Skip to content

Use Trusted Publishing for NuGet #2282

@mpkorstanje

Description

@mpkorstanje

🤔 What's the problem you're trying to solve?

The action-publish-nuget action was created to

  • Ensure that only trusted code handles the credentials for NuGet
  • Provide a reusable standardized method to publish Ruby Gems in the Cucumber org.

✨ What's your proposed solution?

With trusted publishing we no longer have to use credentials. The action can authenticate itself with NuGet through GitHub. Additionally the NuGet org on Github provides an action for publishing.

So if for every project we:

  1. Setup trusted publishing on NuGet.
  2. Remove the ruby secrets from the Release environment.

The action can be archived.

⛏ Have you considered any alternatives or workarounds?

mpkorstanje@nyx:~/Projects/cucumber/code-search$ grep -rl "cucumber/action-publish-nuget"
cucumber/cucumber-expressions/.github/workflows/release-nuget.yaml
cucumber/gherkin/.github/workflows/release-nuget.yaml
cucumber/html-formatter/.github/workflows/release-nuget.yaml
cucumber/messages/.github/workflows/release-nuget.yml

📚 Any additional context?

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions