Control GitHub Actions cache access with cache-mode

GitHub Actions now supports a cache-mode setting that lets teams apply least-privilege access to the Actions cache at the workflow or job level. Options include read, write, write-only, and none, letting teams prevent unnecessary cache restores or saves and protect trusted workflows from cache poisoning. Job-level settings override workflow-level ones, and the mode carries through reusable workflows so a called workflow can't get more access than its caller granted. Declaring write or write-only for low-trust events like pull_request_target triggers a warning annotation. The feature is generally available on all GitHub plans.

Source: https://github.blog/changelog/2026-09-10-control-github-actions-cache-access-with-cache-mode. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.