Add tox job for write permission

.github/workflows/tox.yml

@@ -270,3 +270,30 @@ jobs:
         with:
           include-hidden-files: true
           delete-merged: true
+
+  tox:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write # Allow GitHub Actions to request OIDC tokens for authentication
+      contents: read # Permission to read repository content
+
+    steps:
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.10"
+
+      - name: Check out the repository
+        uses: actions/checkout@v4
+
+      - name: Install dependencies
+        run: python3 -m pip install tox
+
+      - name: Run Tox
+        run: python3 -m tox
+
+      - name: Upload coverage to Codecov
+        uses: codecov/codecov-action@v4
+        with:
+          fail_ci_if_error: true
+          use_oidc: true