From 67dfd593fcda3ee8f956649a5eb7a2dd9efb0a72 Mon Sep 17 00:00:00 2001
From: Eugene Tolmachev <eugene.tolmachev@microsoft.com>
Date: Thu, 18 Jun 2026 13:53:38 -0400
Subject: [PATCH] switch policy user

---
 .github/workflows/azure.aad.fs.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/azure.aad.fs.yml b/.github/workflows/azure.aad.fs.yml
index 94d76cf..04ebb6a 100644
--- a/.github/workflows/azure.aad.fs.yml
+++ b/.github/workflows/azure.aad.fs.yml
@@ -22,8 +22,9 @@ jobs:
     - name: NuGet login (OIDC → temp API key)
       uses: NuGet/login@v1
       id: login
+      if: ${{ startsWith(github.ref, 'refs/tags') }}
       with:
-          user: azure-fsharp-libs
+          user: ${{ secrets.NUGET_USER }}
     - name: checkout
       uses: actions/checkout@v4.1.0
     - uses: actions/setup-dotnet@v4.0.0