GitHub now supports immutable releases: + [docs](https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/immutable-releases) + [announcement](https://github.blog/changelog/2025-08-26-releases-now-support-immutability-in-public-preview/) We should add this to the scanner and mark releases referencing an immutable releases as secure as pinned by hash
GitHub now supports immutable releases:
We should add this to the scanner and mark releases referencing an immutable releases as secure as pinned by hash