From 5a167e94ae3811051d96f85806268ef51f649112 Mon Sep 17 00:00:00 2001 From: "hugh-hackman[bot]" Date: Tue, 24 Mar 2026 21:54:04 +0000 Subject: [PATCH] fix(ci): use ubuntu-latest for dual-approval-check workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The dual-approval-check workflow only makes GitHub API calls — it does not need cluster access or any self-hosted tooling. Using the self-hosted runner (runners-privilegedescalation) was triggering GitHub's self-hosted runner approval requirement for workflows run by actors with authorAssociation NONE (e.g. privilegedescalation-qa/cto bots), causing action_required conclusions with 0 jobs executed. Switching to ubuntu-latest eliminates the approval gate and frees self-hosted runner capacity for actual CI builds. Co-Authored-By: Paperclip --- .github/workflows/dual-approval-check.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dual-approval-check.yaml b/.github/workflows/dual-approval-check.yaml index 6ff3ce9..5607475 100644 --- a/.github/workflows/dual-approval-check.yaml +++ b/.github/workflows/dual-approval-check.yaml @@ -34,7 +34,7 @@ on: jobs: dual-approval: name: Dual Approval (CTO + QA) - runs-on: runners-privilegedescalation + runs-on: ubuntu-latest timeout-minutes: 5 steps: