(github.blog)

151 points fastest963 | 2 comments | 31 Oct 25 13:59 UTC | HN request time: 0s | source

Show context

eviks ◴[31 Oct 25 15:10 UTC] No.45772876[source]▶

Why is deletion not allowed, which supply chain attacks work by deleting a release, not changing it to a malicious one?

1. yjftsjthsd-h ◴[31 Oct 25 15:36 UTC] No.45773264[source]▶

I assume they're doing the trivial workaround to prevent renaming by way of delete and recreate?

replies(1): >>45773623 #

2. eviks ◴[31 Oct 25 16:04 UTC] No.45773623[source]▶

Then you'd ban the recreation part?

Immutable releases are now generally available on GitHub