diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index aea02d47..0eab9e8e 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -2,45 +2,58 @@ name: Publish packages
 
 on:
   push:
-    branches: ['master']
+    branches:
+      - master
+defaults:
+  run:
+    shell: bash
+env:
+  PUB_ENVIRONMENT: bot.github
+permissions: read-all
 
 jobs:
   publish_chopper:
-      name: "Publish chopper"
-      runs-on: ubuntu-latest
-      steps:
-      - uses: dart-lang/setup-dart@v1.3
+    name: "Publish chopper"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dart-lang/setup-dart@v1
         with:
           sdk: stable
       - id: checkout
         uses: actions/checkout@v3
+      - id: credentials
+        run: |
+          mkdir -p $XDG_CONFIG_HOME/dart
+          echo '${{ secrets.PUB_CREDENTIALS }}' > "$XDG_CONFIG_HOME/dart/pub-credentials.json"
       - id: publish
         run: bash tool/publish.sh chopper
-        env:
-          CREDENTIAL_JSON: ${{ secrets.CREDENTIAL_JSON }}
   publish_chopper_generator:
     name: "Publish chopper_generator"
     runs-on: ubuntu-latest
     steps:
-    - uses: dart-lang/setup-dart@v1.3
-      with:
-        sdk: stable
-    - id: checkout
-      uses: actions/checkout@v3
-    - id: publish
-      run: bash tool/publish.sh chopper_generator
-      env:
-        CREDENTIAL_JSON: ${{ secrets.CREDENTIAL_JSON }}
+      - uses: dart-lang/setup-dart@v1
+        with:
+          sdk: stable
+      - id: checkout
+        uses: actions/checkout@v3
+      - id: credentials
+        run: |
+          mkdir -p $XDG_CONFIG_HOME/dart
+          echo '${{ secrets.PUB_CREDENTIALS }}' > "$XDG_CONFIG_HOME/dart/pub-credentials.json"
+      - id: publish
+        run: bash tool/publish.sh chopper_generator
   publish_chopper_built_value:
     name: "Publish chopper_built_value"
     runs-on: ubuntu-latest
     steps:
-    - uses: dart-lang/setup-dart@v1.3
-      with:
-        sdk: stable
-    - id: checkout
-      uses: actions/checkout@v3
-    - id: publish
-      run: bash tool/publish.sh chopper_built_value
-      env:
-        CREDENTIAL_JSON: ${{ secrets.CREDENTIAL_JSON }}
\ No newline at end of file
+      - uses: dart-lang/setup-dart@v1
+        with:
+          sdk: stable
+      - id: checkout
+        uses: actions/checkout@v3
+      - id: credentials
+        run: |
+          mkdir -p $XDG_CONFIG_HOME/dart
+          echo '${{ secrets.PUB_CREDENTIALS }}' > "$XDG_CONFIG_HOME/dart/pub-credentials.json"
+      - id: publish
+        run: bash tool/publish.sh chopper_built_value
\ No newline at end of file
diff --git a/.github/workflows/publish_dry_run.yml b/.github/workflows/publish_dry_run.yml
new file mode 100644
index 00000000..4e7fca02
--- /dev/null
+++ b/.github/workflows/publish_dry_run.yml
@@ -0,0 +1,47 @@
+name: Publish packages (dry run)
+
+on:
+  pull_request:
+    branches:
+      - master
+defaults:
+  run:
+    shell: bash
+env:
+  PUB_ENVIRONMENT: bot.github
+permissions: read-all
+
+jobs:
+  publish_chopper:
+    name: "Publish chopper (dry run)"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dart-lang/setup-dart@v1
+        with:
+          sdk: stable
+      - id: checkout
+        uses: actions/checkout@v3
+      - id: publish_dry_run
+        run: bash tool/publish.sh chopper --dry-run
+  publish_chopper_generator:
+    name: "Publish chopper_generator (dry run)"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dart-lang/setup-dart@v1
+        with:
+          sdk: stable
+      - id: checkout
+        uses: actions/checkout@v3
+      - id: publish_dry_run
+        run: bash tool/publish.sh chopper_generator --dry-run
+  publish_chopper_built_value:
+    name: "Publish chopper_built_value (dry run)"
+    runs-on: ubuntu-latest
+    steps:
+      - uses: dart-lang/setup-dart@v1
+        with:
+          sdk: stable
+      - id: checkout
+        uses: actions/checkout@v3
+      - id: publish_dry_run
+        run: bash tool/publish.sh chopper_built_value --dry-run
\ No newline at end of file
diff --git a/chopper/.DS_Store b/chopper/.DS_Store
deleted file mode 100644
index e8a2b199..00000000
Binary files a/chopper/.DS_Store and /dev/null differ
diff --git a/tool/publish.sh b/tool/publish.sh
index 26340f52..f5b81db2 100644
--- a/tool/publish.sh
+++ b/tool/publish.sh
@@ -6,13 +6,14 @@ PKG=$1
 echo -e "\033[1mPKG: ${PKG}\033[22m"
 pushd "${PKG}"
 
-mkdir -p ~/.pub-cache
-
-echo $CREDENTIAL_JSON > ~/.pub-cache/credentials.json
-
 sed '/Comment before publish$/,+2 d' pubspec.yaml > pubspec.temp.yaml
 rm pubspec.yaml
 mv pubspec.temp.yaml pubspec.yaml
 
-dart pub publish -f
+if [ "$2" == "--dry-run" ]; then
+  dart pub publish --dry-run
+else
+  dart pub publish --force
+fi
+
 popd
\ No newline at end of file