Throwaway: verifying tag/release permission bypass of branch protection - View it on GitHub