From c559437a37f639f050a98e88a3c08a0be68b3570 Mon Sep 17 00:00:00 2001
From: Gandalf the Greybeard <9+pe_gandalf@noreply.git.farh.net>
Date: Wed, 17 Jun 2026 04:35:37 +0000
Subject: [PATCH] fix(ci): replace ubuntu-latest with
 runners-privilegedescalation (PRI-1825)

---
 .github/workflows/dual-approval.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/dual-approval.yaml b/.github/workflows/dual-approval.yaml
index 81b55ff..8e5c41b 100644
--- a/.github/workflows/dual-approval.yaml
+++ b/.github/workflows/dual-approval.yaml
@@ -14,7 +14,7 @@ on:
 jobs:
   promotion-gate:
     name: Promotion Gate
-    runs-on: ubuntu-latest
+    runs-on: runners-privilegedescalation
     container: ubuntu:latest
     timeout-minutes: 5