GitHub Actions cache-mode is now generally available. Learn how to configure read, write, write-only, and none safely across trusted and low-trust workflows.
Cache poisoning via shared caches is a real supply-chain risk. This guide shows the exact cache-mode matrix for trusted versus low-trust workflows.
Read the full guide: GitHub Actions Cache-Mode: Fix Cache-Poisoning Risk with Least-Privilege CI
Top comments (0)