diff --git a/.github/workflows/bump-go-toolchain.yml b/.github/workflows/bump-go-toolchain.yml
index eee8d4afb57..ce68bebf992 100644
--- a/.github/workflows/bump-go-toolchain.yml
+++ b/.github/workflows/bump-go-toolchain.yml
@@ -19,8 +19,8 @@ permissions:
 jobs:
   bump-go-toolchain:
     runs-on:
-      group: databricks-protected-runner-group-large
-      labels: linux-ubuntu-latest-large
+      group: databricks-ghec-public-repos-runner-group-large
+      labels: linux-ubuntu-latest-public-8core-32gb
 
     steps:
       - name: Checkout
diff --git a/.github/workflows/bump-vuln-deps.yml b/.github/workflows/bump-vuln-deps.yml
index 05fd08a6d6c..9f86458c70b 100644
--- a/.github/workflows/bump-vuln-deps.yml
+++ b/.github/workflows/bump-vuln-deps.yml
@@ -16,8 +16,8 @@ permissions:
 jobs:
   bump-vuln-deps:
     runs-on:
-      group: databricks-protected-runner-group-large
-      labels: linux-ubuntu-latest-large
+      group: databricks-ghec-public-repos-runner-group-large
+      labels: linux-ubuntu-latest-public-8core-32gb
 
     steps:
       - name: Checkout
diff --git a/.github/workflows/cli-contrib-membership.yml b/.github/workflows/cli-contrib-membership.yml
index 1977152f446..b3df6a85ee8 100644
--- a/.github/workflows/cli-contrib-membership.yml
+++ b/.github/workflows/cli-contrib-membership.yml
@@ -14,8 +14,8 @@ on:
 jobs:
   fork-contribution-notice:
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     permissions:
       pull-requests: write
diff --git a/.github/workflows/close-stale-issues.yml b/.github/workflows/close-stale-issues.yml
index ed66650894e..c4a17999e8a 100644
--- a/.github/workflows/close-stale-issues.yml
+++ b/.github/workflows/close-stale-issues.yml
@@ -9,8 +9,8 @@ jobs:
   cleanup:
     name: Stale issue job
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     permissions:
       issues: write
diff --git a/.github/workflows/external-message.yml b/.github/workflows/external-message.yml
index fe674b6a7ce..27a6a6acf70 100644
--- a/.github/workflows/external-message.yml
+++ b/.github/workflows/external-message.yml
@@ -14,8 +14,8 @@ on:
 jobs:
   comment-on-pr:
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     permissions:
       pull-requests: write
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index cba79c172bd..04dd8559f92 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -19,8 +19,8 @@ on:
 jobs:
   label:
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     permissions:
       contents: read
diff --git a/.github/workflows/release-docker.yml b/.github/workflows/release-docker.yml
index d16d6bfdb64..8a9e7a6d1f6 100644
--- a/.github/workflows/release-docker.yml
+++ b/.github/workflows/release-docker.yml
@@ -28,8 +28,8 @@ on:
 jobs:
   docker:
     runs-on:
-      group: databricks-protected-runner-group-large
-      labels: linux-ubuntu-latest-large
+      group: databricks-ghec-public-repos-runner-group-large
+      labels: linux-ubuntu-latest-public-8core-32gb
 
     permissions:
       packages: write
diff --git a/.github/workflows/release-prs.yml b/.github/workflows/release-prs.yml
index f42b9d07670..8a6f64912af 100644
--- a/.github/workflows/release-prs.yml
+++ b/.github/workflows/release-prs.yml
@@ -37,8 +37,8 @@ jobs:
   create-setup-cli-release-pr:
     if: ${{ inputs.setup_cli }}
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     steps:
       - name: Derive version from tag
@@ -72,8 +72,8 @@ jobs:
   create-homebrew-tap-release-pr:
     if: ${{ inputs.homebrew_tap }}
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     steps:
       - name: Derive version from tag
@@ -138,8 +138,8 @@ jobs:
   create-vscode-extension-update-pr:
     if: ${{ inputs.vscode_extension }}
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     steps:
       - name: Derive version from tag
@@ -173,8 +173,8 @@ jobs:
   publish-to-winget-pkgs:
     if: ${{ inputs.winget }}
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
 
     environment: release
 
diff --git a/.github/workflows/start-integration-tests.yml b/.github/workflows/start-integration-tests.yml
index 2a01d623a4b..21d6dbb0e22 100644
--- a/.github/workflows/start-integration-tests.yml
+++ b/.github/workflows/start-integration-tests.yml
@@ -10,8 +10,8 @@ jobs:
   trigger:
 
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-org-emu-access-runner-group
+      labels: linux-ubuntu-latest-emu-access-2core-8gb
 
     # Use the environment only to gate its secrets; skip creating a deployment
     # object so these runs don't post "deployed to test-trigger-is" items on the
diff --git a/.github/workflows/tagging.yml b/.github/workflows/tagging.yml
index 73b3ca2d662..43a0cdaa53a 100644
--- a/.github/workflows/tagging.yml
+++ b/.github/workflows/tagging.yml
@@ -52,8 +52,8 @@ jobs:
       NEXTCHANGES_DIR: ${{ github.repository == 'databricks/cli' && '.nextchanges' || '' }}
     environment: "release-is"
     runs-on:
-      group: databricks-protected-runner-group
-      labels: linux-ubuntu-latest
+      group: databricks-ghec-public-repos-runner-group-small
+      labels: linux-ubuntu-latest-public-2core-8gb
     steps:
       - name: Generate GitHub App Token
         id: generate-token