diff --git a/services/forgejo-nsc/internal/nsc/macos.go b/services/forgejo-nsc/internal/nsc/macos.go
index c54fb20..30be465 100644
--- a/services/forgejo-nsc/internal/nsc/macos.go
+++ b/services/forgejo-nsc/internal/nsc/macos.go
@@ -602,14 +602,27 @@ if ! mkdir -p "/Users/runner/.cache/act" 2>/dev/null; then
 fi
 
 export PATH="/usr/local/bin:/opt/homebrew/bin:/usr/bin:/bin:/usr/sbin:/sbin:${PATH}"
-cache_root="${NSC_CACHE_PATH:-$HOME/.cache/burrow}"
-mkdir -p \
+cache_base="${NSC_CACHE_PATH:-$HOME/.cache/burrow}"
+cache_root="${NSC_SHARED_CACHE_PATH:-${cache_base}/shared}"
+cache_owner="$(id -un)"
+cache_group="$(id -gn)"
+if ! install -d -m 0775 -o "${cache_owner}" -g "${cache_group}" \
+  "${cache_root}" \
   "${cache_root}/bin" \
   "${cache_root}/downloads" \
   "${cache_root}/go/path" \
   "${cache_root}/go/mod" \
   "${cache_root}/go/build" \
-  "${cache_root}/homebrew"
+  "${cache_root}/homebrew" 2>/dev/null; then
+  sudo install -d -m 0775 -o "${cache_owner}" -g "${cache_group}" \
+    "${cache_root}" \
+    "${cache_root}/bin" \
+    "${cache_root}/downloads" \
+    "${cache_root}/go/path" \
+    "${cache_root}/go/mod" \
+    "${cache_root}/go/build" \
+    "${cache_root}/homebrew"
+fi
 export HOMEBREW_CACHE="${cache_root}/homebrew"
 export GOPATH="${cache_root}/go/path"
 export GOMODCACHE="${cache_root}/go/mod"