Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens. USE FOR: trusted publishing, NuGet OIDC, keyless NuGet publish, migrate from NuGet API key, NuGet/login, secure NuGet publishing. DO NOT USE FOR: publishing to private feeds or Azure Artifacts (OIDC is nuget.org only).
Install
npx skills add dotnet/skills --skill nuget-trusted-publishingnpx skills add dotnet/skills --skill nuget-trusted-publishing -a claude-code -gnpx skills add dotnet/skills --skill nuget-trusted-publishing -a codex -ggemini skills install https://github.com/dotnet/skills.git --path plugins/dotnet-advanced/skills/nuget-trusted-publishinggh skill install dotnet/skills nuget-trusted-publishinggit clone --depth 1 https://github.com/dotnet/skills /tmp/dotnet__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/dotnet__skills/plugins/dotnet-advanced/skills/nuget-trusted-publishing ~/.claude/skills/nuget-trusted-publishing # Claude Code
cp -R /tmp/dotnet__skills/plugins/dotnet-advanced/skills/nuget-trusted-publishing ~/.agents/skills/nuget-trusted-publishing # Codex, Cursor, Gemini CLI, Copilot, OpenCode