diff --git a/.codecov.yml b/.codecov.yml
index aa664c1024..a3125beb0f 100644
--- a/.codecov.yml
+++ b/.codecov.yml
@@ -3,6 +3,7 @@ codecov:
   notify:
     after_n_builds: 3
     wait_for_ci: yes
+  token: ${{ secrets.CODECOV_TOKEN }}
 
 coverage:
   status:
diff --git a/.github/workflows/test-report.yml b/.github/workflows/test-report.yml
index c9d4fb9bb4..e9dea7b3d2 100644
--- a/.github/workflows/test-report.yml
+++ b/.github/workflows/test-report.yml
@@ -26,14 +26,15 @@ jobs:
   report:
     runs-on: ubuntu-latest
     steps:
-    - name: Download artifacts
-      uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427
-      with:
-        run-id: ${{ github.event.workflow_run.id }}
-        path: test-reports
-    - uses: dorny/test-reporter@c40d89d5e987cd80f3a32b3c233556e22bdca958
-      with:
-        name: 'Tests Report'
-        path: 'test-reports/**/*.xml'
-        reporter: java-junit
-        fail-on-error: false
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+      - name: Download artifacts
+        uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427
+        with:
+          run-id: ${{ github.event.workflow_run.id }}
+          path: test-reports
+      - uses: dorny/test-reporter@c40d89d5e987cd80f3a32b3c233556e22bdca958
+        with:
+          name: 'Tests Report'
+          path: 'test-reports/**/*.xml'
+          reporter: java-junit
+          fail-on-error: false