upvote
GitHub has an opt-in option to enforce immutable tags as part of immutable releases.

https://docs.github.com/en/code-security/concepts/supply-cha...

reply
Nice, yeah I think they should start to migrate to that behavior by default.
reply