From 4c5c9ead246076c4f510c057c22898ff1ab79a9f Mon Sep 17 00:00:00 2001 From: Benoit Tigeot Date: Wed, 29 Jul 2026 17:21:03 +0200 Subject: [PATCH] ci: disable setup-go cache to prevent cache poisoning The build-test workflow runs on push/PR to protected branches; leaving `actions/setup-go` caching on lets a PR-populated cache be restored into a trusted run. Disable it. Signed-off-by: Benoit Tigeot --- .github/workflows/build-test.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml index bdd3cc5b8..136754568 100644 --- a/.github/workflows/build-test.yml +++ b/.github/workflows/build-test.yml @@ -28,6 +28,7 @@ jobs: with: go-version: '${{ env.GOLANG_VERSION }}' check-latest: true + cache: false - name: Test source headers are present run: make test-source-headers - name: Check if go modules need to be tidied