Skip to content

Publish NuGet packages from GitHub Actions via OIDC - #198

Merged
devlead merged 1 commit into
WCOMAB:mainfrom
devlead:feature/gh-nuget-oidc
Oct 15, 2026
Merged

devlead merged 1 commit into
WCOMAB:mainfrom
devlead:feature/gh-nuget-oidc

Conversation

@devlead

@devlead devlead commented Oct 15, 2026 •

Copy link
Copy Markdown
Member

Summary

  • Replace the simple publish workflow with SqlBulkSyncExport-style Cake.Sdk CI (matrix OS, id-token for NuGet OIDC).
  • Pack SourcePack nupkgs, push to GitHub Packages + nuget.org on main, and create a GitHub Release.
  • Pin System.Security.Cryptography.Pkcs to 10.0.13 (clears NU1902/NU1903).

Notes

  • Azure DevOps pipeline left in place for container/deploy; NuGet shipping moves to GitHub.
  • NuGet OIDC login uses NUGET_USER + Cake NuGetLogin (trusted publisher: build.yml / main).
  • Requires secrets: NUGET_SOURCE, NUGET_USER, GH_PACKAGES_NUGET_SOURCE (already added). Optional DPI report secrets.

Test plan

  • Local dotnet ./cake.cs -- --target=Pack succeeded (0 warnings)
  • PR CI green on Windows/Ubuntu/macOS
  • After merge to main: nuget.org shows new SqlBulkSyncFunction version + GH release

Adapt SqlBulkSyncExport's Cake.Sdk build to pack SourcePack nupkgs, login with NuGet OIDC on main, and push to nuget.org / GitHub Packages. Also pin System.Security.Cryptography.Pkcs 10.0.13.
@devlead
devlead merged commit 2eeced4 into WCOMAB:main Oct 15, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant