Fix codecov reporting (#348)

.github/workflows/ci.yml

@@ -58,6 +58,8 @@ jobs:
         run: cargo msrv --path crates/web5/ verify
 
   test:
+    permissions:
+      id-token: write
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
@@ -80,8 +82,9 @@ jobs:
           LLVM_PROFILE_FILE: web5-rs-%p-%m.profraw
       - name: Upload test coverage to Codecov
         uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 #v4.5.0
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          use_oidc: true
+          files: '*.profraw'
 
   build_aarch64_apple_darwin:
     runs-on: macos-latest
@@ -96,6 +99,10 @@ jobs:
         run: |
           cd bindings/web5_uniffi/libtargets/aarch64_apple_darwin
           ./build
+          if cargo tree | grep -q ring; then
+            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
+            exit 1
+          fi
       - name: Upload .dylib
         uses: actions/upload-artifact@v4.0.0
         with:
@@ -115,6 +122,10 @@ jobs:
         run: |
           cd bindings/web5_uniffi/libtargets/x86_64_apple_darwin
           ./build
+          if cargo tree | grep -q ring; then
+            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
+            exit 1
+          fi
       - name: Upload .dylib
         uses: actions/upload-artifact@v4.0.0
         with:
@@ -130,6 +141,10 @@ jobs:
         run: |
           cd bindings/web5_uniffi/libtargets/x86_64_unknown_linux_gnu
           ./build
+          if cargo tree | grep -q ring; then
+            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
+            exit 1
+          fi
       - name: Upload .so
         uses: actions/upload-artifact@v4.0.0
         with:
@@ -145,6 +160,10 @@ jobs:
         run: |
           cd bindings/web5_uniffi/libtargets/x86_64_unknown_linux_musl
           ./build
+          if cargo tree | grep -q ring; then
+            echo "::error title=ring library found in compiled binary::The ring library has unclear licensing and we are not sure if it can be put in the compiled binary"
+            exit 1
+          fi
       - name: Upload .so
         uses: actions/upload-artifact@v4.0.0
         with:
@@ -174,6 +193,8 @@ jobs:
           path: bound/kt/src/main/resources/web5_uniffi_x86_64_pc_windows_msvc.dll
 
   kotlin-acceptance-testing:
+    permissions:
+      id-token: write
     needs:
       - build_aarch64_apple_darwin
       - build_x86_64_apple_darwin
@@ -233,8 +254,10 @@ jobs:
           mvn test --batch-mode
       - name: Upload test coverage to Codecov
         uses: codecov/codecov-action@e28ff129e5465c2c0dcc6f003fc735cb6ae0c673 #v4.5.0
-        env:
-          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
+        with:
+          use_oidc: true
+          working-directory: bound/kt
+          files: target/kover/test.ic
 
   kotlin-deploy-snapshot:
     needs: