diff --git a/.gitea/workflows/publish-nuget.yml b/.gitea/workflows/publish-nuget.yml
index 1b18a2f..6c47920 100644
--- a/.gitea/workflows/publish-nuget.yml
+++ b/.gitea/workflows/publish-nuget.yml
@@ -17,6 +17,7 @@ jobs:
       DOTNET_SYSTEM_GLOBALIZATION_INVARIANT: '1'
       DOTNET_CLI_TELEMETRY_OPTOUT: '1'
       LD_LIBRARY_PATH: /opt/dotnet-libs/usr/lib/x86_64-linux-gnu
+      SSL_CERT_FILE: /opt/ca-certificates.crt
     steps:
       - name: Fetch exact tagged source
         env:
@@ -51,6 +52,9 @@ jobs:
           set -euo pipefail
           node --input-type=module <<'NODE'
           import { writeFile } from 'node:fs/promises';
+          import { rootCertificates } from 'node:tls';
+
+          await writeFile('/opt/ca-certificates.crt', rootCertificates.join('\n'));
 
           const metadataResponse = await fetch('https://dotnetcli.blob.core.windows.net/dotnet/release-metadata/8.0/releases.json');
           if (!metadataResponse.ok) throw new Error(`Release metadata download failed: ${metadataResponse.status}`);
diff --git a/Directory.Build.props.meta b/Directory.Build.props.meta
new file mode 100644
index 0000000..dd307fb
--- /dev/null
+++ b/Directory.Build.props.meta
@@ -0,0 +1,2 @@
+fileFormatVersion: 2
+guid: fae879280980a834baa004c8a97f76f5
\ No newline at end of file
diff --git a/NuGet.Config.meta b/NuGet.Config.meta
new file mode 100644
index 0000000..b5d97e5
--- /dev/null
+++ b/NuGet.Config.meta
@@ -0,0 +1,2 @@
+fileFormatVersion: 2
+guid: f3aaffc351dc8de4aadb48281c9aa45f
\ No newline at end of file