Publish via NuGet Trusted Publishing

Author: sleeuwen

.github/workflows/dotnetcore.yml .github/workflows/build.yml.github/workflows/dotnetcore.yml renamed to .github/workflows/build.yml

@@ -1,10 +1,7 @@
-name: .NET Core
+name: Build
 
 on:
-  push:
-    branches: [ master ]
-  pull_request:
-    branches: [ master ]
+  workflow_call:
 
 jobs:
   build:
@@ -16,15 +13,15 @@ jobs:
         os: [ windows-latest, macos-latest, ubuntu-latest ]
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         fetch-depth: 0
     - name: Setup .NET 6
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: 6.0.x
     - name: Setup .NET 8
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: 8.0.x
     - name: Install dependencies
@@ -44,33 +41,3 @@ jobs:
         test -s Samples/AspNetCore.SassCompiler.Sample/wwwroot/css/site_sass.css
         test -s Samples/AspNetCore.SassCompiler.Sample/wwwroot/lib/css/lib.min.css
 
-  publish:
-    runs-on: ubuntu-latest
-    needs: [ build ]
-    if: github.event_name == 'push' && github.ref == 'refs/heads/master'
-    steps:
-    - uses: actions/checkout@v4
-      with:
-        fetch-depth: 0
-    - name: Setup .NET 6
-      uses: actions/setup-dotnet@v4
-      with:
-        dotnet-version: 6.0.x
-    - name: Setup .NET 8
-      uses: actions/setup-dotnet@v4
-      with:
-        dotnet-version: 8.0.x
-    - name: Publish NuGet
-      id: publish_nuget
-      uses: alirezanet/publish-nuget@v3.1.0
-      with:
-        PROJECT_FILE_PATH: AspNetCore.SassCompiler/AspNetCore.SassCompiler.csproj
-        PACKAGE_NAME: AspNetCore.SassCompiler
-      env:
-        NUGET_KEY: ${{ secrets.NUGET_KEY }}
-    - name: Create release
-      id: create_release
-      if: success() && steps.publish_nuget.outputs.version != ''
-      run: gh release create ${{ steps.publish_nuget.outputs.version }} --generate-notes
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr.yml

@@ -0,0 +1,9 @@
+name: PR validation
+
+on:
+  pull_request:
+    branches: [ master ]
+
+jobs:
+  build:
+    uses: ./.github/workflows/build.yml

.github/workflows/release.yml

@@ -0,0 +1,47 @@
+name: Release
+
+on:
+  push:
+    branches: [ master ]
+
+jobs:
+  build:
+    uses: ./.github/workflows/build.yml
+
+  publish:
+    runs-on: ubuntu-latest
+    needs: [ build ]
+    permissions:
+      id-token: write
+      contents: write
+    steps:
+    - uses: actions/checkout@v6
+      with:
+        fetch-depth: 0
+    - name: Setup .NET 6
+      uses: actions/setup-dotnet@v5
+      with:
+        dotnet-version: 6.0.x
+    - name: Setup .NET 8
+      uses: actions/setup-dotnet@v5
+      with:
+        dotnet-version: 8.0.x
+    - name: NuGet Login
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: koenvzeijl
+    - name: Publish NuGet
+      id: publish_nuget
+      uses: alirezanet/publish-nuget@v3.1.0
+      with:
+        PROJECT_FILE_PATH: AspNetCore.SassCompiler/AspNetCore.SassCompiler.csproj
+        PACKAGE_NAME: AspNetCore.SassCompiler
+      env:
+        NUGET_KEY: ${{ steps.login.outputs.NUGET_API_KEY }}
+    - name: Create release
+      id: create_release
+      if: success() && steps.publish_nuget.outputs.version != ''
+      run: gh release create ${{ steps.publish_nuget.outputs.version }} --generate-notes
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Directory.Build.props

@@ -0,0 +1,13 @@
+<Project>
+
+    <PropertyGroup>
+        <DebugType>embedded</DebugType>
+        <PublishRepositoryUrl>true</PublishRepositoryUrl>
+        <RepositoryBranch Condition="'$(GITHUB_REF)' != ''">$(GITHUB_REF)</RepositoryBranch>
+    </PropertyGroup>
+
+    <PropertyGroup>
+        <ContinuousIntegrationBuild Condition="'$(CI)' == 'true'">true</ContinuousIntegrationBuild>
+    </PropertyGroup>
+
+</Project>