diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index b1858b5..469ff17 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -45,3 +45,27 @@ jobs:
 
     # Use GitHub's Linux Docker host
     runs-on: ubuntu-latest
+
+  coverage:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install RPM
+        run: sudo apt-get install -y rpm libkrb5-dev
+      - name: Setup Python
+        uses: actions/setup-python@v2
+        with:
+          python-version: 3.9
+      - name: Install Tox
+        run: pip install tox
+      - name: Run Tox
+        run: tox -e py39-django3-cov
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v5
+        with:
+          use_oidc: true
+          flags: unit-tests
+          files: coverage.xml
+          fail_ci_if_error: false
diff --git a/README.md b/README.md
index 8bceb77..fcb67bb 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@ kobo
 A collection of Python utilities.
 
 [![Build Status](https://travis-ci.org/release-engineering/kobo.svg?branch=master)](https://travis-ci.org/release-engineering/kobo)
-[![Coverage Status](https://coveralls.io/repos/github/release-engineering/kobo/badge.svg?branch=master)](https://coveralls.io/github/release-engineering/kobo?branch=master)
+[![Coverage Status](https://app.codecov.io/gh/release-engineering/kobo)](https://app.codecov.io/gh/release-engineering/kobo)
 
 
 Development
diff --git a/tox.ini b/tox.ini
index 9133124..942066e 100644
--- a/tox.ini
+++ b/tox.ini
@@ -16,15 +16,12 @@ deps =
 sitepackages = True
 
 [testenv:py39-django3-cov]
-passenv = GITHUB_*
 deps=
     {[testenv]deps}
     pytest-cov
-    coveralls
 usedevelop=true
 commands=
-    pytest --cov=kobo {posargs}
-    coveralls
+    pytest --cov=kobo --cov-report=xml {posargs}
 # for testing with python-rpm
 sitepackages = True