diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml
index 9b5fc67e116..cc4381d228d 100644
--- a/.github/workflows/checks.yml
+++ b/.github/workflows/checks.yml
@@ -158,7 +158,6 @@ jobs:
         with:
           go-version-file: "go.mod"
           check-latest: true
-          cache: false
       - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
       - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
       - name: Run GoReleaser
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index f89d2b31758..6adba3ecf82 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -23,3 +23,5 @@ jobs:
 
       - name: Run zizmor 🌈
         uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        with:
+          arguments: "--config .github/zizmor-config.yml"
diff --git a/.github/zizmor-config.yml b/.github/zizmor-config.yml
new file mode 100644
index 00000000000..e4cfc6e8b58
--- /dev/null
+++ b/.github/zizmor-config.yml
@@ -0,0 +1,4 @@
+rules:
+  cache-poisoning:
+    ignore:
+      - .github/workflows/checks.yml