Immutable releases are releases where the assets and associated Git tag cannot be changed after publication. The use of this type of release increases security by blocking supply chain attacks.

Attackers cannot:

Inject vulnerabilities or malware into current project releases.
Make changes to assets and tags that may break developer workflows.

The releases tags and artefacts can be also cryptographically verified.

you are viewing a single comment's thread
view the rest of the comments

[–] HotChickenFeet@sopuli.xyz 10 points 4 weeks ago

The release tags cannot be changed or removed from the commit they were applied to. You cannot reuse a tag.

Immutable releases include protection against repository resurrection attacks. Even if you delete a repository and create a new one with the same name, you cannot reuse tags that were associated with immutable releases in the original repository.