From d0dc4009e05f578215219b7470a7d6f39e7a5a4d Mon Sep 17 00:00:00 2001 From: Gerald Versluis Date: Thu, 16 Jul 2026 21:11:06 +0200 Subject: [PATCH 1/2] Add actions read permission to release job Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/workflows/dotnet-build.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/dotnet-build.yml b/.github/workflows/dotnet-build.yml index 2dbf24da..55130db4 100644 --- a/.github/workflows/dotnet-build.yml +++ b/.github/workflows/dotnet-build.yml @@ -254,6 +254,7 @@ jobs: environment: nuget-release-gate # This gates this job until manually approved runs-on: ubuntu-latest permissions: + actions: read id-token: write contents: read From 8a7ff206813a4c25e7773cb445af67d93d72bfb9 Mon Sep 17 00:00:00 2001 From: Gerald Versluis Date: Thu, 16 Jul 2026 22:07:56 +0200 Subject: [PATCH 2/2] Use public NuGet username for OIDC login Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com> --- .github/workflows/dotnet-build.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dotnet-build.yml b/.github/workflows/dotnet-build.yml index 55130db4..4398914f 100644 --- a/.github/workflows/dotnet-build.yml +++ b/.github/workflows/dotnet-build.yml @@ -275,7 +275,7 @@ jobs: id: login uses: NuGet/login@8d196754b4036150537f80ac539e15c2f1028841 # v1 with: - user: ${{ secrets.NUGET_USER }} + user: jfversluis_MSFT - name: Push to NuGet.org run: >