We used to use codecov.io on https://github.com/oamg/convert2rhel, and there we had a problem that at some point, codecov started to ask us to authenticate with a token to keep publishing results there.

If I'm not wrong, submitting results without token only allowed you to push a couple of requests. That was a major problem because we were working on a fork-based strategy in that repo, which means that we couldn't expose the token in GitHub actions for forks (at least, not without making the pipeline unsecure)

With that said, probably things have changed from that time to now, but in any case, it is good to investigate if that is still happening.

I wanted to take the issue, but it is indeed true, token is required for protected branches (according to this https://docs.codecov.com/docs/codecov-tokens ) and since https://github.com/road-core/service/blob/main/CONTRIBUTING.md#tldr suggests to use fork most probably condition is needed, I did try it in #69 but since I don't have access I need approval to run the workflows and see if it works (not really great for testing). I can leave the issue to someone else to finish if I can't have the access :)