diff --git a/.github/workflows/release.lock.yml b/.github/workflows/release.lock.yml
index 79b9554fcd..e1616af7e9 100644
--- a/.github/workflows/release.lock.yml
+++ b/.github/workflows/release.lock.yml
@@ -99,7 +99,7 @@
 #         uses: actions/setup-go@v5
 #         with:
 #           go-version-file: go.mod
-#           cache: true
+#           cache: false  # Disabled for release security - prevent cache poisoning attacks
 #
 #       - name: Download Go modules
 #         run: go mod download
@@ -6271,7 +6271,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
-          cache: true
+          cache: false
           go-version-file: go.mod
       - name: Download Go modules
         run: go mod download
diff --git a/.github/workflows/release.md b/.github/workflows/release.md
index a0ca4b39f5..fa7faf96df 100644
--- a/.github/workflows/release.md
+++ b/.github/workflows/release.md
@@ -76,7 +76,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
-          cache: true
+          cache: false  # Disabled for release security - prevent cache poisoning attacks
 
       - name: Download Go modules
         run: go mod download