diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index e464649..8993386 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -35,6 +35,8 @@ jobs:
     name: Meteor package tests
     # needs: [lint]
     runs-on: ubuntu-latest
+    # allow usage of CODACY / CODECOV tokens
+    environment: coverage
     strategy:
       matrix:
         meteorRelease:
@@ -72,3 +74,4 @@ jobs:
           sed 's/packages\/meteor-coverage\///' someapp/.coverage/lcov.info | codacy-coverage || true # ignore codacy error
         env:
           CODACY_PROJECT_TOKEN: ${{ secrets.CODACY_PROJECT_TOKEN }}
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}