BUILD-10889: Migrate GitHub Actions workflows to sonar-*-public runners (#5547)

Author: hedinasr

.github/workflows/PrepareNextIteration.yml

@@ -10,7 +10,7 @@ on:
 jobs:
   Next-Iteration-Job:
     name: Next Iteration Job
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       pull-requests: write
       contents: write

.github/workflows/PullRequestClosed.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   PullRequestMerged_job:
     name: Pull Request Merged
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
       pull-requests: read

.github/workflows/PullRequestCreated.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   PullRequestCreated_job:
     name: Pull Request Created
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
     # For external PR, ticket should be created manually

.github/workflows/ReleasabilityCheck.yml

@@ -14,7 +14,7 @@ name: Releasability Check
 jobs:
   releasability-status:
     name: Releasability status
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
       statuses: write

.github/workflows/RequestReview.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   RequestReview_job:
     name: Request review
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
     # For external PR, ticket should be moved manually

.github/workflows/SubmitReview.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   SubmitReview_job:
     name: Submit Review
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
       pull-requests: read

.github/workflows/ToggleLockBranch.yml

@@ -6,7 +6,7 @@ on:
 jobs:
   ToggleLockBranch_job:
     name: Toggle lock branch
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
     steps:

.github/workflows/UpdateRuleMetadata.yml

@@ -4,7 +4,7 @@ on: workflow_dispatch
 
 jobs:
   rule-metadata-update:
-    runs-on: github-ubuntu-latest-s
+    runs-on: sonar-xs-public
     permissions:
       id-token: write
       contents: write

.github/workflows/automated-release.yml

@@ -57,7 +57,7 @@ jobs:
       plugin-artifacts-sqs: "java"
       plugin-artifacts-sqc: "java"
       jira-project-key: "SONARJAVA"
-      runner-environment: "github-ubuntu-latest-s"
+      runner-environment: "sonar-xs-public"
       rule-props-changed: false
       short-description: ${{ github.event.inputs.short-description }}
       new-version: ${{ github.event.inputs.new-version }}

.github/workflows/build.yml

@@ -21,7 +21,7 @@ env:
 
 jobs:
   build:
-    runs-on: github-ubuntu-latest-m  # Public repo uses custom GitHub-hosted runner
+    runs-on: sonar-m-public
     name: Build
     permissions:
       id-token: write  # Required for Vault OIDC authentication
@@ -56,8 +56,8 @@ jobs:
       fail-fast: false
       matrix:
         item:
-          - { runner: github-ubuntu-latest-m, profile: without-sonarqube-project, sq_version: LATEST_RELEASE }
-          - { runner: github-ubuntu-latest-m, profile: only-sonarqube-project, sq_version: LATEST_RELEASE }
+          - { runner: sonar-m-public, profile: without-sonarqube-project, sq_version: LATEST_RELEASE }
+          - { runner: sonar-m-public, profile: only-sonarqube-project, sq_version: LATEST_RELEASE }
           - { runner: github-windows-latest-m, profile: without-sonarqube-project, sq_version: LATEST_RELEASE }
           - { runner: github-windows-latest-m, profile: only-sonarqube-project, sq_version: LATEST_RELEASE }
     name: Ruling QA
@@ -125,7 +125,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: github-ubuntu-latest-m
+    runs-on: sonar-m-public
     permissions:
       id-token: write
       contents: write
@@ -168,7 +168,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: github-ubuntu-latest-m
+    runs-on: sonar-m-public
     permissions:
       id-token: write
       contents: write
@@ -210,7 +210,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: github-ubuntu-latest-l
+    runs-on: sonar-l-public
     permissions:
       id-token: write
       contents: write
@@ -245,7 +245,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: github-ubuntu-latest-m
+    runs-on: sonar-m-public
     permissions:
       id-token: write
       contents: write
@@ -292,7 +292,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: github-ubuntu-latest-m
+    runs-on: sonar-m-public
     permissions:
       id-token: write
       contents: write
@@ -383,7 +383,7 @@ jobs:
       - autoscan
       - qa-os-win
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: github-ubuntu-latest-s  # Public repo uses custom GitHub-hosted runners
+    runs-on: sonar-s-public
     name: Promote
     permissions:
       id-token: write