RetroFed Forum
Your home away from modern life.
GitHub provides feature for immutable releases
Post Reply
AuthorMessage
Pierre-Yves Lapersonne programming.dev pylapp@programming.dev
Joined: 2023-11-04
Quote

Immutable releases are releases where the assets and associated Git tag cannot be changed after publication. The use of this type of release increases security by blocking supply chain attacks.

Attackers cannot:

  • Inject vulnerabilities or malware into current project releases.
  • Make changes to assets and tags that may break developer workflows.

The releases tags and artefacts can be also cryptographically verified.

1   Original
Post Reply
Back to top