Generate github_immutable_release

[scop]

Feature Overview

Would be nice to have gr generate github_immutable_release.

Why is the feature needed?

Better feature coverage for newly scaffolded projects.

Example Code

No response

Note

Prerequisites available in go-github/v76. WIP/Draft PR in #4226

[suzuki-shunsuke]

• feat: support verifying GitHub Release Attestations #4195

We should be careful that even if Immutable Release is enabled, the release doesn't have the release attestation necessarily.

• https://github.com/orgs/community/discussions/171210#discussioncomment-14601356

[scop]

Would be nice to get this feature in. My dumb script currently detects 69 registry entries that have immutable releases without corresponding config in aqua-registry, and more are cropping up. As soon as this feature is available, we stop accumulating debt in the form of new entries added without this info even if it is available.

I plan to help with getting the missing info in once we have this feature, so we can do the additions via the preferred re-scaffold method. Currently this means 69 re-scaffolds and probably 69 PR's. While this feature won't stop that number growing completely (as most additions are existing projects starting to make use of immutable releases), it would help with not accumulating said debt for newly added registry entries.