fix(ci): pin GitHub-hosted Ubuntu runner image

[seonghobae]

Superseded — clean replacement is #149

This PR originally owned only the explicit ubuntu-24.04 runner-selection repair and was clean at b663f9d200e5f385c7dd067d074940a02836c68e.

During stack convergence, former support-bundle PR #146 was retargeted to this feature branch. Because #146 already had auto-merge enabled, the retarget immediately merged #146 into this branch and advanced this PR to 9ee83d6aa8ec2906bc31b799580ef3dbe07d088b, adding six unrelated support/operability files. Protected main@cc15cc2c34daf8c104eeb83d52a6a66f3cd6e128 was not modified.

The runner-only delta is preserved exactly by replacement #149 at clean head b663f9d200e5f385c7dd067d074940a02836c68e. The support-bundle delta is preserved separately by stacked replacement #150 at 9ee83d6aa8ec2906bc31b799580ef3dbe07d088b, based on #149's clean branch. No check/review evidence from this contaminated PR transfers.

Close this PR to prevent the mixed-context branch from becoming the integration vehicle. Continue runner/control-plane validation on #149 and support-bundle validation on #150.

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[coderabbitai]

Warning

Review limit reached

Next included review available in 49 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: ac72fa18-54c4-485d-8874-07ae4c669b06

📥 Commits

Reviewing files that changed from the base of the PR and between 2d41c40 and 9ee83d6.

📒 Files selected for processing (7)

• CHANGELOG.md
• README.md
• crates/waf-ids-core/src/lib.rs
• docs/commercial/20b-krw-sale-readiness.md
• docs/commercial/buyer-due-diligence.md
• src/lib.rs
• tests/workflow_runner_contract.rs

📝 Walkthrough

Walkthrough

CI, fuzz, Scorecard 워크플로의 러너 이미지가 ubuntu-24.04로 고정되었습니다. 새 통합 테스트가 세 워크플로의 러너 설정을 검증합니다.

Changes

Ubuntu 러너 버전 고정

Layer / File(s)	Summary
러너 고정 및 검증 .github/workflows/ci.yml, .github/workflows/fuzz.yml, .github/workflows/scorecard-analysis.yml, tests/workflow_runner_contract.rs	세 워크플로가 ubuntu-24.04를 사용하도록 변경되었습니다. 통합 테스트는 ubuntu-latest가 없고 고정된 runs-on: ubuntu-24.04 설정이 있는지 검사합니다.

Estimated code review effort: 2 (Simple) | ~10 minutes

Merge Risk: 🔵 Low · up to 2d41c

The PR pins the CI, fuzzing, and Scorecard workflows to Ubuntu 24.04 without changing their gates or permissions. The accompanying contract test should be strengthened to validate every runner declaration; the PR is otherwise mergeable with this bounded follow-up understood.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (3 skipped: 3 …
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	제목은 GitHub Actions Ubuntu 러너 이미지를 ubuntu-24.04로 고정하는 PR의 주요 변경 사항을 정확하고 간결하게 설명합니다.

Full details: Docstring Coverage

Explanation

Docstring coverage is 100.00% which is sufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 1 functions across 1 files. (3 skipped: 3 unsupported.)

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/pin-hosted-runner-20260902-v2

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}