diff --git a/.github/workflows/unit-tests.yml b/.github/workflows/unit-tests.yml
index 12c35c5..2afb1cd 100644
--- a/.github/workflows/unit-tests.yml
+++ b/.github/workflows/unit-tests.yml
@@ -17,6 +17,7 @@ name: Unit Tests
 on: [push, pull_request]
 
 permissions:
+  id-token: write
   contents: read
 
 jobs:
@@ -40,6 +41,8 @@ jobs:
         uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           files: ./coverage.out
+          flags: unit
+          use_oidc: true
           fail_ci_if_error: false
 
   test-pkcs11:
diff --git a/codecov.yml b/codecov.yml
new file mode 100644
index 0000000..d85a2ec
--- /dev/null
+++ b/codecov.yml
@@ -0,0 +1,15 @@
+coverage:
+  status:
+    project:
+      default:
+        target: auto
+        informational: true
+    patch:
+      default:
+        target: 70%
+        threshold: 5%
+        informational: true
+
+flag_management:
+  default_rules:
+    carryforward: true