this post was submitted on 15 Oct 2025
14 points (100.0% liked)

Opensource

4739 readers
190 users here now

A community for discussion about open source software! Ask questions, share knowledge, share news, or post interesting stuff related to it!

CreditsIcon base by Lorc under CC BY 3.0 with modifications to add a gradient

⠀

founded 2 years ago
MODERATORS
pylapp@programming.dev
14
GitHub provides feature for immutable releases (docs.github.com)
submitted 2 months ago by pylapp@programming.dev to c/opensource@programming.dev
3 comments fedilink hide all child comments
 

Immutable releases are releases where the assets and associated Git tag cannot be changed after publication. The use of this type of release increases security by blocking supply chain attacks.

Attackers cannot:

  • Inject vulnerabilities or malware into current project releases.
  • Make changes to assets and tags that may break developer workflows.

The releases tags and artefacts can be also cryptographically verified.

you are viewing a single comment's thread
view the rest of the comments
[–] Novocirab@feddit.org 12 points 2 months ago (1 children)

Sounds nice for security. Also, let's leave GitHub, it's part of Microsoft monopoly strategy.