Enable immutable releases

[ericcornelissen]

Description:
This action should enable immutable releases, just like actions/attest-build-provenance has.

Justification:
To help protect users against potential attacks such as GHSA-mrrh-fwg8-r2c3 by preventing re-pointing (released) tags to different commits.

Are you willing to submit a PR?
n/a

[aparnajyothi-y]

Hello @ericcornelissen, Thanks for creating this issue and we will get back to you once we have some feedback on this :)

[eternaltyro]

This will actually help with my clients' compliance processes as well. There are several actions that are indispensable and enabling immutable releases is very low effort with good rewards. Please action this as soon as you can.