fix: use the tiobe runners as proposed by security
Metadata
Current evaluation
Merged PR canonical/starflow#61 (commit 1237e85), switching the TICS CI job to the security-proposed self-hosted TIOBE Noble runner.
Resolution: closed resolved
Reason: PR #61 was merged as commit 1237e85. Its workflow change set TICS to run on the TIOBE-labeled self-hosted amd64/noble runners.
Evaluated by: mr-cal-bot
No scores available.
Issue body
https://docs.google.com/document/d/1PRi8F-8IAPCtESDB_qN9HGyvq5t4tHFdJkG8Bu7WRak/edit?tab=t.0
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR canonical/starflow#61 (commit 1237e85), switching the TICS CI job to the security-proposed self-hosted TIOBE Noble runner. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged canonical/starflow#61, adopting TIOBE runners in CI per security recommendations with a one-line configuration change. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged a single-line CI configuration update to adopt tiobe runners per security recommendations. Approved by two reviewers, passed majority of checks, and acknowledged by maintainers for proactive compliance. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged to adopt TIOBE CI runners per security recommendations. The update is already active across 150+ pipelines and maintains compatibility with the noble tag. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #120 fix(TICS): run the TICS jobs on noble | starflow | closed | Closed as redundant after canonical/starflow#119 merged the same one-line TICS runner update from Jammy to Noble in commit b12f01f. | |
| #119 fix(TICS): run the TICS jobs on noble | starflow | merged | Merged canonical/starflow#119 (commit b12f01f), moving TICS jobs from Jammy to Noble runners because newer crafts no longer support Jammy deployments, improving reliability. | |
| #431 test: use tics self-hosted runner | fetch-service | merged | Merged as commit d3e9aaa, updating the TICS workflow to use self-hosted reactive amd64 runners with Tiobe and Noble labels. |