Enable immutable releases

[ericcornelissen]

Description:
This action should enable immutable releases, just like actions/attest-build-provenance has.

Justification:
To help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 by preventing re-pointing (released) tags to different commits.

Are you willing to submit a PR?
n/a

[priya-kinthali]

Hello @ericcornelissen👋,
Thank you for this feature request. We will investigate it and get back to you as soon as we have some feedback.

[merlinz01]

Adding my support for this. I believe it is simply a checkbox in the repository settings.