From 9eae3fe338f7afea848fcd19cba99fdd34e92a62 Mon Sep 17 00:00:00 2001
From: Philip Gai <philip-gai@github.com>
Date: Tue, 18 Aug 2026 10:38:43 -0500
Subject: [PATCH] ci: make validation caches read-only (#777)

---
 .github/workflows/basic-validation.yml | 1 +
 .github/workflows/check-dist.yml       | 1 +
 2 files changed, 2 insertions(+)

diff --git a/.github/workflows/basic-validation.yml b/.github/workflows/basic-validation.yml
index a13e4aa..269eb82 100644
--- a/.github/workflows/basic-validation.yml
+++ b/.github/workflows/basic-validation.yml
@@ -14,6 +14,7 @@ on:
 jobs:
   call-basic-validation:
     name: Basic validation
+    cache-mode: read
     uses: actions/reusable-workflows/.github/workflows/basic-validation.yml@main
     with:
       node-version: '24'
diff --git a/.github/workflows/check-dist.yml b/.github/workflows/check-dist.yml
index d152b54..5653d74 100644
--- a/.github/workflows/check-dist.yml
+++ b/.github/workflows/check-dist.yml
@@ -14,6 +14,7 @@ on:
 jobs:
   call-check-dist:
     name: Check dist/
+    cache-mode: read
     uses: actions/reusable-workflows/.github/workflows/check-dist.yml@main
     with:
       node-version: '24'