diff --git a/.github/workflows/apply-repo-conventions.yml b/.github/workflows/apply-repo-conventions.yml
index aa17c94..f61c1af 100644
--- a/.github/workflows/apply-repo-conventions.yml
+++ b/.github/workflows/apply-repo-conventions.yml
@@ -1,3 +1,4 @@
+# DO NOT EDIT: generated by ejball/ejball-common/conventions/ejball-dotnet-package-workflows
 name: Apply Repository Conventions
 
 on:
@@ -44,4 +45,4 @@ jobs:
           GH_TOKEN: ${{ steps.app-token.outputs.token }}
           GITHUB_TOKEN: ${{ steps.app-token.outputs.token }}
         run: |
-          dnx -y repo-conventions apply --open-pr
\ No newline at end of file
+          dnx -y repo-conventions apply --open-pr
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7b3458c..98c4858 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,3 +1,4 @@
+# DO NOT EDIT: generated by ejball/ejball-common/conventions/ejball-dotnet-package-workflows
 name: Continuous Integration
 
 on:
@@ -65,11 +66,19 @@ jobs:
     runs-on: windows-latest
     needs: build
     if: github.repository_owner == 'ejball' && github.ref == 'refs/heads/master'
+    permissions:
+      contents: write
+      id-token: write
     steps:
     - name: Check out code
       uses: actions/checkout@v6
     - name: Install .NET
       uses: actions/setup-dotnet@v5
+    - name: NuGet login
+      uses: NuGet/login@v1
+      id: nuget-login
+      with:
+        user: ejball
     - name: Download packages
       uses: actions/download-artifact@v8
       with:
@@ -78,5 +87,5 @@ jobs:
     - name: Publish
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
-      run: ./build.ps1 publish --skip package --trigger publish-nuget-output
\ No newline at end of file
+        NUGET_API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
+      run: ./build.ps1 publish --skip package --trigger publish-nuget-output
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 5fb318f..cacefc3 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -1,3 +1,4 @@
+# DO NOT EDIT: generated by ejball/ejball-common/conventions/ejball-dotnet-package-workflows
 name: Copilot Setup Steps
 
 on:
@@ -30,4 +31,4 @@ jobs:
     - name: Install .NET
       uses: actions/setup-dotnet@v5
     - name: Restore
-      run: ./build.ps1 restore
\ No newline at end of file
+      run: ./build.ps1 restore