diff --git a/.github/workflows/acceptance-workflow.yml b/.github/workflows/acceptance-workflow.yml
index d64929d4b..3099d5881 100644
--- a/.github/workflows/acceptance-workflow.yml
+++ b/.github/workflows/acceptance-workflow.yml
@@ -34,6 +34,10 @@ on:
       operator_key:
         description: 'The ED25519, ECDSA, or DER encoded private key of the operator'
         required: false
+      CODECOV_TOKEN:
+        description: 'Codecov upload token'
+        required: true
+
 
 env:
   OPERATOR_ID_MAIN: ${{ inputs.operator_id }}
@@ -42,9 +46,9 @@ jobs:
   acceptance-workflow:
     runs-on: smart-contracts-linux-large
     timeout-minutes: 50
-    permissions: write-all
-    #   contents: read
-    #   checks: write
+    permissions:
+      contents: read
+      checks: write
     env:
       OPERATOR_ID_MAIN: ${{ inputs.operator_id }}
     steps:
diff --git a/.github/workflows/acceptance.yml b/.github/workflows/acceptance.yml
index 784878113..39277d03e 100644
--- a/.github/workflows/acceptance.yml
+++ b/.github/workflows/acceptance.yml
@@ -17,6 +17,8 @@ jobs:
     uses: ./.github/workflows/acceptance-workflow.yml
     with:
       testfilter: api_batch1
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   api_batch_2:
     name: API Batch 2