#caching

GitHub Actions Cache Goes Read-Only on Untrusted Triggers

GitHub Actions now issues read-only cache tokens for untrusted triggers like pull_request_target, closing a cache-poisoning path. Here's what still writes.

Aug 13, 2026Read more →