GitHub added cache-mode to GitHub Actions, a new control that limits cache access at the workflow or job level to reduce cache poisoning, the technique behind several recent high-profile supply chain attacks on npm and PyPI.

https://socket.dev/blog/github-actions-cache-mode