diff --git a/.github/workflows/build-library.yml b/.github/workflows/build-library.yml
index 4d24b44..a74d367 100644
--- a/.github/workflows/build-library.yml
+++ b/.github/workflows/build-library.yml
@@ -209,6 +209,9 @@ jobs:
     needs: [ sign ]
     environment: nuget-release-gate
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - name: Setup .NET
@@ -222,10 +225,16 @@ jobs:
           name: nuget-signed
           path: ${{ github.workspace }}/packages
 
+      - name: NuGet login (OIDC)
+        id: login
+        uses: NuGet/login@v1
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Push signed packages to NuGet.org
         run: >
           dotnet nuget push
           ${{ github.workspace }}/packages/**/*.nupkg
           --source https://api.nuget.org/v3/index.json
-          --api-key ${{ secrets.NUGET_PACKAGE_PUSH_TOKEN }}
+          --api-key ${{ steps.login.outputs.NUGET_API_KEY }}
           --skip-duplicate
diff --git a/.github/workflows/build-template.yml b/.github/workflows/build-template.yml
index 89a8ab8..64e65ed 100644
--- a/.github/workflows/build-template.yml
+++ b/.github/workflows/build-template.yml
@@ -153,6 +153,9 @@ jobs:
     needs: [ sign ]
     environment: nuget-release-gate
     runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
 
     steps:
       - name: Setup .NET
@@ -166,10 +169,16 @@ jobs:
           name: nuget-signed
           path: ${{ github.workspace }}/packages
 
+      - name: NuGet login (OIDC)
+        id: login
+        uses: NuGet/login@v1
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
       - name: Push signed packages to NuGet.org
         run: >
           dotnet nuget push
           ${{ github.workspace }}/packages/**/*.nupkg
           --source https://api.nuget.org/v3/index.json
-          --api-key ${{ secrets.NUGET_PACKAGE_PUSH_TOKEN }}
+          --api-key ${{ steps.login.outputs.NUGET_API_KEY }}
           --skip-duplicate