From c997c050f17ac7a9194a5864a2b606fb2d07a5fa Mon Sep 17 00:00:00 2001
From: Jasper <jasper.lammers@gmail.com>
Date: Thu, 3 Sep 2026 15:55:14 +0200
Subject: [PATCH] Updating nuget-publish

---
 .github/workflows/nuget-publish.yml | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/nuget-publish.yml b/.github/workflows/nuget-publish.yml
index 896968e..eeda724 100644
--- a/.github/workflows/nuget-publish.yml
+++ b/.github/workflows/nuget-publish.yml
@@ -9,6 +9,9 @@ jobs:
     name: 📦 Publish NuGet Packages
     runs-on: ubuntu-latest
     environment: CI - release environment
+    permissions:
+      contents: read
+      id-token: write # required for NuGet trusted publishing (OIDC)
     steps:
       - name: 🗂️ Checkout the repository
         uses: actions/checkout@main
@@ -29,6 +32,12 @@ jobs:
 
       - name: 🎁 Pack
         run: dotnet pack Reactive.Boolean.sln --configuration Release -p:PackageVersion=${{ steps.version.outputs.version }} -p:Version=${{ steps.version.outputs.version }}
-        
+
+      - name: 🔑 NuGet login (OIDC to temporary API key)
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: 📨 Push to NuGet
-        run: dotnet nuget push **/*.nupkg --api-key ${{secrets.NUGET_API_KEY}} --source https://api.nuget.org/v3/index.json
+        run: dotnet nuget push **/*.nupkg --api-key ${{ steps.login.outputs.NUGET_API_KEY }} --source https://api.nuget.org/v3/index.json