diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index d2b876f..3f3e518 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -1,8 +1,3 @@
-## references:
-# cache: https://github.com/actions/cache/blob/main/examples.md#rust---cargo
-# audit: https://github.com/actions-rs/audit-check
-# "needs": https://docs.github.com/en/actions/reference/workflow-syntax-for-github-actions#jobsjob_idneeds
-
 name: Build
 on:
   push:
@@ -16,6 +11,9 @@ on:
       - "**/docs/**"
       - "**.md"
   workflow_call:
+    secrets:
+      CODECOV_TOKEN:
+        required: true
 
 jobs:
   check:
@@ -88,7 +86,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        version: [ 'ubuntu-latest']
+        version: ['ubuntu-latest']
     runs-on: ${{ matrix.version }}
     steps:
       - uses: actions/checkout@v2
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 734fcba..eacf08f 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -9,11 +9,11 @@ on:
       - "**/docs/**"
       - "**.md"
 
-# NOTE: needs to stay in sync with ./build.yml
 jobs:
-  # call out to build.yml
   doing-a-build:
     uses: steganogram/stegano-rs/.github/workflows/build.yml@main
+    secrets:
+      CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
   publish:
     name: post / cargo publish