diff --git a/.gitea/workflows/pr-validation.yml b/.gitea/workflows/pr-validation.yml
index 70e023c..aa594bb 100644
--- a/.gitea/workflows/pr-validation.yml
+++ b/.gitea/workflows/pr-validation.yml
@@ -35,6 +35,16 @@ jobs:
           cache: true
           cache-dependency-path: go.sum
 
+      - name: Cache security tools
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/go/bin
+          key: ${{ runner.os }}-go-security-tools-${{ hashFiles('**/go.mod', '**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-security-tools-
+
       - name: Verify module hygiene
         run: |
           set -euo pipefail
diff --git a/.gitea/workflows/push-validation.yml b/.gitea/workflows/push-validation.yml
index 08b5c7d..3d4f998 100644
--- a/.gitea/workflows/push-validation.yml
+++ b/.gitea/workflows/push-validation.yml
@@ -35,6 +35,16 @@ jobs:
           cache: true
           cache-dependency-path: go.sum
 
+      - name: Cache security tools
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/go/bin
+          key: ${{ runner.os }}-go-security-tools-${{ hashFiles('**/go.mod', '**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-security-tools-
+
       - name: Verify module hygiene
         run: |
           set -euo pipefail