diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b37e7f00..1ec7e851 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,6 +42,9 @@ jobs:
       if: success() || failure()
 
   test:
+    permissions:
+      issues: write
+      pull-requests: write
     runs-on: ubuntu-latest
     strategy:
       matrix:
@@ -70,3 +73,9 @@ jobs:
         coverage report
         coverage xml
       if: success() || failure()
+
+    - name: Publish coverage report
+      uses: orgoro/coverage@v3
+      with:
+        coverageFile: coverage.xml
+        token: ${{ secrets.GITHUB_TOKEN }}