Add release workflow for packaging and uploading extension artifacts

Remove attestation from CI

.github/workflows/main.yml

@@ -19,8 +19,6 @@ jobs:
       issues: read
       checks: write
       pull-requests: write
-      id-token: write
-      attestations: write
 
     steps:
       - name: Checkout
@@ -64,10 +62,6 @@ jobs:
         with:
           name: extension
           path: '*.vsix'
+            name: Release Extension
 
-      - name: Generate artifact attestation
-        uses: actions/attest-build-provenance@v1
-        with:
-          subject-path: '*.vsix'
-          show-summary: true
-
+

.github/workflows/release.yml

@@ -0,0 +1,44 @@
+name: Release Extension
+
+on:
+  release:
+    types: [created]
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+        contents: write
+        issues: read
+        checks: write
+        id-token: write
+        attestations: write 
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Install vsce
+        run: npm install -g @vscode/vsce
+
+      - name: Package
+        run: vsce package
+
+      - name: Generate provenance
+        uses: actions/attest-build-provenance@v1
+        with:
+          subject-path: '*.vsix'
+          show-summary: true
+
+      - name: Upload to Release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: "*.vsix"