nuget oidc

Author: xPaw

.github/workflows/ci.yml

@@ -5,6 +5,7 @@ on: [push, pull_request]
 permissions:
   actions: write
   contents: write
+  id-token: write
 
 jobs:
   build:
@@ -52,6 +53,10 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     needs: build
     runs-on: ubuntu-latest
+
+    permissions:
+      id-token: write
+
     steps:
     - name: Download artifacts
       uses: actions/download-artifact@v5
@@ -73,5 +78,11 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
+    - name: NuGet login
+      uses: NuGet/login@v1
+      id: login
+      with:
+        user: ${{ secrets.NUGET_USER }}
+
     - name: Publish to NuGet Gallery
-      run: dotnet nuget push artifacts/ValveKeyValue.nupkg --api-key "${{ secrets.NUGET_API_KEY }}" --source "https://api.nuget.org/v3/index.json"
+      run: dotnet nuget push artifacts/ValveKeyValue.nupkg --api-key ${{ steps.login.outputs.NUGET_API_KEY }}--source "https://api.nuget.org/v3/index.json"