denoland / denoland/setup-deno

Enable immutable releases on this project

Open Beginner friendly
#132 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
330
Forks
58
PR merge metrics
No merged PRs in 30d

Description

This action should enable [immutable releases](https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases) to help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 and GHSA-69fq-xp46-6x23 by preventing re-pointing (released) tags to different commits. This can be done in the project' settings in the "General" category under "Releases".

Immutable releases do not prevent you from having a moving version ref like "v1" (pointing to the latest v1 release, e.g. v1.2.3) as it only affects tags associated with a published release.

Contributor guide

No contributing guide indexed for this repository

Research direction

Open the project's GitHub settings and go to General > Releases, as described in the issue. Enable immutable releases, then verify that published release tags can no longer be re-pointed while moving version refs such as v1 remain unaffected.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
release, security
Issue type
Feature
Difficulty
1/5
Estimated time
Under an hour
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
72/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.