diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6194883..994c2ad 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -8,6 +8,9 @@ jobs:
   test:
     name: Node.js ${{ matrix.node-version }}
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     strategy:
       matrix:
         node-version:
@@ -24,3 +27,4 @@ jobs:
       - uses: codecov/codecov-action@v4
         with:
           name: Node.js ${{ matrix.node-version }}
+          use_oidc: true
diff --git a/README.md b/README.md
index 40fbc76..c691137 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@
 [![NPM Downloads][npm-downloads-image]][npm-url]
 [![Node.js Version][node-image]][node-url]
 [![Build Status][ci-image]][ci-url]
-[![Coverage Status][coveralls-image]][coveralls-url]
+[![Coverage Status][coverage-image]][coverage-url]
 
 Basic HTTP cookie parser and serializer for HTTP servers.
 
@@ -255,8 +255,8 @@ npm run bench
 
 [ci-image]: https://badgen.net/github/checks/jshttp/cookie/master?label=ci
 [ci-url]: https://github.com/jshttp/cookie/actions/workflows/ci.yml
-[coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/cookie/master
-[coveralls-url]: https://coveralls.io/r/jshttp/cookie?branch=master
+[coverage-image]: https://badgen.net/codecov/c/github/jshttp/cookie/master
+[coverage-url]: https://app.codecov.io/gh/jshttp/cookie
 [node-image]: https://badgen.net/npm/node/cookie
 [node-url]: https://nodejs.org/en/download
 [npm-downloads-image]: https://badgen.net/npm/dm/cookie