Using trusted publishing for nuget

Author: distantcam

.github/workflows/publish.yml

@@ -9,11 +9,19 @@ jobs:
   publish:
     name: 📦 Publish nuget library
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
     steps:
       - name: 📦 Download Artifact
         run: gh release download ${{ github.ref_name }} --repo ${{ github.repository }} --pattern '*.nupkg'
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: 🔐 NuGet login
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: ✈️ Push Nuget
-        run: dotnet nuget push *.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ secrets.NUGET_API_KEY }} --skip-duplicate
+        run: dotnet nuget push *.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ steps.login.outputs.NUGET_API_KEY }} --skip-duplicate