From 328639d14cc8f6dc73155b6f9198ae986af0e86c Mon Sep 17 00:00:00 2001 From: "Steven T. Cramer" Date: Tue, 9 Dec 2025 23:08:09 +0700 Subject: [PATCH] ci: simplify GitHub Packages push authentication MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Use --api-key flag directly instead of adding a named source, reducing complexity and potential credential storage issues. 🤖 Generated with [opencode](https://opencode.ai) Co-Authored-By: opencode --- .github/workflows/ci-cd.yml | 12 ++++-------- 1 file changed, 4 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index b81c5e9..ce9b7c8 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -48,11 +48,7 @@ jobs: - name: Publish to GitHub Packages if: github.event_name == 'release' || github.event_name == 'workflow_dispatch' run: | - dotnet nuget add source \ - --username ${{ github.actor }} \ - --password ${{ secrets.GITHUB_TOKEN }} \ - --store-password-in-clear-text \ - --name github \ - "https://nuget.pkg.github.com/TimeWarpEngineering/index.json" - - dotnet nuget push artifacts/packages/*.nupkg --source "github" --skip-duplicate + dotnet nuget push artifacts/packages/*.nupkg \ + --source "https://nuget.pkg.github.com/TimeWarpEngineering/index.json" \ + --api-key ${{ secrets.GITHUB_TOKEN }} \ + --skip-duplicate