diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 5d50e3f..9cf739d 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -9,6 +9,9 @@ on:
 
 jobs:
   call-test-workflow:
+    permissions:
+      contents: read
+      id-token: write
     uses: openbraininstitute/BluePyOpt/.github/workflows/test.yml@master
   
   build-tag-n-publish:
diff --git a/.github/workflows/keep-alive.yml b/.github/workflows/keep-alive.yml
index a600ac2..1c63fc8 100644
--- a/.github/workflows/keep-alive.yml
+++ b/.github/workflows/keep-alive.yml
@@ -7,6 +7,9 @@ on:
 
 jobs:
   call-test-workflow:
+    permissions:
+      contents: read
+      id-token: write
     uses: openbraininstitute/BluePyOpt/.github/workflows/test.yml@master
   
   keep-workflow-alive:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 5358f07..540ba58 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -5,6 +5,10 @@ on:
   # allows this workflow to be reusable (e.g. by the build workflow)
   workflow_call:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   test:
     name: Test for python ${{ matrix.python-version }} on ${{ matrix.os }}
@@ -36,7 +40,8 @@ jobs:
       run: tox
 
     - name: "Upload coverage to Codecov"
+      if: matrix.python-version != '3.14'
       uses: codecov/codecov-action@v6
       with:
-        token: ${{ secrets.CODECOV_TOKEN }}
-        fail_ci_if_error: false
+        use_oidc: true
+        fail_ci_if_error: true
diff --git a/README.rst b/README.rst
index c732eb7..eb831b8 100644
--- a/README.rst
+++ b/README.rst
@@ -206,11 +206,11 @@ Copyright (c) 2025 Open Brain Institute
                   :target: https://github.com/openbraininstitute/bluepyopt/blob/master/LICENSE.txt
                   :alt: license
 
-.. |build| image:: https://github.com/openbraininstitute/BluePyOpt/workflows/Build/badge.svg?branch=master
+.. |build| image:: https://github.com/openbraininstitute/BluePyOpt/actions/workflows/build.yml/badge.svg?branch=master
                 :target: https://github.com/openbraininstitute/BluePyOpt/actions
                 :alt: actions build status
 
-.. |coverage| image:: https://codecov.io/github/openbraininstitute/BluePyOpt/coverage.svg?branch=master
+.. |coverage| image:: https://codecov.io/gh/openbraininstitute/bluepyopt/branch/master/graph/badge.svg
                    :target: https://codecov.io/gh/openbraininstitute/bluepyopt
                    :alt: coverage
 
diff --git a/docs/source/_static/bbp.jpg b/docs/source/_static/bbp.jpg
deleted file mode 100644
index 08290e0..0000000
Binary files a/docs/source/_static/bbp.jpg and /dev/null differ
diff --git a/docs/source/conf.py b/docs/source/conf.py
index ab1da37..e0b848a 100644
--- a/docs/source/conf.py
+++ b/docs/source/conf.py
@@ -124,10 +124,6 @@
 # A shorter title for the navigation bar.  Default is the same as html_title.
 #html_short_title = None
 
-# The name of an image file (relative to this directory) to place at the top
-# of the sidebar.
-html_logo = "_static/bbp.jpg"
-
 # The name of an image file (within the static path) to use as favicon of the
 # docs.  This file should be a Windows icon file (.ico) being 16x16 or 32x32
 # pixels large.