,7 +33,6 @@ jobs:
         uses: actions/download-artifact@v4
         with:
           name: coverage-reports-linux
-          github-token: ${{ secrets.API_GITHUB }}
           run-id: ${{ github.event.workflow_run.id }}
 
       - name: Report python coverage