From 894b80cf3e74570bf0b01a396feeb0de55b3345b Mon Sep 17 00:00:00 2001
From: Tarek Ziade <tarek@ziade.org>
Date: Thu, 18 Jun 2026 17:32:38 +0200
Subject: [PATCH] ci: use hosted runners

hosted runners can now reach Serge directly without creating a tailscale session
---
 .github/workflows/serge_review.yml | 15 ++-------------
 1 file changed, 2 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/serge_review.yml b/.github/workflows/serge_review.yml
index f66ea9686e23..9f23ac8c72f8 100644
--- a/.github/workflows/serge_review.yml
+++ b/.github/workflows/serge_review.yml
@@ -46,20 +46,9 @@ jobs:
     concurrency:
       group: claude-ai-review-${{ github.event.issue.number || github.event.pull_request.number }}
       cancel-in-progress: false
-    # A clean GitHub-hosted runner (not the self-hosted VPN group, whose
-    # pre-existing tailscaled collided with the action's own daemon). The
-    # Tailscale step below joins this runner to the tailnet so
-    # https://serge.huggingface.tech/ is reachable.
-    runs-on: ubuntu-latest
+    runs-on:
+      group: aws-general-8-plus
     steps:
-      - name: Connect to Tailscale
-        uses: tailscale/github-action@v4
-        with:
-          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID_AI_REVIEW }}
-          oauth-secret: ${{ secrets.TS_AUDIENCE_AI_REVIEW }}
-          tags: tag:ci
-          args: --accept-dns=false
-
       - name: Relay event to the Serge GitHub App
         env:
           WEBHOOK_URL: https://serge.huggingface.tech/webhook