diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7b3458c..44825ea 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -65,11 +65,19 @@ jobs:
     runs-on: windows-latest
     needs: build
     if: github.repository_owner == 'ejball' && github.ref == 'refs/heads/master'
+    permissions:
+      contents: write
+      id-token: write
     steps:
     - name: Check out code
       uses: actions/checkout@v6
     - name: Install .NET
       uses: actions/setup-dotnet@v5
+    - name: NuGet login
+      uses: NuGet/login@v1
+      id: nuget-login
+      with:
+        user: ejball
     - name: Download packages
       uses: actions/download-artifact@v8
       with:
@@ -78,5 +86,5 @@ jobs:
     - name: Publish
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
+        NUGET_API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
       run: ./build.ps1 publish --skip package --trigger publish-nuget-output
\ No newline at end of file