We've turned on immutable releases for all our repositories at GitHub.

Immutable releases are releases where the assets and associated Git tag cannot be changed after publication. They increase security by blocking:

• Supply chain attacks where attackers inject vulnerabilities or malware into current project releases
• Accidental changes to assets and tags that may break developer workflows

If you use gh command line tool, you can verify integrity of the release.