Use NuGet trusted publishing in publishing workflows

Author: soenneker

.github/workflows/publish-package.yml

@@ -13,6 +13,7 @@ on:
   workflow_dispatch:
 
 permissions:
+  id-token: write
   contents: write
   packages: write
 
@@ -75,6 +76,12 @@ jobs:
             --no-restore \
             --output ./artifacts
 
+      - name: Log in to NuGet
+        uses: NuGet/login@v1
+        id: nuget-login
+        with:
+          user: soenneker
+
       - name: Publish to NuGet
         shell: bash
         run: |
@@ -86,7 +93,7 @@ jobs:
             set +e
             dotnet nuget push ./artifacts/*.nupkg \
               --source "https://api.nuget.org/v3/index.json" \
-              --api-key "${{ secrets.NUGET__TOKEN }}" \
+              --api-key "${{ steps.nuget-login.outputs.NUGET_API_KEY }}" \
               --skip-duplicate 2>&1 | tee "$output_file"
             exit_code=${PIPESTATUS[0]}
             set -e