diff --git a/.github/workflows/ci-tests.yml b/.github/workflows/ci-tests.yml
index b74f69a..3df4651 100644
--- a/.github/workflows/ci-tests.yml
+++ b/.github/workflows/ci-tests.yml
@@ -24,8 +24,17 @@ jobs:
   coverage:
     name: Code Coverage
     strategy:
+      fail-fast: false
       matrix:
-        scala: [2.12.20, 2.13.18]
+        scala: [2.12.20, 2.13.18, 3.3.3]
+        subproject: [core, bigquery, jsonCirce, cassandra, spark, examples]
+        exclude:
+          # Spark is not released for Scala 3.
+          - scala: 3.3.3
+            subproject: spark
+          # Examples only cross-build for Scala 2.
+          - scala: 3.3.3
+            subproject: examples
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -34,13 +43,16 @@ jobs:
         uses: olafurpg/setup-scala@v14
         with:
           java-version: "adopt@1.8"
-      - name: Coverage for Scala 2 (until Scala 3 is available)
-        run: sbt ++${{ matrix.scala }} clean coverage test
+      - name: Coverage for Scala
+        run: sbt ++${{ matrix.scala }} "project ${{ matrix.subproject }}" clean coverage test
       - name: Coverage Report
-        run: sbt ++${{ matrix.scala }} coverageReport
+        run: sbt ++${{ matrix.scala }} "project ${{ matrix.subproject }}" coverageReport
       - name: Codecov
+        # NOTE: uploads stay tokenless until CODECOV_TOKEN is configured
+        # in the repo secrets. Do NOT bump to codecov-action v4/v5
+        # (token required) before that, and do NOT move the upload to a
+        # separate job without passing the coverage files as artifacts.
         uses: codecov/codecov-action@v3
         with:
-          token: ${{ secrets.CODECOV_TOKEN }}
           verbose: false # optional (default = false)
           flags: unittests