diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index c758154..5a8b938 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,6 +13,9 @@ jobs:
   build:
     # TODO: Add ubuntu-latest
     runs-on: windows-latest
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -58,5 +61,5 @@ jobs:
         if: ${{ always() }} # Always run this step even on failure
 
       - name: Push NuGet package
-        run: dotnet nuget push artifacts\*.nupkg --source https://api.nuget.org/v3/index.json --api-key ${{ secrets.NUGET_API_KEY }} --skip-duplicate
+        run: dotnet nuget push artifacts\*.nupkg --source https://api.nuget.org/v3/index.json --skip-duplicate
         if: startsWith(github.ref, 'refs/tags/v')