From 106e45d16b9546b3e1970113a776ad25f34a76c2 Mon Sep 17 00:00:00 2001
From: Micheal Wilkinson <micheal.wilkinson@createfuture.com>
Date: Sat, 21 Mar 2026 12:52:34 +0000
Subject: [PATCH] chore(ci): cache security tool binaries in validation
 workflows

---
 .gitea/workflows/pr-validation.yml   | 10 ++++++++++
 .gitea/workflows/push-validation.yml | 10 ++++++++++
 2 files changed, 20 insertions(+)

diff --git a/.gitea/workflows/pr-validation.yml b/.gitea/workflows/pr-validation.yml
index 70e023c..aa594bb 100644
--- a/.gitea/workflows/pr-validation.yml
+++ b/.gitea/workflows/pr-validation.yml
@@ -35,6 +35,16 @@ jobs:
           cache: true
           cache-dependency-path: go.sum
 
+      - name: Cache security tools
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/go/bin
+          key: ${{ runner.os }}-go-security-tools-${{ hashFiles('**/go.mod', '**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-security-tools-
+
       - name: Verify module hygiene
         run: |
           set -euo pipefail
diff --git a/.gitea/workflows/push-validation.yml b/.gitea/workflows/push-validation.yml
index 08b5c7d..3d4f998 100644
--- a/.gitea/workflows/push-validation.yml
+++ b/.gitea/workflows/push-validation.yml
@@ -35,6 +35,16 @@ jobs:
           cache: true
           cache-dependency-path: go.sum
 
+      - name: Cache security tools
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/.cache/go-build
+            ~/go/bin
+          key: ${{ runner.os }}-go-security-tools-${{ hashFiles('**/go.mod', '**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-security-tools-
+
       - name: Verify module hygiene
         run: |
           set -euo pipefail