diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
index a2f7aad796..f8ec9555cb 100644
--- a/.github/workflows/coverage.yml
+++ b/.github/workflows/coverage.yml
@@ -1,6 +1,9 @@
 name: Coverage
 
-on: [push, pull_request]
+# Don't run this workflow on push trigger, because it requires
+# a token, which we don't have and can't generate.
+# Long term solution is to switch to a different tool, ref. #1465
+on: [pull_request]
 
 permissions:
   contents: read