I'm a big fan of using nix to achieve that. https://determinate.systems/posts/nix-github-actions