Skip to content

Document how to check if a release is immutable (as a user) #43715

Closed
#43716
Closed
Document how to check if a release is immutable (as a user)#43715
#43716
Labels
code securityContent related to code securitycontentThis issue or pull request belongs to the Docs Content team

Description

@dangbert
dangbert
opened on Apr 7, 2026

Code of Conduct

What article on docs.github.com is affected?

As a user of certain repos on github, I'd like to know how to verify if a given release in a repo of interest is immutable in order to understand my supply chain attack posture.

relevant docs to update: https://github.com/github/docs/blob/main/content/code-security/concepts/supply-chain-security/immutable-releases.md

What part(s) of the article would you like to see updated?

Add a new section called "Verifying Immutable Releases" explaining what to look for to know if a given release is immutable. E.g. how can I tell if this is an immutable release or not? https://github.com/google-github-actions/setup-gcloud/releases/tag/v3.0.1

Additional information

No response

Activity

  1. dangbert
    added
    contentThis issue or pull request belongs to the Docs Content team
    on Apr 7, 2026

  2. welcome commented on Apr 7, 2026

    @welcome
    welcomebot
    on Apr 7, 2026 – with Welcome

    Thanks for opening this issue. A GitHub docs team member should be by to give feedback soon. In the meantime, please check out the contributing guidelines.

  3. github-actions
    added
    triageDo not begin working on this issue until triaged by the team
    on Apr 7, 2026

  4. dangbert commented on Apr 7, 2026

    @dangbert
    dangbert
    on Apr 7, 2026
    ContributorAuthor

    I found the answer on the page, I was overlooking it before. "If a release is immutable, you will see " Immutable" below the title on the release page." I would like to suggest bolding this text (#43716)

  5. Sharra-writes
    added
    code securityContent related to code security
    and removed
    triageDo not begin working on this issue until triaged by the team
    on Apr 10, 2026

  6. github-actions commented on May 11, 2026

    @github-actions
    github-actionsbot
    on May 11, 2026 – with GitHub Actions
    Contributor

    A stale label has been added to this issue, because it has been open for 30 days with no activity. If you think this issue should remain open, please add a new comment.

  7. github-actions
    added
    InactiveWill be closed automatically by a stall check if no activity is detected.
    on May 11, 2026
  8. Sharra-writes
    removed
    InactiveWill be closed automatically by a stall check if no activity is detected.
    on May 15, 2026
  9. Sharra-writes
    closed this as completedin #43716on May 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    code securityContent related to code securitycontentThis issue or pull request belongs to the Docs Content team

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions