Skip to content

Commit 81e32d6

Browse files
authored
docs: correct what is editable on an immutable release (#45730)
1 parent 8709c3f commit 81e32d6

2 files changed

Lines changed: 4 additions & 2 deletions

File tree

content/code-security/concepts/supply-chain-security/immutable-releases.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,8 @@ When you enable immutable releases, the following protections are enforced:
2222
* **Git tags cannot be moved**: Once an immutable release is published, its associated Git tag is locked to a specific commit, cannot be changed, and cannot be deleted while the release exists. If you delete the immutable release, you can delete the tag, but you cannot reuse the same tag name.
2323
* **Release assets cannot be modified or deleted**: All files attached to the release (such as binaries and archives) are protected from modification or deletion.
2424

25+
Only the assets and tag are locked. You can still edit the title and release notes of a published immutable release, and change whether it is marked as a pre-release or as the latest release.
26+
2527
Additionally, creating an immutable release automatically generates a **release attestation**, which is a cryptographically verifiable record of a release containing the release tag, commit SHA, and release assets. Consumers can use this attestation to make sure the releases and artifacts they are using exactly match the published {% data variables.product.github %} releases.
2628

2729
> [!NOTE]
@@ -37,7 +39,7 @@ We recommend you use the following workflow for publishing an immutable release.
3739
1. Attach all associated assets to the draft release.
3840
1. Publish the draft release.
3941

40-
This ensures that all assets are in place before the release becomes immutable, preventing the need to work around immutability restrictions.
42+
This ensures that all assets are in place before the release becomes immutable, preventing the need to work around immutability restrictions. For more information, see [AUTOTITLE](/repositories/releasing-projects-on-github/managing-releases-in-a-repository#creating-a-release).
4143

4244
## Next steps
4345

content/repositories/releasing-projects-on-github/managing-releases-in-a-repository.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ If you @mention any {% data variables.product.github %} users in the notes, the
8181
{% ifversion immutable-releases %}
8282

8383
> [!NOTE]
84-
> If you have enabled immutable releases for your repository, you can only edit the title and release notes after a release is published. See [AUTOTITLE](/code-security/concepts/supply-chain-security/immutable-releases).
84+
> If you have enabled immutable releases for your repository, you cannot add, replace, or delete assets after a release is published, and you cannot move or delete its tag while the release exists. You can still edit the title and release notes, and change whether the release is a pre-release or the latest release. See [AUTOTITLE](/code-security/concepts/supply-chain-security/immutable-releases).
8585
8686
{% endif %}
8787

0 commit comments

Comments
 (0)