diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 8bfca24..a7da77f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,7 +11,7 @@ env:
 
 jobs:
   check:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: actions/checkout@v6
       - uses: dtolnay/rust-toolchain@stable
diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 4c18d4b..1c2faf9 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   release-plz-release:
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     permissions:
       contents: write
       pull-requests: read
@@ -54,7 +54,7 @@ jobs:
   release-plz-pr:
     needs: release-plz-release
     if: always()
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     permissions:
       contents: write
       pull-requests: write
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index f05e8af..5a4d1f6 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -71,7 +71,7 @@ jobs:
     name: Upload install.sh
     # Intentionally not `needs: build` — install.sh has no build artefacts
     # to wait on, so it uploads in parallel with the matrix.
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - uses: actions/checkout@v6
         with:
@@ -86,7 +86,7 @@ jobs:
   publish:
     name: Promote draft → published
     needs: [build, installer]
-    runs-on: ubuntu-latest
+    runs-on: [self-hosted, wavekat-ci]
     steps:
       - name: Promote release
         env: