diff --git a/.github/workflows/dotnet-release.yml b/.github/workflows/dotnet-release.yml
index 3519d5033..a2b68de21 100644
--- a/.github/workflows/dotnet-release.yml
+++ b/.github/workflows/dotnet-release.yml
@@ -42,6 +42,9 @@ jobs:
   deploy:
     needs: [build-windows, build-ubuntu]
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
     steps:
     - uses: actions/checkout@v3
     - name: Setup .NET Core
@@ -57,7 +60,12 @@ jobs:
       run: dotnet build --configuration Release
     - name: Pack
       run: dotnet pack Rebus8.sln -c Release -o ./artifacts -p:PackageVersion=${{ steps.get_version.outputs.VERSION }}
+    - name: NuGet login (OIDC trusted publishing)
+      uses: NuGet/login@v1
+      id: nuget-login
+      with:
+        user: microtingas
     - name: Push generated Rebus package to GitHub registry
-      run: dotnet nuget push /home/runner/work/Rebus/Rebus/artifacts/Microting.Rebus.${{ steps.get_version.outputs.VERSION }}.nupkg -k ${{secrets.NUGET_SECRET_KEY}} -s https://api.nuget.org/v3/index.json --skip-duplicate --no-symbols
+      run: dotnet nuget push /home/runner/work/Rebus/Rebus/artifacts/Microting.Rebus.${{ steps.get_version.outputs.VERSION }}.nupkg -k ${{ steps.nuget-login.outputs.NUGET_API_KEY }} -s https://api.nuget.org/v3/index.json --skip-duplicate --no-symbols
     - name: Push generated Rebus.Tests.Contracts package to GitHub registry
-      run: dotnet nuget push /home/runner/work/Rebus/Rebus/artifacts/Microting.Rebus.Tests.Contracts.${{ steps.get_version.outputs.VERSION }}.nupkg -k ${{secrets.NUGET_SECRET_KEY}} -s https://api.nuget.org/v3/index.json --skip-duplicate --no-symbols
+      run: dotnet nuget push /home/runner/work/Rebus/Rebus/artifacts/Microting.Rebus.Tests.Contracts.${{ steps.get_version.outputs.VERSION }}.nupkg -k ${{ steps.nuget-login.outputs.NUGET_API_KEY }} -s https://api.nuget.org/v3/index.json --skip-duplicate --no-symbols