diff --git a/.github/workflows/maven-verify.yml b/.github/workflows/maven-verify.yml
index 88dc78402..7a5773b1c 100644
--- a/.github/workflows/maven-verify.yml
+++ b/.github/workflows/maven-verify.yml
@@ -47,6 +47,9 @@ jobs:
           java-version: ${{ matrix.java }}
           distribution: 'temurin'
           cache: 'maven'
+          cache-jdk: false
+          # only pushes to the default branch and .x lines save; other branches and pull requests restore
+          cache-read-only: ${{ !(github.event_name == 'push' && (github.ref_name == github.event.repository.default_branch || endsWith(github.ref_name, '.x'))) }}
 
       - name: Set up Maven
         run: mvn --errors --batch-mode --show-version wrapper:wrapper "-Dtype=only-script" "-Dmaven=3.9.7"