diff --git a/.github/actions/setup-cli/action.yaml b/.github/actions/setup-cli/action.yaml
index bc071a3e..422182de 100644
--- a/.github/actions/setup-cli/action.yaml
+++ b/.github/actions/setup-cli/action.yaml
@@ -65,7 +65,7 @@ runs:
     - name: Restore CLI from cache
       if: steps.check.outputs.installed != 'true'
       id: cache
-      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
       with:
         path: /usr/local/bin/cascade
         key: cascade-${{ steps.binary.outputs.name }}-${{ steps.resolve.outputs.tag }}
diff --git a/.github/workflows/action-pins.yml b/.github/workflows/action-pins.yml
index 08e21d3c..8ff2d94b 100644
--- a/.github/workflows/action-pins.yml
+++ b/.github/workflows/action-pins.yml
@@ -58,6 +58,10 @@ jobs:
         with:
           app-id: '0'
           private-key: ''
+      - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: .
+          key: anchor
       - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
       - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
diff --git a/internal/generate/action_pins.yaml b/internal/generate/action_pins.yaml
index 1821132a..04b6a360 100644
--- a/internal/generate/action_pins.yaml
+++ b/internal/generate/action_pins.yaml
@@ -15,6 +15,7 @@ actions:
   actions/download-artifact:       { tag: v8, sha: 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c, version: v8.0.1, emit: true }
   actions/upload-artifact:         { tag: v7, sha: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a, version: v7.0.1, emit: true }
   actions/create-github-app-token: { tag: v3, sha: bcd2ba49218906704ab6c1aa796996da409d3eb1, version: v3.2.0, emit: true }
+  actions/cache:                   { tag: v6, sha: 55cc8345863c7cc4c66a329aec7e433d2d1c52a9, version: v6.1.0, emit: false }
   actions/setup-go:                { tag: v6, sha: 924ae3a1cded613372ab5595356fb5720e22ba16, version: v6.5.0, emit: false }
   actions/setup-node:              { tag: v6, sha: 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e, version: v6.4.0, emit: false }
   actions/upload-pages-artifact:   { tag: v5, sha: fc324d3547104276b827a68afc52ff2a11cc49c9, version: v5.0.0, emit: false }
diff --git a/internal/generate/action_pins_manifest_test.go b/internal/generate/action_pins_manifest_test.go
index 9153c9d0..69bdc326 100644
--- a/internal/generate/action_pins_manifest_test.go
+++ b/internal/generate/action_pins_manifest_test.go
@@ -50,6 +50,7 @@ func TestActionPinsManifest_EmitFlags(t *testing.T) {
 		actionDownloadArtifact:          true,
 		actionUploadArtifact:            true,
 		actionCreateAppToken:            true,
+		"actions/cache":                 false,
 		"actions/setup-go":              false,
 		"actions/setup-node":            false,
 		"actions/upload-pages-artifact": false,