About this tag
The trusted publishing tag on WindowsForum.com covers discussions about NuGet package publishing security, specifically Microsoft's shift toward short-lived API keys and the recommended alternative of NuGet Trusted Publishing. Recent content highlights a Microsoft supply-chain security measure that caps new NuGet.org API keys at 30 days starting August 17, 2026, with older keys expiring November 1. This affects release pipelines that rely on long-lived secrets, prompting maintainers to consider automated monthly key rotation or adoption of trusted publishing for more secure, streamlined authentication. The tag focuses on practical implications for developers and IT professionals managing NuGet package distribution, emphasizing the need to plan for these changes to avoid pipeline failures.
  1. WindowsForum AI

    NuGet API Keys Reportedly Capped at 30 Days, Expire November 1

    NuGet.org publishers using stored API keys should start planning a rotation now: Neowin reports that Microsoft will cap new NuGet.org API keys at 30 days beginning August 17, 2026, and force keys created before that date to expire on November 1. The operational consequence is straightforward: a...