updating runners to latest ubuntu and larger runners

JaydipGabani · JaydipGabani · commit 3e43536b67fe · 2025-09-11T00:00:45.000Z
Signed-off-by: Jaydip Gabani &lt;gabanijaydip@gmail.com&gt;
diff --git a/.github/workflows/benchmark.yaml b/.github/workflows/benchmark.yaml
@@ -10,7 +10,7 @@ jobs:
   benchmark:
     name: "Benchmark"
     if: github.event.issue.pull_request && github.event.comment.body == '/benchmark'
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     timeout-minutes: 60
     permissions:
       contents: write
diff --git a/.github/workflows/check-manifest.yaml b/.github/workflows/check-manifest.yaml
@@ -28,7 +28,7 @@ permissions: read-all
 jobs:
   check_manifest:
     name: "Check codegen and manifest"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
       - name: Harden Runner
diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml
@@ -11,7 +11,7 @@ permissions: read-all
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       security-events: write
 
diff --git a/.github/workflows/dapr-export.yaml b/.github/workflows/dapr-export.yaml
@@ -13,7 +13,7 @@ permissions: read-all
 jobs:
   dapr_test:
     name: "Dapr export test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     timeout-minutes: 15
     strategy:
       matrix:
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -14,7 +14,7 @@ permissions:
 
 jobs:
   dependency-review:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
diff --git a/.github/workflows/disk-export.yaml b/.github/workflows/disk-export.yaml
@@ -15,7 +15,7 @@ permissions: read-all
 jobs:
   disk_test:
     name: "Disk export test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     timeout-minutes: 15
     steps:
     - name: Harden Runner
diff --git a/.github/workflows/helm-lint.yaml b/.github/workflows/helm-lint.yaml
@@ -14,7 +14,7 @@ permissions: read-all
 jobs:
   helm_lint_test:
     name: "Helm lint"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 15
 
     steps:
diff --git a/.github/workflows/license-lint.yaml b/.github/workflows/license-lint.yaml
@@ -19,7 +19,7 @@ permissions:
 jobs:
   license-lint:
     name: "license-lint"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     permissions:
       contents: read
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
@@ -30,7 +30,7 @@ permissions: read-all
 
 jobs:
   lint:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
diff --git a/.github/workflows/patch-docs.yaml b/.github/workflows/patch-docs.yaml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   patch-docs:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
diff --git a/.github/workflows/pre-release.yaml b/.github/workflows/pre-release.yaml
@@ -14,7 +14,7 @@ env:
 jobs:
   pre-release:
     name: "Pre Release"
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-latest-8-cores"
     if: github.ref == 'refs/heads/master' && github.event_name == 'push' && github.repository == 'open-policy-agent/gatekeeper'
     timeout-minutes: 30
     permissions:
diff --git a/.github/workflows/release-pr.yaml b/.github/workflows/release-pr.yaml
@@ -15,7 +15,7 @@ permissions:
 
 jobs:
   create-release-pull-request:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -14,7 +14,7 @@ permissions: read-all
 jobs:
   tagged-release:
     name: "Tagged Release"
-    runs-on: "ubuntu-24.04"
+    runs-on: "ubuntu-latest-8-cores"
     permissions:
       contents: write
       packages: write
diff --git a/.github/workflows/scan-vulns.yaml b/.github/workflows/scan-vulns.yaml
@@ -28,7 +28,7 @@ permissions: read-all
 jobs:
   govulncheck:
     name: "Run govulncheck"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
       - name: Harden Runner
@@ -44,7 +44,7 @@ jobs:
 
   scan_vulnerabilities:
     name: "[Trivy] Scan for vulnerabilities"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
       - name: Harden Runner
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -20,7 +20,7 @@ permissions: read-all
 jobs:
   analysis:
     name: Scorecard analysis
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write
diff --git a/.github/workflows/test-gator.yaml b/.github/workflows/test-gator.yaml
@@ -28,7 +28,7 @@ permissions: read-all
 jobs:
   gator_test:
     name: "Test Gator"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     timeout-minutes: 5
     strategy:
       fail-fast: false
diff --git a/.github/workflows/unit-test.yaml b/.github/workflows/unit-test.yaml
@@ -28,7 +28,7 @@ permissions: read-all
 jobs:
   test:
     name: "Unit test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     timeout-minutes: 20
     steps:
       - name: Harden Runner
diff --git a/.github/workflows/upgrade.yaml b/.github/workflows/upgrade.yaml
@@ -18,7 +18,7 @@ env:
 jobs:
   helm_upgrade:
     name: "[Helm] Upgrade test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-8-cores
     timeout-minutes: 15
     strategy:
       fail-fast: false
diff --git a/.github/workflows/website.yaml b/.github/workflows/website.yaml
@@ -18,7 +18,7 @@ permissions: read-all
 
 jobs:
   deploy:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     permissions:
       contents: write
     defaults:
@@ -62,7 +62,7 @@ jobs:
           destination_dir: ./website
 
   check_typos:
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
diff --git a/.github/workflows/workflow.yaml b/.github/workflows/workflow.yaml
@@ -28,7 +28,7 @@ permissions: read-all
 jobs:
   build_test:
     name: "Build and Test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-16-cores
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -89,7 +89,7 @@ jobs:
 
   helm_build_test:
     name: "[Helm] Build and Test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-16-cores
     timeout-minutes: 15
     strategy:
       fail-fast: false
@@ -159,7 +159,7 @@ jobs:
 
   build_test_generator_expansion:
     name: "[Generator Resource Expansion] Build and Test"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-16-cores
     timeout-minutes: 15
 
     steps:
@@ -216,7 +216,7 @@ jobs:
 
   e2e_test_with_OwnerReferencesPermissionEnforcement_admission_plugin:
     name: "[E2E] Test with OwnerReferencesPermissionEnforcement admission plugin"
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest-16-cores
     timeout-minutes: 15
     steps:
       - name: Harden Runner
