diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 6f33e5a..33e2246 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,5 +1,9 @@
 name: Release
 
+permissions:
+  id-token: write
+  contents: write
+
 on:
   push:
     tags:
@@ -32,5 +36,10 @@ jobs:
         artifacts: packages/*.nupkg
         token: ${{ secrets.GITHUB_TOKEN }}
         generateReleaseNotes: true
+    - name: NuGet login
+      uses: NuGet/login@v1
+      id: login
+      with:
+        user: ${{secrets.NUGET_USER}}
     - name: Push packages
-      run: dotnet nuget push packages/*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ secrets.NUGET_KEY }}
\ No newline at end of file
+      run: dotnet nuget push packages/*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{steps.login.outputs.NUGET_API_KEY}}
\ No newline at end of file