Analysis Keys Are Pointers Too: GitHub Actions Cache Poisoning The build cache is mutable resolution between runs: how a low-privilege context poisons a cache a privileged workflow restores. Daniel Malvaceda · Jun 20, 2026 · 18 min read
Analysis Tags Are Pointers. Pointers Move. The structural gap between what a pipeline declares and what it executes, and what hash pinning actually fixes. Daniel Malvaceda · Apr 16, 2026 · 14 min read