diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 7375f8789..61a6a44f8 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -11,6 +11,9 @@ on:
 jobs:
   test:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -27,7 +30,7 @@ jobs:
       - name: Install test dependencies
         run: |
           python -m pip install --upgrade pip
-          python -m pip install pytest coverage
+          python -m pip install -e . pytest coverage
       - name: Run tests
         env:
           PYTHONPATH: .
@@ -40,9 +43,10 @@ jobs:
       - name: Emit coverage XML
         run: python -m coverage xml -o coverage.xml
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        if: matrix.python-version == '3.12'
+        uses: codecov/codecov-action@v6
         with:
           files: ./coverage.xml
+          flags: py312
+          use_oidc: true
           fail_ci_if_error: true
diff --git a/README.md b/README.md
index 9cff2946e..1163a2aeb 100644
--- a/README.md
+++ b/README.md
@@ -3,8 +3,8 @@
 Standalone extraction of the Fortran parser used for wrapper-oriented signature
 extraction.
 
-[![Tests](https://github.com/saidctb/x2py/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/saidctb/x2py/actions/workflows/tests.yml)
-[![codecov](https://codecov.io/gh/saidctb/x2py/branch/main/graph/badge.svg)](https://codecov.io/gh/saidctb/x2py)
+[![Tests](https://github.com/PyNumLab/x2py/actions/workflows/tests.yml/badge.svg?branch=main)](https://github.com/PyNumLab/x2py/actions/workflows/tests.yml)
+[![codecov](https://codecov.io/gh/PyNumLab/x2py/branch/main/graph/badge.svg)](https://codecov.io/gh/PyNumLab/x2py)
 
 
 ## What the parser handles