I don't know about pypi and npm but Github is planning to introduce immutable actions at the end of the year. https://github.com/github/roadmap/issues/592