avoid cache poisoning

Author: Kalle Fagerberg

.github/workflows/release.yml

@@ -30,10 +30,12 @@ jobs:
         uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # 6.2.0
         with:
           go-version-file: go.mod
+          cache: false # no cache to avoid cache-poisoning: https://docs.zizmor.sh/audits/#cache-poisoning
 
       - uses: jdx/mise-action@c53b9236f0b3370f31520f8b142f141256d839c6 # v3.6.0
         with:
           install_args: aqua:tinygo-org/tinygo protoc protoc-gen-go github:firefly-zero/firefly-cli
+          cache: false # no cache to avoid cache-poisoning: https://docs.zizmor.sh/audits/#cache-poisoning
 
       - name: create package
         run: |