Use Trusted Publishing for NuGet

Author: AFCMS

.github/workflows/CI.yml

@@ -61,10 +61,17 @@ jobs:
             --api-key ${{ secrets.GITHUB_TOKEN }} \
             --skip-duplicate
 
+      - name: NuGet login
+        uses: NuGet/login@v1
+        id: login
+        if: startsWith(github.ref, 'refs/tags/v')
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Publish to NuGet
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
           dotnet nuget push ./nupkg/*.nupkg \
             --source https://api.nuget.org/v3/index.json \
-            --api-key ${{ secrets.NUGET_API_KEY }} \
+            --api-key ${{ steps.login.outputs.NUGET_API_KEY }} \
             --skip-duplicate