hugh-hackman[bot]
5a167e94ae
The dual-approval-check workflow only makes GitHub API calls — it does not need cluster access or any self-hosted tooling. Using the self-hosted runner (runners-privilegedescalation) was triggering GitHub's self-hosted runner approval requirement for workflows run by actors with authorAssociation NONE (e.g. privilegedescalation-qa/cto bots), causing action_required conclusions with 0 jobs executed. Switching to ubuntu-latest eliminates the approval gate and frees self-hosted runner capacity for actual CI builds. Co-Authored-By: Paperclip <noreply@paperclip.ing>