Analysis Keys Are Pointers Too: GitHub Actions Cache Poisoning The build cache is mutable resolution between runs: how a low-privilege context poisons a cache a privileged workflow restores. Daniel Malvaceda · Jun 20, 2026 · 18 min read
