diff --git a/.github/workflows/ruby.yml b/.github/workflows/ruby.yml
index 2a526f7..3dbf4fe 100644
--- a/.github/workflows/ruby.yml
+++ b/.github/workflows/ruby.yml
@@ -15,13 +15,17 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        os: [ubuntu-20.04]
+        os: [ubuntu-24.04]
         ruby: [ '3.2.0' ]
     runs-on: ${{ matrix.os }}
     continue-on-error: ${{ endsWith(matrix.ruby, 'head') || matrix.ruby == 'debug' }}
     
+    permissions:
+      contents: read
+      id-token: write # Required for OIDC
+    
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}
@@ -44,7 +48,6 @@ jobs:
           RAILS_ENV: test
           COVERAGE: true
           DISABLE_SPRING: 1
-          CC_TEST_REPORTER_ID: ${{ secrets.CC_TEST_REPORTER_ID }}
         run: |
           cp config/application.yml.example config/application.yml
           cp config/database_ci.yml config/database.yml
@@ -55,7 +58,12 @@ jobs:
           bundle exec rails assets:precompile
           bundle exec rspec spec
 
+      # Upload coverage to Qlty
+      - uses: qltysh/qlty-action/coverage@v2
+        with:
+          oidc: true
+          files: coverage/lcov.info
+
       - name: Dependabot
         if: ${{ github.event.label.name == 'dependencies' }}
         run: bundle exec rails assets:precompile
-