Add release action with cosign

Signed-off-by: Michael Shen <[email protected]>

.github/workflows/release.yml

@@ -0,0 +1,33 @@
+name: Release
+on: 
+  - workflow_dispatch
+jobs:
+  sign:
+    permissions:
+      contents: 'read'
+      id-token: 'write'
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 1
+
+      - name: 'Set up Go'
+        uses: actions/setup-go@v3
+        with:
+          go-version: 1.19
+
+      - name: 'Build'
+        run: CGO_ENABLED=0 go build .
+
+      - name: 'Install Cosign'
+        uses: sigstore/[email protected]
+
+      - name: 'Authenticate to GCP'
+        uses: google-github-actions/[email protected]
+        with:
+          workload_identity_provider: 'projects/985030810135/locations/global/workloadIdentityPools/github/providers/github'
+          service_account: '[email protected]'
+
+      - name: 'Sign'
+        run: cosign sign-blob --key gcpkms://projects/mirrosa/locations/us/keyRings/signing/cryptoKeys/mirrosa mirrosa