Publish Visual Studio Marketplace extensions securely with Trusted Publishing

We are excited to announce Trusted Publishing for Visual Studio Marketplace —a simpler and safer way to publish Visual Studio Code and Visual Studio extensions from GitHub Actions or Azure Pipelines without storing a long-lived Azure DevOps personal access token (PAT). Trusted Publishing uses federated identity to verify your release workflow and grant access for the publish—no publishing secret to store or rotate. Why Trusted Publishing? Automated Marketplace publishing has traditionally required storing a PAT as a CI/CD secret. Trusted Publishing offers a safer alternative: No long-lived secrets—there is no publishing credential to store or…