Setup NuGet Trusted Publishing

Author: bkoelman

.github/workflows/build.yml

@@ -225,6 +225,7 @@ jobs:
     permissions:
       packages: write
       contents: write
+      id-token: write
     steps:
     - name: Tune GitHub-hosted runner network
       uses: smorimoto/tune-github-hosted-runner-network@v1
@@ -243,6 +244,12 @@ jobs:
       run: |
         dotnet nuget add source --name 'feedz-io' 'https://f.feedz.io/json-api-dotnet/jsonapidotnetcore/nuget/index.json'
         dotnet nuget push '${{ github.workspace }}/packages/*.nupkg' --api-key '${{ secrets.FEEDZ_IO_API_KEY }}' --source 'feedz-io' --skip-duplicate
+    - name: NuGet login
+      if: ${{ github.event_name == 'release' && startsWith(github.ref, 'refs/tags/v') }}
+      uses: NuGet/login@v1
+      id: login
+      with:
+        user: ${{ secrets.NUGET_USER }}
     - name: Publish to NuGet
       if: ${{ github.event_name == 'release' && startsWith(github.ref, 'refs/tags/v') }}
-      run: dotnet nuget push '${{ github.workspace }}/packages/*.nupkg' --api-key '${{ secrets.NUGET_ORG_API_KEY }}' --source 'nuget.org' --skip-duplicate
+      run: dotnet nuget push '${{ github.workspace }}/packages/*.nupkg' --api-key '${{ steps.login.outputs.NUGET_API_KEY }}' --source 'nuget.org' --skip-duplicate