diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
index 888f0bd8..8d3e4b6e 100644
--- a/.github/CODEOWNERS
+++ b/.github/CODEOWNERS
@@ -6,4 +6,8 @@
 # These owners will be the default owners for everything in
 # the repo. Unless a later match takes precedence,
 # review when someone opens a pull request.
-*       @keikoproj/authorized-approvers @keikoproj/instance-manager-approvers
\ No newline at end of file
+*       @keikoproj/authorized-approvers @keikoproj/instance-manager-approvers
+
+# Admins own root and CI.
+.github/** @keikoproj/keiko-admins @keikoproj/keiko-maintainers
+/*     @keikoproj/keiko-admins @keikoproj/keiko-maintainers
diff --git a/.github/workflows/unit-test.yml b/.github/workflows/unit-test.yml
index e235d0d2..8a41c3a4 100644
--- a/.github/workflows/unit-test.yml
+++ b/.github/workflows/unit-test.yml
@@ -37,5 +37,7 @@ jobs:
         make test
     - name: Upload to Codecov
       uses: codecov/codecov-action@v4
+      env:
+        CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
       with:
         file: ./coverage.txt