diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 6826f77..6392187 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -131,26 +131,26 @@ jobs:
         # for lots of more discussion
         runs-on: ubuntu-latest
         name: ubuntu / stable / coverage
+        container:
+            image: xd009642/tarpaulin:develop-nightly
+            options: --security-opt seccomp=unconfined
         steps:
-            - uses: actions/checkout@v4
+            - name: Checkout repository
+              uses: actions/checkout@v4
               with:
                   submodules: true
             - name: Install stable
               uses: dtolnay/rust-toolchain@stable
               with:
                   components: llvm-tools-preview
-            - name: cargo install cargo-llvm-cov
-              uses: taiki-e/install-action@cargo-llvm-cov
             - name: cargo generate-lockfile
               if: hashFiles('Cargo.lock') == ''
               run: cargo generate-lockfile
-            - name: cargo llvm-cov
-              run: cargo llvm-cov --locked --all-features --lcov --output-path lcov.info
-            - name: Record Rust version
-              run: echo "RUST=$(rustc --version)" >> "$GITHUB_ENV"
+            - name: Generate code coverage
+              run: |
+                  cargo +nightly tarpaulin --verbose --all-features --workspace --timeout 120 --out xml
             - name: Upload to codecov.io
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v2
               with:
+                  # token: ${{secrets.CODECOV_TOKEN}} # not required for public repos
                   fail_ci_if_error: true
-                  token: ${{ secrets.CODECOV_TOKEN }}
-                  env_vars: OS,RUST