Skip to content

Commit 1e601fc

Browse files
NuGet: query trusted-publishing under the Nimblesite org account (#31)
v0.13.2/.3 NuGet 401'd for both individual guesses. nuget.org confirms `MelbourneDeveloper` is a 404 (not an account) and the policy isn't under `ChristianFindlay`. The policy owner is the **Nimblesite organization** account (`nuget.org/organization/Nimblesite`), matching the screenshot. `NUGET_USER=Nimblesite`. One-line value change; all other channels green since v0.13.1.
1 parent f8df0b9 commit 1e601fc

1 file changed

Lines changed: 6 additions & 5 deletions

File tree

.github/workflows/release.yml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -571,12 +571,13 @@ jobs:
571571
contents: read # least privilege: drop the inherited contents: write
572572
env:
573573
VERSION: ${{ needs.validate-tag.outputs.version }}
574-
# nuget.org username of the trusted-publishing policy CREATOR (NuGet/login@v1 needs
575-
# the creator, not the package owner: a wrong value 401s with "No matching trust
576-
# policy owned by user '<x>'"). The package owner is the Nimblesite org, but the
577-
# individual account that created the policy / owns the packages is ChristianFindlay.
574+
# nuget.org account that OWNS the trusted-publishing policy. NuGet/login@v1 queries
575+
# policies owned by this account; a wrong value 401s with "No matching trust policy
576+
# owned by user '<x>'". The policy's owner is the Nimblesite ORGANIZATION account
577+
# (nuget.org/organization/Nimblesite) — NOT an individual (ChristianFindlay/
578+
# MelbourneDeveloper both failed; the latter isn't even a nuget.org account).
578579
# Required input (action.yml: required: true); hardcoded here in one place.
579-
NUGET_USER: ChristianFindlay
580+
NUGET_USER: Nimblesite
580581
steps:
581582
- uses: actions/checkout@v6
582583
- uses: actions/setup-dotnet@v5

0 commit comments

Comments
 (0)