it's not going to help if you share a cache across security boundaries. That is what happened here and seems to be driving a spate of github action related problems.