diff --git a/.github/workflows/build-and-test.yaml b/.github/workflows/build-and-test.yaml
index b519c2403..e3dc094b7 100644
--- a/.github/workflows/build-and-test.yaml
+++ b/.github/workflows/build-and-test.yaml
@@ -48,6 +48,8 @@ jobs:
           GOPROXY="https://proxy.golang.org,direct" make go.test.coverage
       - name: Upload coverage to Codecov
         uses: codecov/codecov-action@v4
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
           fail_ci_if_error: false
           files: ./coverage.xml
diff --git a/.github/workflows/wasm-plugin-unit-test.yml b/.github/workflows/wasm-plugin-unit-test.yml
index 6514a7387..059e1e081 100644
--- a/.github/workflows/wasm-plugin-unit-test.yml
+++ b/.github/workflows/wasm-plugin-unit-test.yml
@@ -180,6 +180,8 @@ jobs:
     - name: Upload coverage to Codecov for ${{ matrix.plugin }}
       uses: codecov/codecov-action@v4
       if: always()
+      env:
+        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
       with:
         file: plugins/wasm-go/extensions/${{ matrix.plugin }}/coverage-${{ matrix.plugin }}.out
         flags: wasm-go-plugin-${{ matrix.plugin }}