add Trusted Publishing

Author: ANcpLua

.github/workflows/nuget-publish.yml

@@ -42,10 +42,14 @@ jobs:
       - name: Pack NuGet package
         run: dotnet pack SWEN3.Paperless.RabbitMq/SWEN3.Paperless.RabbitMq.csproj --configuration Release --no-build --output ./nupkg -p:GeneratePackageOnBuild=false
 
-      - name: Publish packages to NuGet.org
+      - name: Publish packages to NuGet.org (Trusted Publishing)
         if: github.event_name == 'release' || github.event_name == 'workflow_dispatch'
         run: |
+          # Request OIDC token for NuGet Trusted Publishing
+          OIDC_TOKEN=$(curl -sS -H "Authorization: bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
+            "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=api://AzureADTokenExchange" | jq -r '.value')
+
           dotnet nuget push ./nupkg/*.nupkg \
             --source https://api.nuget.org/v3/index.json \
-            --api-key ${{ secrets.NUGET_API_KEY }} \
+            --api-key "$OIDC_TOKEN" \
             --skip-duplicate