Merge all changes

.gitea/workflows/sast-scan.yml

@@ -74,7 +74,7 @@ jobs:
 
   sast-scan:
     name: SAST Analysis
-    runs-on: ubuntu-22.04
+    runs-on: ${{ vars.LINUX_RUNNER_LABEL || 'ubuntu-latest' }}
     timeout-minutes: 30
     permissions:
       security-events: write
@@ -197,7 +197,7 @@ jobs:
 
   dotnet-security:
     name: .NET Security Analysis
-    runs-on: ubuntu-22.04
+    runs-on: ${{ vars.LINUX_RUNNER_LABEL || 'ubuntu-latest' }}
     timeout-minutes: 20
     steps:
       - name: Checkout
@@ -257,7 +257,7 @@ jobs:
 
   dependency-check:
     name: Dependency Vulnerabilities
-    runs-on: ubuntu-22.04
+    runs-on: ${{ vars.LINUX_RUNNER_LABEL || 'ubuntu-latest' }}
     timeout-minutes: 15
     steps:
       - name: Checkout
@@ -308,7 +308,7 @@ jobs:
 
   dockerfile-lint:
     name: Dockerfile Security
-    runs-on: ubuntu-22.04
+    runs-on: ${{ vars.LINUX_RUNNER_LABEL || 'ubuntu-latest' }}
     timeout-minutes: 10
     steps:
       - name: Checkout
@@ -362,7 +362,7 @@ jobs:
 
   summary:
     name: SAST Summary
-    runs-on: ubuntu-22.04
+    runs-on: ${{ vars.LINUX_RUNNER_LABEL || 'ubuntu-latest' }}
     needs: [sast-scan, dotnet-security, dependency-check, dockerfile-lint]
     if: always()
     steps:
@@ -384,3 +384,4 @@ jobs:
            needs.dotnet-security.result == 'failure' ||
            needs.dependency-check.result == 'failure')
         run: exit 1
+