diff --git a/.github/workflows/build-go.yaml b/.github/workflows/build-go.yaml
index fd51746..3c786eb 100644
--- a/.github/workflows/build-go.yaml
+++ b/.github/workflows/build-go.yaml
@@ -36,9 +36,9 @@ jobs:
         run: |
           make
 
-      - uses: PaloAltoNetworks/cov@2.0.0
-        if: ${{matrix.go == 1.20}}
+      - uses: PaloAltoNetworks/cov@3.0.0
         with:
           main_branch: master
           cov_file: unit_coverage.out
           cov_threshold: "69"
+          cov_mode: coverage
diff --git a/.github/workflows/cov.yaml b/.github/workflows/cov.yaml
new file mode 100644
index 0000000..47db9a7
--- /dev/null
+++ b/.github/workflows/cov.yaml
@@ -0,0 +1,17 @@
+name: cov
+
+on:
+  workflow_run:
+    workflows: ["build-go"]
+    types:
+      - completed
+
+jobs:
+  cov:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: PaloAltoNetworks/cov@3.0.0
+        with:
+          cov_mode: send-status
+          workflow_run_id: ${{github.event.workflow_run.id}}
+          workflow_head_sha: ${{github.event.workflow_run.head_sha}}
diff --git a/.gitignore b/.gitignore
index d6f559d..c7fb354 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,6 +10,7 @@ Gopkg.lock
 cmd/rego/rego
 
 unit_coverage.out
+cov.report
 artifacts
 
 for p in *.spec ; do