domains / families / software-engineering / nuget-trusted-publishing

nuget-trusted-publishing

separate

Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC, keyless NuGet publish, migrate from NuGet API key, NuGet/login, secure NuGet publishing. DO NOT USE FOR: publishing to private feeds or Azure Artifacts (OIDC is nuget.org only). INVOKES: shell (powershell or bash), edit, create, ask_user for guided repo setup.

When to use

• Setting up trusted publishing for a NuGet package
• Migrating from `secrets.NUGET_API_KEY` to OIDC-based publishing
• Asked about keyless or secure NuGet publishing
• Creating a new NuGet publish workflow from scratch
• Asked to "remove NuGet API key" or "use NuGet/login"
• Setting up publishing for a dotnet tool, MCP server, or template package
• Asked about `NuGet/login@v1` or `id-token: write`

When not to use

• publishing to private feeds
• publishing to Azure Artifacts

Skill page

Source