Any plans to enable immutable releases?

[arnfinneide]

Is there any plans to enable immutable releases for this repository?

This would help protect release integrity by preventing changes to published release artifacts/tags and improve supply chain security. We are looking into using SHA-pinning to achive the same goal, but as this is more adminstration, immutable releases would be a prefered method.

Reference: Preventing changes to your releases

If this is planned, could you share expected timeline

[Ay1tsMe]

Bumping.

Following the recent Trivy supply chain compromise, I believe this should be a high priority. It has been abundantly clear that this should occur on all GitHub actions as a defense-in-depth measure to prevent tampering with GitHub actions if a future supply chain compromise occurs. Can this be done?