From 304a6444d7f208926d2c6ec081ab6fd8ebf6575d Mon Sep 17 00:00:00 2001 From: Byron Mayne Date: Tue, 7 Jul 2026 22:30:04 -0400 Subject: [PATCH] Updated the CI to use trusted publishing for NuGet --- .github/workflows/publish.yml | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 902eff6..1f66c8b 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -28,12 +28,18 @@ jobs: uses: ByronMayne/Shared.Actions/build_csharp@1.0.7 with: publish: false - configuration: ${{ env.configuration }} + configuration: ${{ env.Configuration }} solutionOrProjectPath: ./src/${{ matrix.project.name }}/${{ matrix.project.name }}.csproj + # Get a short-lived NuGet API key + - name: NuGet login (OIDC → temp API key) + uses: NuGet/login@v1 + id: login + with: + user: ${{ secrets.NUGET_USER }} - name: Publish uses: ByronMayne/Shared.Actions/publish_csharp_nuget@1.0.7 with: publish: true - configuration: ${{ env.configuration }} + configuration: ${{ env.Configuration }} solutionOrProjectPath: ./src/${{ matrix.project.name }}/${{ matrix.project.name }}.csproj - nugetApiKey: ${{ secrets.NUGET_API_KEY }} \ No newline at end of file + nugetApiKey: ${{ steps.login.outputs.NUGET_API_KEY }} \ No newline at end of file