off the cuff updates & changes?

Sometimes I delete tags and re-create them if I screwed something up. Sometimes I update the README file with new descriptions or instructions or to revert to an older stable version. The WordPress update system is this kind of draconian, everyone-or-no one beast. They made a design decision for updates to the website to be handled through the most recent tag’s README. Don’t ask me why. You’ll just have to tell your security scanner to chill out.