diff --git a/.github/workflows/depsreview.yaml b/.github/workflows/depsreview.yaml
index b9d6d20ff..610586882 100644
--- a/.github/workflows/depsreview.yaml
+++ b/.github/workflows/depsreview.yaml
@@ -6,7 +6,7 @@ permissions:
 
 jobs:
   dependency-review:
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - name: 'Checkout Repository'
         uses: actions/checkout@v4
diff --git a/.github/workflows/helm-lint.yml b/.github/workflows/helm-lint.yml
index a320356b2..d3db5bce5 100644
--- a/.github/workflows/helm-lint.yml
+++ b/.github/workflows/helm-lint.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
+    runs-on: hanzo-deploy-linux-amd64
     steps:
       - name: Checkout
         uses: actions/checkout@v4
diff --git a/.github/workflows/iam-integrations.yaml b/.github/workflows/iam-integrations.yaml
index ab3764c7f..2cb945600 100644
--- a/.github/workflows/iam-integrations.yaml
+++ b/.github/workflows/iam-integrations.yaml
@@ -17,7 +17,7 @@ permissions:
 jobs:
   iam-matrix-test:
     name: "[Go=${{ matrix.go-version }}|ldap=${{ matrix.ldap }}|etcd=${{ matrix.etcd }}|openid=${{ matrix.openid }}]"
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
 
     services:
       openldap:
@@ -127,7 +127,7 @@ jobs:
           make test-site-replication-oidc
   iam-import-with-missing-entities:
     name: Test IAM import in new cluster with missing entities
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
@@ -144,7 +144,7 @@ jobs:
           make test-iam-import-with-missing-entities
   iam-import-with-openid:
     name: Test IAM import in new cluster with opendid configurations
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-go@v5
diff --git a/.github/workflows/issues.yaml b/.github/workflows/issues.yaml
index e18ad3f44..33a873d8d 100644
--- a/.github/workflows/issues.yaml
+++ b/.github/workflows/issues.yaml
@@ -10,7 +10,7 @@ on:
 jobs:
   add-to-project:
     name: Add issue to project
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - uses: actions/add-to-project@v0.5.0
         with:
diff --git a/.github/workflows/lock.yml b/.github/workflows/lock.yml
index da3afe3c4..d0465fac6 100644
--- a/.github/workflows/lock.yml
+++ b/.github/workflows/lock.yml
@@ -13,7 +13,7 @@ concurrency:
 
 jobs:
   action:
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - uses: dessant/lock-threads@v3
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 12234550d..cfc2d55c8 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -27,7 +27,7 @@ jobs:
 
   binaries:
     name: Build and upload release binaries
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     if: startsWith(github.ref, 'refs/tags/v')
     permissions:
       contents: write
diff --git a/.github/workflows/replication.yaml b/.github/workflows/replication.yaml
index acdfa87a8..391970549 100644
--- a/.github/workflows/replication.yaml
+++ b/.github/workflows/replication.yaml
@@ -17,7 +17,7 @@ permissions:
 jobs:
   replication-test:
     name: Advanced Tests with Go ${{ matrix.go-version }}
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
 
     strategy:
       matrix:
diff --git a/.github/workflows/shfmt.yml b/.github/workflows/shfmt.yml
index d7d8b4d60..7e987982b 100644
--- a/.github/workflows/shfmt.yml
+++ b/.github/workflows/shfmt.yml
@@ -11,7 +11,7 @@ permissions:
 jobs:
   build:
     name: runner / shfmt
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - uses: actions/checkout@v4
       - uses: luizm/action-sh-checker@master
diff --git a/.github/workflows/typos.yml b/.github/workflows/typos.yml
index 7addb3143..0841c3d39 100644
--- a/.github/workflows/typos.yml
+++ b/.github/workflows/typos.yml
@@ -5,7 +5,7 @@ on: [pull_request]
 jobs:
   run:
     name: Spell Check with Typos
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
     - name: Checkout Actions Repository
       uses: actions/checkout@v4
diff --git a/.github/workflows/vulncheck.yml b/.github/workflows/vulncheck.yml
index 8463d1dde..d1ec8f88d 100644
--- a/.github/workflows/vulncheck.yml
+++ b/.github/workflows/vulncheck.yml
@@ -14,7 +14,7 @@ permissions:
 jobs:
   vulncheck:
     name: Analysis
-    runs-on: ubuntu-latest
+    runs-on: hanzo-build-linux-amd64
     steps:
       - name: Check out code into the Go module directory
         uses: actions/checkout@v4