From 73f70e4caea4e73b0e46873a0fc04aa5190e4d88 Mon Sep 17 00:00:00 2001 From: kazuki nakai Date: Sat, 25 Jul 2026 07:29:29 +0900 Subject: [PATCH] ci: enable organization required runner --- .github/workflows/org-quality-gate.yml | 7 +++---- tests/test_workflow_wiring.py | 2 +- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/.github/workflows/org-quality-gate.yml b/.github/workflows/org-quality-gate.yml index d6913cc..0942433 100644 --- a/.github/workflows/org-quality-gate.yml +++ b/.github/workflows/org-quality-gate.yml @@ -18,8 +18,7 @@ jobs: uses: agiletec-inc/github-actions/.github/workflows/quality-gate.yml@1941747f4149058807fc3e10d69412508027b9bd with: source-ref: 1941747f4149058807fc3e10d69412508027b9bd - # Bootstrap only: use the existing organization light pool while the - # org-required-ci scale set is deployed. This must be reverted after the - # runner canary is Synced/Healthy and accepting jobs. - linux-runs-on: ${{ github.event.repository.private && 'org-shared-ci-light' || 'ubuntu-latest' }} + # Every private repository uses the isolated organization-required pool. + # Repository-specific routing would create an exception in the org gate. + linux-runs-on: ${{ github.event.repository.private && 'org-required-ci' || 'ubuntu-latest' }} swift-runs-on: macos-latest diff --git a/tests/test_workflow_wiring.py b/tests/test_workflow_wiring.py index 155b1bd..d7782e4 100644 --- a/tests/test_workflow_wiring.py +++ b/tests/test_workflow_wiring.py @@ -50,7 +50,7 @@ def test_org_caller_grants_read_only_checks_and_actions_access(self) -> None: def test_private_repositories_use_the_organization_required_runner(self) -> None: source = ORG_CALLER.read_text() - self.assertIn("'org-shared-ci-light'", source) + self.assertIn("'org-required-ci'", source) self.assertNotIn("github.repository", source) self.assertNotIn("agiletec-ci-runner", source)