Use NuGet Trusted Publishing

Author: cmeeren

.github/workflows/ci.yml

@@ -2,6 +2,9 @@ name: CI
 
 on: [ push, pull_request ]
 
+permissions:
+  id-token: write
+
 jobs:
   ci:
 
@@ -22,8 +25,14 @@ jobs:
       - name: Test
         run: dotnet test -c Release -maxCpuCount -- Expecto.fail-on-focused-tests=true
 
+      - name: NuGet login
+        uses: NuGet/login@v1
+        id: nuget_login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Push
         if: startsWith(github.ref, 'refs/tags/v/')
         env:
           NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
-        run: dotnet nuget push "**/*.nupkg" -s "https://api.nuget.org/v3/index.json" -k "$NUGET_API_KEY" --skip-duplicate
+        run: dotnet nuget push "**/*.nupkg" -s "https://api.nuget.org/v3/index.json" -k ${{ steps.nuget_login.outputs.NUGET_API_KEY }} --skip-duplicate