Update GitHub Actions workflow for .NET Core

Author: seguins

.github/workflows/dotnetcore.yml

@@ -6,6 +6,9 @@ on:
     branches:
       - master
   pull_request:
+permissions:
+  id-token: write
+  contents: read
 
 jobs:
   build:
@@ -66,7 +69,7 @@ jobs:
 
     # https://learn.microsoft.com/fr-fr/nuget/nuget-org/trusted-publishing
     - name: NuGet login (OIDC → temp API key)
-      uses: NuGet/login@v1
+      uses: NuGet/login@8d196754b4036150537f80ac539e15c2f1028841 #v1.2.0
       id: login
       with:
         user: ${{ secrets.NUGET_USER }}