diff --git a/.github/workflows/sipa-ci .yml b/.github/workflows/sipa-ci.yml
similarity index 85%
rename from .github/workflows/sipa-ci .yml
rename to .github/workflows/sipa-ci.yml
index 427fc562..ad37c0ec 100644
--- a/.github/workflows/sipa-ci .yml	
+++ b/.github/workflows/sipa-ci.yml
@@ -34,6 +34,8 @@ jobs:
         run: docker push registry.agdsn.de/agdsn/coreos/sipa/sipa:${GITHUB_REF##*/}
   test:
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: Check out sipa and submodules
         uses: actions/checkout@v3
@@ -58,8 +60,17 @@ jobs:
         run: >
           pytest
           --junitxml=junit/test-results.xml
+          --cov --cov-report=xml:cov/cov-results.xml
       - name: Publish Test Report
         uses: mikepenz/action-junit-report@v3
         if: always() # always run even if the previous step fails
         with:
           report_paths: 'junit/test-*.xml'
+          annotate_only: true
+      - name: Upload results to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          disable_search: true
+          files: ./cov/cov-results.xml
+          use_oidc: true
+          verbose: true
diff --git a/build/requirements/requirements_testing.txt b/build/requirements/requirements_testing.txt
index d8f233e9..d23ebcb5 100644
--- a/build/requirements/requirements_testing.txt
+++ b/build/requirements/requirements_testing.txt
@@ -5,4 +5,5 @@ pycodestyle~=2.4.0
 mypy~=0.960
 sphinx~=1.8.4
 pytest~=7.4.3
+pytest-cov~=2.10.1
 time_machine~=2.13.0