denoland / denoland/setup-deno
Enable immutable releases on this project
- Dominant language
- TypeScript
- Stars
- 330
- Forks
- 58
- PR merge metrics
- No merged PRs in 30d
Description
This action should enable [immutable releases](https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases) to help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 and GHSA-69fq-xp46-6x23 by preventing re-pointing (released) tags to different commits. This can be done in the project' settings in the "General" category under "Releases".
Immutable releases do not prevent you from having a moving version ref like "v1" (pointing to the latest v1 release, e.g. v1.2.3) as it only affects tags associated with a published release.
Contributor guide
No contributing guide indexed for this repository
Research direction
Open the project's GitHub settings and go to General > Releases, as described in the issue. Enable immutable releases, then verify that published release tags can no longer be re-pointed while moving version refs such as v1 remain unaffected.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github-actions
- Domain
- release, security
- Issue type
- Feature
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 72/100