Merge pull request #3062 from ERGO-Code/nuget-api-to-trusted

Nuget api key to trusted publishing

Author: galabovaa

.github/workflows/build-nuget-package.yml

@@ -208,8 +208,10 @@ jobs:
     needs: [build_windows]
     environment:
       name: nuget
+    permissions:
+      id-token: write  # enable GitHub OIDC token issuance for this job
 
-    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    if: github.event_name == 'release'
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-dotnet@v5
@@ -219,7 +221,12 @@ jobs:
         with:
           name: nuget
 
+      # Get a short-lived NuGet API key
+      - name: NuGet login (OIDC → temp API key)
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Dotnet push
-        run: dotnet nuget push "*.nupkg" --api-key ${{secrets.nuget_api_key}} --source https://api.nuget.org/v3/index.json
-      #     env:
-      #       GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: dotnet nuget push "*.nupkg" --api-key ${{ steps.login.outputs.NUGET_API_KEY }} --source https://api.nuget.org/v3/index.json