From a9b65466b9ad25f2e4cf3eb354a0b52972e12129 Mon Sep 17 00:00:00 2001
From: Samir M <samir.marini@sonarsource.com>
Date: Wed, 19 Aug 2026 16:13:45 +0200
Subject: [PATCH 1/2] BUILD-12289 Move Linux CI jobs to WarpBuild

---
 .github/workflows/automated-release.yml   |  2 +-
 .github/workflows/build.yml               | 18 +++++++++---------
 .github/workflows/ruling-diff-comment.yml |  2 +-
 .github/workflows/unified-dogfooding.yml  |  2 +-
 4 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/workflows/automated-release.yml b/.github/workflows/automated-release.yml
index 83c924c85d9..9ae0be291ae 100644
--- a/.github/workflows/automated-release.yml
+++ b/.github/workflows/automated-release.yml
@@ -57,7 +57,7 @@ jobs:
       plugin-artifacts-sqs: "java"
       plugin-artifacts-sqc: "java"
       jira-project-key: "SONARJAVA"
-      runner-environment: "sonar-xs-public"
+      runner-environment: "warp-custom-ubuntu-24-04"
       rule-props-changed: false
       short-description: ${{ github.event.inputs.short-description }}
       new-version: ${{ github.event.inputs.new-version }}
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 885ed10c0c2..2ea7002b774 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -21,7 +21,7 @@ env:
 
 jobs:
   build:
-    runs-on: sonar-m-public
+    runs-on: warp-custom-ubuntu-24-04
     name: Build
     permissions:
       id-token: write  # Required for Vault OIDC authentication
@@ -56,8 +56,8 @@ jobs:
       fail-fast: false
       matrix:
         item:
-          - { runner: sonar-m-public, profile: without-sonarqube-project, sq_version: LATEST_RELEASE }
-          - { runner: sonar-m-public, profile: only-sonarqube-project, sq_version: LATEST_RELEASE }
+          - { runner: warp-custom-ubuntu-24-04, profile: without-sonarqube-project, sq_version: LATEST_RELEASE }
+          - { runner: warp-custom-ubuntu-24-04, profile: only-sonarqube-project, sq_version: LATEST_RELEASE }
           - { runner: github-windows-latest-m, profile: without-sonarqube-project, sq_version: LATEST_RELEASE }
           - { runner: github-windows-latest-m, profile: only-sonarqube-project, sq_version: LATEST_RELEASE }
     name: Ruling QA
@@ -126,7 +126,7 @@ jobs:
     name: Ruling Update and Notify
     needs: ruling-qa
     if: always() && github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
+    runs-on: warp-custom-ubuntu-24-04
     permissions:
       contents: write
       pull-requests: write
@@ -178,7 +178,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: sonar-m-public
+    runs-on: warp-custom-ubuntu-24-04
     permissions:
       id-token: write
       contents: write
@@ -231,7 +231,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: sonar-m-public
+    runs-on: warp-custom-ubuntu-24-04
     permissions:
       id-token: write
       contents: write
@@ -278,7 +278,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: sonar-l-public
+    runs-on: warp-custom-ubuntu-24-04-l
     permissions:
       id-token: write
       contents: write
@@ -313,7 +313,7 @@ jobs:
     needs:
       - build
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: sonar-m-public
+    runs-on: warp-custom-ubuntu-24-04
     permissions:
       id-token: write
       contents: write
@@ -398,7 +398,7 @@ jobs:
       - custom-rules-license-check
       - qa-os-win
     if: ${{ needs.build.outputs.deployed }}
-    runs-on: sonar-s-public
+    runs-on: warp-custom-ubuntu-24-04
     name: Promote
     permissions:
       id-token: write
diff --git a/.github/workflows/ruling-diff-comment.yml b/.github/workflows/ruling-diff-comment.yml
index ddcd0734aed..c6810050ffb 100644
--- a/.github/workflows/ruling-diff-comment.yml
+++ b/.github/workflows/ruling-diff-comment.yml
@@ -33,7 +33,7 @@ permissions:
 
 jobs:
   ruling-diff-comment:
-    runs-on: ubuntu-latest
+    runs-on: warp-custom-ubuntu-24-04
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml
index 29059b85b60..52a3723cc11 100644
--- a/.github/workflows/unified-dogfooding.yml
+++ b/.github/workflows/unified-dogfooding.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   unified-platform-dogfooding:
-    runs-on: sonar-l-public
+    runs-on: warp-custom-ubuntu-24-04-l
     name: Unified Platform Dogfooding
     permissions:
       id-token: write

From 4c9e3f5a6c92b95f342e2ad17cd970226290d9ee Mon Sep 17 00:00:00 2001
From: Samir M <samir.marini@sonarsource.com>
Date: Wed, 19 Aug 2026 16:27:06 +0200
Subject: [PATCH 2/2] BUILD-12289 Raise Test Analyze Maven heap on WarpBuild

---
 .github/workflows/build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2ea7002b774..a9c6ad88e69 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -306,6 +306,7 @@ jobs:
         env:
           SONAR_HOST_URL: ${{ fromJSON(steps.secrets.outputs.vault).SONAR_HOST_URL }}
           SONAR_TOKEN: ${{ fromJSON(steps.secrets.outputs.vault).SONAR_TOKEN }}
+          MAVEN_OPTS: "-Xmx8g"
           JAVA_TOOL_OPTIONS: "" # Set an empty value to avoid issues with runners hanging and significantly slowing down builds
 
   custom-rules-license-check: