Publish to feedz.io

Publish NuGet packages built on main or from tags to feedz.io.

Author: martincostello

.github/workflows/ci.yml

@@ -120,6 +120,46 @@ jobs:
           exit 1
         }
 
+  publish-feedz-io:
+    needs: [ build-test, validate-packages ]
+    runs-on: ubuntu-latest
+    if: |
+      github.event.repository.fork == false &&
+      (github.ref_name == github.event.repository.default_branch || startsWith(github.ref, 'refs/tags/'))
+
+    environment:
+      name: feedz.io
+
+    permissions:
+      contents: read
+      id-token: write
+
+    steps:
+
+    - name: Download packages
+      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      with:
+        name: packages-windows
+
+    - name: Setup .NET SDK
+      uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
+      with:
+        dotnet-version: ${{ needs.build-test.outputs.dotnet-sdk-version }}
+
+    - uses: grafana/shared-workflows/actions/get-vault-secrets@9f37f656e063f0ad0b0bfc38d49894b57d363936 # get-vault-secrets/v1.2.1
+      id: get-token
+      with:
+        export_env: false
+        repo_secrets: |
+          token=feedz-io:token
+
+    - name: Push NuGet packages to feedz.io
+      shell: bash
+      env:
+        API_KEY: ${{ fromJSON(steps.get-token.outputs.secrets).token }}
+        SOURCE: 'https://f.feedz.io/${{ github.repository }}/nuget/index.json'
+      run: dotnet nuget push "*.nupkg" --api-key "${API_KEY}" --skip-duplicate --source "${SOURCE}"
+
   publish-nuget:
     needs: [ build-test, validate-packages ]
     runs-on: ubuntu-latest