diff --git a/.github/actionlint.yml b/.github/actionlint.yml
new file mode 100644
index 0000000..0f70896
--- /dev/null
+++ b/.github/actionlint.yml
@@ -0,0 +1,9 @@
+# SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
+# SPDX-FileCopyrightText: 2026 Tobias Kaminsky <tobias@kaminsky.me
+# SPDX-License-Identifier: GPL-3.0-or-later
+
+# Configuration related to self-hosted runner.
+self-hosted-runner:
+  # Labels of self-hosted runner in array of strings.
+  labels:
+    - ubuntu-latest-low
diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 2d5c004..9b8b3a3 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   actionlint:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: Download actionlint
diff --git a/.github/workflows/file-sync.yml b/.github/workflows/file-sync.yml
index fd0f59d..d221468 100644
--- a/.github/workflows/file-sync.yml
+++ b/.github/workflows/file-sync.yml
@@ -19,7 +19,7 @@ concurrency:
 
 jobs:
   sync:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     steps:
       - name: Checkout Repository
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
diff --git a/.github/workflows/pr-feedback.yml b/.github/workflows/pr-feedback.yml
index a3a2d12..d35122c 100644
--- a/.github/workflows/pr-feedback.yml
+++ b/.github/workflows/pr-feedback.yml
@@ -22,7 +22,7 @@ permissions:
 jobs:
   pr-feedback:
     if: ${{ github.repository_owner == 'nextcloud' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     steps:
       - name: The get-github-handles-from-website action
         uses: marcelklehr/get-github-handles-from-website-action@06b2239db0a48fe1484ba0bfd966a3ab81a08308 # v1.0.1
diff --git a/.github/workflows/renovate-approve-merge.yml b/.github/workflows/renovate-approve-merge.yml
index 5551b18..d9de172 100644
--- a/.github/workflows/renovate-approve-merge.yml
+++ b/.github/workflows/renovate-approve-merge.yml
@@ -25,7 +25,7 @@ concurrency:
 jobs:
   auto-approve-merge:
     if: github.event.pull_request.user.login == 'renovate[bot]'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     permissions:
       # for hmarr/auto-approve-action to approve PRs
       pull-requests: write
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index e6c889f..00fb5e2 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   reuse-compliance-check:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     steps:
       - name: Checkout
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
diff --git a/config/workflows/autoApproveSync.yml b/config/workflows/autoApproveSync.yml
index c215be0..123b682 100644
--- a/config/workflows/autoApproveSync.yml
+++ b/config/workflows/autoApproveSync.yml
@@ -26,7 +26,7 @@ permissions:
 jobs:
   auto-approve:
     name: Auto approve sync
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     if: ${{ contains(github.event.pull_request.labels.*.name, 'sync') && github.actor == 'nextcloud-android-bot' }}
     steps:
       - name: Disabled on forks
diff --git a/config/workflows/detectNewJavaFiles.yml b/config/workflows/detectNewJavaFiles.yml
index 908e3fd..8bcb972 100644
--- a/config/workflows/detectNewJavaFiles.yml
+++ b/config/workflows/detectNewJavaFiles.yml
@@ -20,7 +20,7 @@ concurrency:
 
 jobs:
   detectNewJavaFiles:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     steps:
       - id: file_changes
         uses: trilom/file-changes-action@a6ca26c14274c33b15e6499323aac178af06ad4b # v1.2.4
diff --git a/config/workflows/pr-feedback.yml b/config/workflows/pr-feedback.yml
index a3a2d12..d35122c 100644
--- a/config/workflows/pr-feedback.yml
+++ b/config/workflows/pr-feedback.yml
@@ -22,7 +22,7 @@ permissions:
 jobs:
   pr-feedback:
     if: ${{ github.repository_owner == 'nextcloud' }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     steps:
       - name: The get-github-handles-from-website action
         uses: marcelklehr/get-github-handles-from-website-action@06b2239db0a48fe1484ba0bfd966a3ab81a08308 # v1.0.1
diff --git a/config/workflows/renovate-approve-merge.yml b/config/workflows/renovate-approve-merge.yml
index 5551b18..d9de172 100644
--- a/config/workflows/renovate-approve-merge.yml
+++ b/config/workflows/renovate-approve-merge.yml
@@ -25,7 +25,7 @@ concurrency:
 jobs:
   auto-approve-merge:
     if: github.event.pull_request.user.login == 'renovate[bot]'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     permissions:
       # for hmarr/auto-approve-action to approve PRs
       pull-requests: write
diff --git a/config/workflows/stale.yml b/config/workflows/stale.yml
index fe125a9..9f39b62 100644
--- a/config/workflows/stale.yml
+++ b/config/workflows/stale.yml
@@ -15,7 +15,7 @@ permissions: read-all
 
 jobs:
   stale:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-latest-low
     permissions:
       issues: write
       pull-requests: write