Read-only Actions cache for untrusted triggers - GitHub Changelog

GitHub Actions now issues read-only cache tokens to the default branch for workflow events that can be triggered without write permissions to the repository. This applies least privilege to the…

Raccontata dagithub.blog