[mburns]

GitHub has an opt-in option to enforce immutable tags as part of immutable releases.

https://docs.github.com/en/code-security/concepts/supply-cha...

[staticassertion]

Nice, yeah I think they should start to migrate to that behavior by default.