diff --git a/.github/workflows/config.yml b/.github/workflows/config.yml
index 29476f662..001b8e473 100644
--- a/.github/workflows/config.yml
+++ b/.github/workflows/config.yml
@@ -192,9 +192,14 @@ jobs:
         if: always()
         run: python .github\workflows\s2ms_cluster.py terminate
 
+
   publish:
     if: startsWith(github.ref, 'refs/tags/')
+    needs: [test-ubuntu, test-windows]
     runs-on: windows-latest
+    permissions:
+      id-token: write
+
     steps:
       - uses: actions/checkout@v5
 
@@ -218,3 +223,16 @@ jobs:
           name: net_connector
           path: net_connector/
 
+      # Get a short-lived NuGet API key
+      - name: NuGet login (OIDC → temp API key)
+        uses: NuGet/login@v1
+        id: login
+        with:
+          user: ${{ secrets.NUGET_USER }}
+
+      # Push the package
+      - name: NuGet push
+        run: >
+          dotnet nuget push "net_connector/SingleStoreConnector.${{ env.CONNECTOR_VERSION }}.nupkg"
+          --api-key ${{steps.login.outputs.NUGET_API_KEY}}
+          --source https://api.nuget.org/v3/index.json