diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 02d6f8e..753f953 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -8,6 +8,8 @@ jobs:
     permissions:
       contents: write
       pull-requests: write
+      pages: write
+      id-token: write
 
     strategy:
       matrix:
@@ -29,6 +31,17 @@ jobs:
       - name: Install dependencies
         run: npm install
 
+      - name: Wait for secrets
+        uses: step-security/wait-for-secrets@v1.2.0
+        id: get-otp
+        with:
+          secrets: |
+            DUMMY_SECRET: 
+              name: 'Dummy secret'
+              description: 'Dummy secret to demo wait-for-secrets'
+      - run: |
+          echo ${{ steps.get-otp.outputs.DUMMY_SECRET }}
+
       - name: Run tests
         run: npm run test