ci: run socket-free jobs on the light label
ci / go-licenses (alerting) (pull_request) Successful in 1m7s
ci / go-licenses (api) (pull_request) Successful in 1m8s
ci / go-licenses (hack/windows-fixture) (pull_request) Successful in 1m28s
ci / go-vulncheck (alerting) (pull_request) Successful in 38s
ci / web-routes (pull_request) Successful in 2s
ci / go-licenses (terraform) (pull_request) Successful in 1m28s
ci / go-licenses (proto) (pull_request) Successful in 1m28s
ci / go-licenses (ingest) (pull_request) Successful in 1m28s
ci / go-vulncheck (api) (pull_request) Successful in 47s
ci / tenant-boundary (pull_request) Successful in 15s
ci / go-licenses (enterprise) (pull_request) Successful in 1m21s
ci / go-licenses (hack/benchmark-fixture) (pull_request) Successful in 1m19s
ci / go-licenses (deploy/operator) (pull_request) Successful in 1m25s
ci / go-vulncheck (enterprise) (pull_request) Successful in 39s
ci / go-vulncheck (deploy/operator) (pull_request) Successful in 51s
ci / conformance-corpus (pull_request) Successful in 13s
ci / go-vulncheck (hack/benchmark-fixture) (pull_request) Successful in 38s
ci / rust-licenses (agent) (pull_request) Successful in 2m53s
ci / rust-licenses (search) (pull_request) Successful in 2m41s
ci / go-vulncheck (proto) (pull_request) Successful in 38s
ci / npm-licenses (pull_request) Successful in 19s
ci / go-vulncheck (terraform) (pull_request) Successful in 36s
ci / go-vulncheck (hack/windows-fixture) (pull_request) Successful in 1m0s
ci / go-vulncheck (ingest) (pull_request) Successful in 58s
ci / rust-advisories (search) (pull_request) Successful in 2m32s
ci / rust-advisories (agent) (pull_request) Successful in 2m41s
ci / npm-audit (pull_request) Successful in 17s

Both runners carry `light` (host1, and host2 over the wg-hosts link), so
these jobs run on whichever host is free. Jobs that mount the docker socket
keep `runs-on: docker`, which only host1 has.
This commit is contained in:
2026-09-22 06:45:26 -07:00
parent 93f3cc44a2
commit 4596c8eeab
+9 -9
View File
@@ -30,7 +30,7 @@ concurrency:
jobs: jobs:
# ----------------------------------------------------- license compliance -- # ----------------------------------------------------- license compliance --
rust-licenses: rust-licenses:
runs-on: docker runs-on: light
container: container:
image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm
strategy: strategy:
@@ -44,7 +44,7 @@ jobs:
- run: cargo deny --manifest-path "$CRATE_DIR/Cargo.toml" check licenses - run: cargo deny --manifest-path "$CRATE_DIR/Cargo.toml" check licenses
go-licenses: go-licenses:
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
strategy: strategy:
@@ -64,7 +64,7 @@ jobs:
--ignore github.com/segmentio/asm --ignore github.com/segmentio/asm
npm-licenses: npm-licenses:
runs-on: docker runs-on: light
container: container:
image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim
steps: steps:
@@ -79,7 +79,7 @@ jobs:
# ---------------------------------------------------------- security scan -- # ---------------------------------------------------------- security scan --
rust-advisories: rust-advisories:
needs: [rust-licenses, go-licenses, npm-licenses] needs: [rust-licenses, go-licenses, npm-licenses]
runs-on: docker runs-on: light
container: container:
image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm
strategy: strategy:
@@ -94,7 +94,7 @@ jobs:
go-vulncheck: go-vulncheck:
needs: [rust-licenses, go-licenses, npm-licenses] needs: [rust-licenses, go-licenses, npm-licenses]
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
strategy: strategy:
@@ -112,7 +112,7 @@ jobs:
npm-audit: npm-audit:
needs: [rust-licenses, go-licenses, npm-licenses] needs: [rust-licenses, go-licenses, npm-licenses]
runs-on: docker runs-on: light
container: container:
image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim
steps: steps:
@@ -127,7 +127,7 @@ jobs:
# bare debian. # bare debian.
tenant-boundary: tenant-boundary:
needs: [rust-advisories, go-vulncheck, npm-audit] needs: [rust-advisories, go-vulncheck, npm-audit]
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
steps: steps:
@@ -136,7 +136,7 @@ jobs:
web-routes: web-routes:
needs: [rust-advisories, go-vulncheck, npm-audit] needs: [rust-advisories, go-vulncheck, npm-audit]
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
steps: steps:
@@ -145,7 +145,7 @@ jobs:
conformance-corpus: conformance-corpus:
needs: [rust-advisories, go-vulncheck, npm-audit] needs: [rust-advisories, go-vulncheck, npm-audit]
runs-on: docker runs-on: light
container: container:
image: python:3.13-slim@sha256:8d9d0b8bcf6506481eae4907c18f5e3e7902e629f5f6d684f9e7c32e85e3ddf0 # 3.13-slim image: python:3.13-slim@sha256:8d9d0b8bcf6506481eae4907c18f5e3e7902e629f5f6d684f9e7c32e85e3ddf0 # 3.13-slim
steps: steps: