diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml
index 40079ca..15058b0 100644
--- a/.github/workflows/main.yaml
+++ b/.github/workflows/main.yaml
@@ -85,3 +85,9 @@ jobs:
         files: ./coverage/lcov.info
         fail_ci_if_error: true
         token: ${{ secrets.CODECOV_TOKEN }}
+        # Works around intermittent "Can't check signature: No public key"
+        # failures on the action's default GPG-verified CLI download (see
+        # codecov/codecov-action#1955 for the same class of issue). Installs
+        # the CLI from PyPI instead, which skips that verification -- an
+        # availability fix, not a security-neutral one.
+        use_pypi: true