migrate to runs-on runners

Signed-off-by: Alex Goodman <[email protected]>

Author: wagoodman

.github/workflows/codeql-analysis.yml

@@ -20,7 +20,8 @@ permissions:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-22.04-4core-16gb
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=small-arm
     if: github.repository == 'anchore/syft' # only run for main repo
     permissions:
       security-events: write
@@ -51,7 +52,7 @@ jobs:
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file. 
+        # By default, queries listed here will override any specified in a config file.
         # Prefix the list here with "+" to use these queries and those in the config file.
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
 

.github/workflows/dependabot-automation.yaml

@@ -7,4 +7,5 @@ permissions:
 
 jobs:
   run:
+    # Runner definition: workflows/.github/runs-on.yml
     uses: anchore/workflows/.github/workflows/dependabot-automation.yaml@main

.github/workflows/detect-schema-changes.yaml

@@ -27,7 +27,8 @@ env:
 jobs:
   label:
     name: "Label changes"
-    runs-on: ubuntu-22.04
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=small-arm
     permissions:
       contents: read
       pull-requests: write

.github/workflows/oss-project-board-add.yaml

@@ -13,6 +13,7 @@ on:
 
 jobs:
   run:
+    # Runner definition: workflows/.github/runs-on.yml
     uses: "anchore/workflows/.github/workflows/oss-project-board-add.yaml@main"
     secrets:
       token: ${{ secrets.OSS_PROJECT_GH_TOKEN }}

.github/workflows/release.yaml

@@ -13,7 +13,8 @@ on:
 jobs:
   quality-gate:
     environment: release
-    runs-on: ubuntu-24.04
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=tiny
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
         with:
@@ -119,7 +120,8 @@ jobs:
 
   release:
     needs: [quality-gate]
-    runs-on: ubuntu-24.04
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=release
     permissions:
       contents: write
       packages: write
@@ -190,6 +192,7 @@ jobs:
   release-install-script:
     needs: [release]
     if: ${{ needs.release.result == 'success' }}
+    # Runner definition: workflows/.github/runs-on.yml
     uses: "anchore/workflows/.github/workflows/release-install-script.yaml@main"
     with:
       tag: ${{ github.event.inputs.version }}

.github/workflows/remove-awaiting-response-label.yaml

@@ -10,6 +10,7 @@ jobs:
       contents: read
       issues: write
       pull-requests: write
+    # Runner definition: workflows/.github/runs-on.yml
     uses: "anchore/workflows/.github/workflows/remove-awaiting-response-label.yaml@main"
     secrets:
       token: ${{ secrets.OSS_PROJECT_GH_TOKEN }}

.github/workflows/test-fixture-cache-publish.yaml

@@ -14,7 +14,8 @@ jobs:
   Publish:
     name: "Publish test fixture image cache"
     # we use this runner to get enough storage space for docker images and fixture cache
-    runs-on: ubuntu-22.04-4core-16gb
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=release
     if: github.repository == 'anchore/syft' # only run for main repo
     permissions:
       packages: write

.github/workflows/update-anchore-dependencies.yml

@@ -12,7 +12,8 @@ permissions:
 
 jobs:
   update:
-    runs-on: ubuntu-latest
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=small-arm
     if: github.repository_owner == 'anchore' # only run for main repo (not forks)
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0

.github/workflows/update-bootstrap-tools.yml

@@ -10,7 +10,8 @@ permissions:
 
 jobs:
   update-bootstrap-tools:
-    runs-on: ubuntu-latest
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=small
     if: github.repository == 'anchore/syft' # only run for main repo
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 #v5.0.0
@@ -28,16 +29,16 @@ jobs:
         run: |
           make update-tools
           make list-tools
-          
+
           export NO_COLOR=1
           delimiter="$(openssl rand -hex 8)"
-          
+
           {
             echo "status<<${delimiter}"
             make list-tool-updates
             echo "${delimiter}"
           } >> $GITHUB_OUTPUT
-          
+
           {
             echo "### Tool version status"
             echo "\`\`\`"

.github/workflows/update-cpe-dictionary-index.yml

@@ -13,7 +13,8 @@ env:
 
 jobs:
   upgrade-cpe-dictionary-index:
-    runs-on: ubuntu-latest
+    # Runner definition: workflows/.github/runs-on.yml
+    runs-on: runs-on=${{ github.run_id }}/runner=small-arm
     permissions:
       contents: read
       packages: write