chore(actions): swap to ARM Runners (#1410)

Signed-off-by: egibs <20933572+egibs@users.noreply.github.com>

Author: egibs

.github/workflows/fuzz.yaml

@@ -38,7 +38,7 @@ permissions: {}
 jobs:
   discover:
     if: ${{ github.repository == 'chainguard-dev/malcontent' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: read
     outputs:
@@ -96,7 +96,7 @@ jobs:
   fuzz:
     if: ${{ github.repository == 'chainguard-dev/malcontent' && needs.discover.outputs.targets != '[]' }}
     needs: discover
-    runs-on: ${{ matrix.target.test == 'FuzzExtractArchive' && 'ubuntu-latest-8-core' || 'ubuntu-latest' }}
+    runs-on: ${{ matrix.target.test == 'FuzzExtractArchive' && 'ubuntu-latest-arm-8-core' || 'ubuntu-24.04-arm' }}
     permissions:
       contents: read
     strategy:

.github/workflows/go-tests.yaml

@@ -20,7 +20,7 @@ permissions: {}
 jobs:
   test:
     if: ${{ github.repository == 'chainguard-dev/malcontent' }}
-    runs-on: ubuntu-latest-16-core
+    runs-on: ubuntu-latest-arm-16-core
     permissions:
       contents: read
     container:
@@ -71,7 +71,7 @@ jobs:
 
   integration:
     if: ${{ github.repository == 'chainguard-dev/malcontent' }}
-    runs-on: ubuntu-latest-32-core
+    runs-on: ubuntu-latest-arm-16-core
     permissions:
       contents: read
     container:

.github/workflows/release.yaml

@@ -14,7 +14,7 @@ env:
 jobs:
   tag:
     if: ${{ github.repository == 'chainguard-dev/malcontent' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       id-token: write
       contents: write

.github/workflows/scorecard.yml

@@ -22,7 +22,7 @@ permissions: {}
 jobs:
   analysis:
     name: Scorecard analysis
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write

.github/workflows/style.yaml

@@ -20,7 +20,7 @@ on:
 jobs:
   yrcompile:
     name: check yr compile
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: read
     steps:
@@ -45,7 +45,7 @@ jobs:
 
   yrfmt:
     name: check yr fmt
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: read
     steps:
@@ -61,7 +61,7 @@ jobs:
 
       - name: Install yara-x
         run: |
-          wget https://github.com/VirusTotal/yara-x/releases/download/v${{ env.YARA_X_RELEASE }}/yara-x-v${{ env.YARA_X_RELEASE }}-x86_64-unknown-linux-gnu.gz -O yara-x.gz
+          wget https://github.com/VirusTotal/yara-x/releases/download/v${{ env.YARA_X_RELEASE }}/yara-x-v${{ env.YARA_X_RELEASE }}-aarch64-unknown-linux-gnu.gz -O yara-x.gz
           gunzip yara-x.gz && tar -xvf yara-x && chmod +x yr && mv yr /usr/local/bin/ && rm yara-x
       - name: Verify yr installation
         run: |
@@ -76,7 +76,7 @@ jobs:
 
   gofmt:
     name: check gofmt
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: read
     steps:
@@ -102,7 +102,7 @@ jobs:
 
   goimports:
     name: check goimports
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: read
     steps:
@@ -126,7 +126,7 @@ jobs:
 
   golangci-lint:
     name: golangci-lint
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: read
     container:

.github/workflows/third-party.yaml

@@ -17,7 +17,7 @@ permissions: {}
 jobs:
   update:
     if: ${{ github.repository == 'chainguard-dev/malcontent' }}
-    runs-on: ubuntu-latest-16-core
+    runs-on: ubuntu-latest-arm-16-core
     container:
       image: cgr.dev/chainguard/wolfi-base:latest
       options: >-

.github/workflows/version.yaml

@@ -20,7 +20,7 @@ env:
 jobs:
   version:
     if: ${{ github.repository == 'chainguard-dev/malcontent' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04-arm
     permissions:
       contents: write
       id-token: write

Makefile

@@ -62,7 +62,7 @@ ifeq ($(LINT_OS),Darwin)
 		YARA_X_SHA = 226dce240b8d674db3c83b5c0b6d336268a46f1fbd6718fa9bdeb3735857f6c4
 	endif
 else ifeq ($(LINT_OS),Linux)
-	ifeq ($(shell uname -m),arm64)
+	ifneq ($(filter $(shell uname -m),aarch64 arm64),)
 		LINT_ARCH = aarch64
 		YARA_X_SHA = a50e9b593c5a6039c227f665b8ade1ea1c4bee3be5789add3e33f033cbf427ae
 	else