From bc7e3de5456014cc222bf1be617eb6e09d861088 Mon Sep 17 00:00:00 2001
From: "posthog[bot]" <206114724+posthog[bot]@users.noreply.github.com>
Date: Mon, 24 Aug 2026 00:15:27 +0000
Subject: [PATCH] fix(semgrep): run the package-manager scan on Depot
 everywhere

The runs-on expression selected the Depot runner only for private repos. Public repos stayed on the shared GitHub-hosted ubuntu-latest pool, where this required check now queues for longer than it runs. Use Depot for all repos so the queue wait drops back down.

Generated-By: PostHog Desktop
Task-Id: e058eeca-7cc6-4d8e-8e85-c5c1deb16180
---
 .github/workflows/semgrep-package-managers.yml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/semgrep-package-managers.yml b/.github/workflows/semgrep-package-managers.yml
index 5e4bd32..095c2fa 100644
--- a/.github/workflows/semgrep-package-managers.yml
+++ b/.github/workflows/semgrep-package-managers.yml
@@ -13,11 +13,10 @@ env:
 jobs:
     # scans the entire repo for package managers missing a minimum release age / cooldown
     semgrep-package-managers:
-        # This workflow runs org-wide as a required workflow. Private/internal repos
-        # get the faster Depot runner; public repos stay on GitHub-hosted ubuntu-latest
-        # (free minutes, and not every public repo has Depot enabled). The repository
-        # context reflects the target repo, so this resolves per-repo automatically.
-        runs-on: ${{ github.event.repository.private && 'depot-ubuntu-latest' || 'ubuntu-latest' }}
+        # This workflow runs org-wide as a required workflow. It uses the Depot runner
+        # everywhere. The shared GitHub-hosted ubuntu-latest pool queues this required
+        # check for longer than it runs, so public repos no longer stay on that pool.
+        runs-on: depot-ubuntu-latest
         timeout-minutes: 15
         container:
             image: semgrep/semgrep:1.163.0@sha256:7cad2bc2d1e44f87f0bf4be6d1fa23aa90fb72015bebc89fb91385d813987a03