diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b36c2303..2eddf452 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -91,7 +91,10 @@ jobs:
           path: pytest.xml
 
       - name: Upload code coverage to Codecov
+        if: github.repository == 'NCAR/geocat-comp'
         uses: codecov/codecov-action@v4.1.0
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
           file: ./coverage.xml
           env_vars: OS,PYTHON
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 2160398f..113be821 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -19,6 +19,7 @@ Internal Changes
 * Python 3.12 Support by `Cora Schneck`_ in (:pr:`548`)
 * Temporarily pin ASV to ``<0.6.2`` by `Anissa Zacharias`_ in (:pr:`556`)
 * Added ``linkcheck_ignore`` to ``docs/conf.py`` to address erroneous failures `Anissa Zacharias`_ in (:pr:`559`)
+* Updated Codecov upload to use token by `Anissa Zacharias`_ in (:pr:`566`)
 * Convert to implicit namespace packaging set up by `Anissa Zacharias`_ in (:pr:`563`)