googleapis / googleapis/release-please-action

Enable immutable releases on this project

Open
#1,198 0 comments 4 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
2.5k
Forks
327
PR merge metrics
No merged PRs in 30d

Description

This action should enable [immutable releases](https://docs.github.com/en/code-security/concepts/supply-chain-security/immutable-releases) to help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 and GHSA-69fq-xp46-6x23 by preventing re-pointing (released) tags to different commits.

Contributor guide

Open the contributing guide

Research direction

Start with the release-please-action entry point and read the linked GitHub immutable releases documentation. Determine whether this request belongs in the action or in project configuration, then verify that released tags cannot be re-pointed to different commits. Done means releases created by this project are protected from the referenced tag-changing attacks.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
release, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.