googleapis / googleapis/release-please-action
Enable immutable releases on this project
- Dominant language
- TypeScript
- Stars
- 2.5k
- Forks
- 327
- PR merge metrics
- No merged PRs in 30d
Description
This action should enable [immutable releases](https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases) to help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 and GHSA-69fq-xp46-6x23 by preventing re-pointing (released) tags to different commits.
Contributor guide
Research direction
Start with the release-please-action entry point and read the linked GitHub immutable releases documentation. Determine whether this request belongs in the action or in project configuration, then verify that released tags cannot be re-pointed to different commits. Done means releases created by this project are protected from the referenced tag-changing attacks.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- release, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100