diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 87cae754d5b1e..b7e9f6c4860f8 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -80,7 +80,7 @@ jobs:
       !contains(fromJSON('["cancelled", "skipped"]'), needs.workflow_syntax.result) &&
       !github.event.repository.private &&
       github.event_name != 'merge_group'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       contents: read
       security-events: write
diff --git a/.github/workflows/autogenerated-files.yml b/.github/workflows/autogenerated-files.yml
index aca5bf37663d6..3b0c6dd4f9734 100644
--- a/.github/workflows/autogenerated-files.yml
+++ b/.github/workflows/autogenerated-files.yml
@@ -22,7 +22,7 @@ defaults:
 
 jobs:
   autogenerated:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     if: github.repository == 'Homebrew/brew'
     steps:
       - name: Set up Homebrew
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index fca9acefbf9ef..7a80b63b31d59 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -14,7 +14,7 @@ defaults:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/command-not-found-db-update.yml b/.github/workflows/command-not-found-db-update.yml
index f725cd5106720..06635230bf3cb 100644
--- a/.github/workflows/command-not-found-db-update.yml
+++ b/.github/workflows/command-not-found-db-update.yml
@@ -76,7 +76,7 @@ jobs:
 
   delete-old-versions:
     needs: update-database
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     if: github.ref == 'refs/heads/main'
     permissions:
       packages: write
diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml
index 1409c3ea54495..185e0f98406a4 100644
--- a/.github/workflows/copilot-setup-steps.yml
+++ b/.github/workflows/copilot-setup-steps.yml
@@ -9,7 +9,7 @@ on:
 jobs:
   # The job MUST be called `copilot-setup-steps` or it will not be picked up by Copilot.
   copilot-setup-steps:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
 
     permissions:
       contents: read
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index fa0f8469f8295..710262e7fee93 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -23,7 +23,7 @@ defaults:
 
 jobs:
   docs:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
@@ -103,7 +103,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     outputs:
       deploy_url: ${{ steps.deployment.outputs.page_url }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     timeout-minutes: 10
     steps:
       - name: Deploy to GitHub Pages
@@ -116,7 +116,7 @@ jobs:
     if: ${{ github.repository == 'Homebrew/brew' && always() && github.ref_name == 'main' }}
     env:
       RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     timeout-minutes: 5
     permissions:
       issues: write # for Homebrew/actions/create-or-update-issue
diff --git a/.github/workflows/doctor.yml b/.github/workflows/doctor.yml
index 1d4d9ae0afc45..b8a8bda58bdd3 100644
--- a/.github/workflows/doctor.yml
+++ b/.github/workflows/doctor.yml
@@ -22,7 +22,7 @@ defaults:
 
 jobs:
   determine-runners:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     outputs:
       runners: ${{ steps.determine-runners.outputs.runners }}
     steps:
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index 68d69d4fc3091..4be330ce30bc3 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -20,7 +20,7 @@ defaults:
 jobs:
   sbom:
     if: github.repository == 'Homebrew/brew'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
@@ -97,7 +97,7 @@ jobs:
   issue:
     needs: sbom
     if: always() && github.event_name == 'schedule'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     env:
       RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
     permissions:
diff --git a/.github/workflows/sorbet.yml b/.github/workflows/sorbet.yml
index c45aec76da254..08b426635be7b 100644
--- a/.github/workflows/sorbet.yml
+++ b/.github/workflows/sorbet.yml
@@ -117,7 +117,7 @@ jobs:
   issue:
     needs: tapioca
     if: always() && github.event_name == 'schedule'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     env:
       RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
     permissions:
diff --git a/.github/workflows/spdx.yml b/.github/workflows/spdx.yml
index 11004d62a118a..731ea554b1fe7 100644
--- a/.github/workflows/spdx.yml
+++ b/.github/workflows/spdx.yml
@@ -20,7 +20,7 @@ defaults:
 jobs:
   spdx:
     if: github.repository == 'Homebrew/brew'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
@@ -91,7 +91,7 @@ jobs:
   issue:
     needs: spdx
     if: always() && github.event_name == 'schedule'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     env:
       RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
     permissions:
diff --git a/.github/workflows/sponsors-maintainers-man-completions.yml b/.github/workflows/sponsors-maintainers-man-completions.yml
index afa888ebc8c33..fd85f8badf61e 100644
--- a/.github/workflows/sponsors-maintainers-man-completions.yml
+++ b/.github/workflows/sponsors-maintainers-man-completions.yml
@@ -28,7 +28,7 @@ defaults:
 
 jobs:
   updates:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     if: github.repository == 'Homebrew/brew'
     steps:
       - name: Setup Homebrew
@@ -141,7 +141,7 @@ jobs:
   issue:
     needs: updates
     if: always() && github.event_name == 'schedule'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     env:
       RUN_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
     permissions:
diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml
index 9eaa00603383c..b9cf858d90221 100644
--- a/.github/workflows/stale-issues.yml
+++ b/.github/workflows/stale-issues.yml
@@ -31,7 +31,7 @@ jobs:
           contains(github.event.pull_request.labels.*.name, 'stale')
         )
       )
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       contents: write
       issues: write
@@ -61,7 +61,7 @@ jobs:
           contains(github.event.pull_request.labels.*.name, 'stale')
         )
       )
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       contents: write
       issues: write
diff --git a/.github/workflows/sync-default-branches.yml b/.github/workflows/sync-default-branches.yml
index 34d5cbdb2a50c..97738c50e57e6 100644
--- a/.github/workflows/sync-default-branches.yml
+++ b/.github/workflows/sync-default-branches.yml
@@ -21,7 +21,7 @@ concurrency:
 
 jobs:
   sync:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     permissions:
       contents: write
     steps:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 46f8c098d0ba3..af15f6d861c20 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -29,7 +29,7 @@ concurrency:
 jobs:
   syntax:
     if: github.repository_owner == 'Homebrew'
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
@@ -162,7 +162,7 @@ jobs:
   vendored-gems:
     name: vendored gems
     needs: syntax
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - name: Set up Homebrew
         id: set-up-homebrew
@@ -194,7 +194,7 @@ jobs:
       matrix:
         include:
           - name: update-test (Linux)
-            runs-on: ubuntu-latest
+            runs-on: ubuntu-slim
           - name: update-test (macOS)
             runs-on: macos-latest
     steps:
@@ -452,7 +452,7 @@ jobs:
       matrix:
         include:
           - name: analytics (Linux)
-            runs-on: ubuntu-latest
+            runs-on: ubuntu-slim
           - name: analytics (macOS)
             runs-on: macos-latest
     needs: syntax