diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 902ea7a1..23f2fcf9 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -26,6 +26,9 @@ on:
         type: boolean
         description: 'Should slow tests be run?'
         default: true
+    secrets:
+      codecov_token:
+        required: true
 
 jobs:
   build:
@@ -100,7 +103,7 @@ jobs:
       - name: Upload code coverage
         uses: codecov/codecov-action@v4
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          token: ${{ secrets.codecov_token }}
       - name: Upload artifacts
         uses: actions/upload-artifact@v3
         if: ${{ matrix.privilege-level == 'priv' }}
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 4dee7251..3b8c59b3 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -13,7 +13,11 @@ jobs:
     uses: ./.github/workflows/build.yaml
     with:
       slow-test: false
+    secrets:
+      codecov_token: ${{ secrets.CODECOV_TOKEN }}
   coverage:
     uses: ./.github/workflows/coverage.yaml
     with:
       slow-test: false
+    secrets:
+      codecov_token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/.github/workflows/coverage.yaml b/.github/workflows/coverage.yaml
index 1426c0da..9820da14 100644
--- a/.github/workflows/coverage.yaml
+++ b/.github/workflows/coverage.yaml
@@ -26,6 +26,9 @@ on:
         type: boolean
         description: 'Should slow tests be run?'
         default: true
+    secrets:
+      codecov_token:
+        required: true
 
 jobs:
   build:
@@ -97,7 +100,7 @@ jobs:
       - name: Upload code coverage
         uses: codecov/codecov-action@v4
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
+          token: ${{ secrets.codecov_token }}
           files: coverage-${{ matrix.privilege-level}}.txt
       - name: Upload artifacts
         uses: actions/upload-artifact@v3