diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 988b860f89..4e42d04320 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,7 +57,7 @@ jobs:
   set-image:
     # GitHub Actions does not allow using 'env' in a container context.
     # This workaround sets the container image for each job using 'set-image' job output.
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     outputs:
       IMAGE: ${{ steps.set_image.outputs.IMAGE }}
     steps:
@@ -65,7 +65,7 @@ jobs:
         run: echo "IMAGE=${{ env.IMAGE }}" >> $GITHUB_OUTPUT
 
   spellcheck:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
@@ -87,7 +87,7 @@ jobs:
           cargo spellcheck check -v --cfg=.config/cargo_spellcheck.toml --checkers hunspell --code 1 -- recursive ./integration-tests/*
 
   fmt:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
@@ -118,7 +118,7 @@ jobs:
           rustfmt +nightly --check ./integration-tests/public/psp22-extension/runtime/psp22-extension-example.rs
 
   clippy:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
@@ -156,7 +156,7 @@ jobs:
           done
 
   clippy-examples:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
@@ -195,7 +195,7 @@ jobs:
             --manifest-path {} -- -D warnings -A $CLIPPY_ALLOWED
 
   check:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
@@ -240,7 +240,7 @@ jobs:
           done
 
   dylint:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
@@ -274,7 +274,7 @@ jobs:
 ### workspace
 
   build:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, check]
     defaults:
       run:
@@ -324,7 +324,7 @@ jobs:
           done
 
   test:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, check]
     defaults:
       run:
@@ -378,7 +378,7 @@ jobs:
           pushd linting && cargo nextest run --all-features --no-fail-fast --workspace && popd
 
   docs:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, check, fmt, clippy, clippy-examples, dylint, spellcheck]
     defaults:
       run:
@@ -418,7 +418,7 @@ jobs:
           retention-days: 1
 
   codecov:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, check, fmt, clippy, clippy-examples, dylint, spellcheck]
     defaults:
       run:
@@ -478,7 +478,7 @@ jobs:
 ### examples
 
   examples-test:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [clippy]
     strategy:
       matrix:
@@ -507,7 +507,7 @@ jobs:
                 cargo +nightly test --all-features --all --manifest-path {}"
 
   examples-test-mapping:
-      runs-on: self-hosted
+      runs-on: [self-hosted, Linux, X64, ink]
       needs: [set-image]
       defaults:
           run:
@@ -540,7 +540,7 @@ jobs:
                 cargo +nightly-2024-11-28 test --all-features --all --manifest-path integration-tests/public/mapping/Cargo.toml
 
   examples-custom-test:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, clippy, clippy-examples]
     defaults:
       run:
@@ -593,7 +593,7 @@ jobs:
             -- --ignored --nocapture
 
   examples-contract-build:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, build]
     defaults:
       run:
@@ -633,7 +633,7 @@ jobs:
             -- cargo +nightly build --manifest-path {} --no-default-features --target $RISCV_TARGET -Zbuild-std="core,alloc"
 
   examples-docs:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, build]
     defaults:
       run:
@@ -674,7 +674,7 @@ jobs:
 # fuzz
 
   fuzz:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: [set-image, examples-docs, examples-contract-build, examples-test, examples-custom-test]
     if: >
       github.event_name == 'push' &&
diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml
index 524525086d..4ef875e26b 100644
--- a/.github/workflows/dependabot-auto-merge.yml
+++ b/.github/workflows/dependabot-auto-merge.yml
@@ -7,7 +7,7 @@ permissions:
 
 jobs:
   dependabot-approve:
-      runs-on: self-hosted
+      runs-on: [self-hosted, Linux, X64, ink]
       if: github.actor == 'dependabot[bot]'
       steps:
         - name: Dependabot metadata
diff --git a/.github/workflows/issue-notifier.yml b/.github/workflows/issue-notifier.yml
index a672d9b587..f639a1f77a 100644
--- a/.github/workflows/issue-notifier.yml
+++ b/.github/workflows/issue-notifier.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   fetch-issues:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     strategy:
       max-parallel: 3
       matrix:
@@ -60,7 +60,7 @@ jobs:
           path: outputs/*.json
 
   message:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: fetch-issues
     steps:
       - name: Load outputs
diff --git a/.github/workflows/measurements.yml b/.github/workflows/measurements.yml
index 5634966c93..8f86891bb5 100644
--- a/.github/workflows/measurements.yml
+++ b/.github/workflows/measurements.yml
@@ -9,7 +9,7 @@ env:
 jobs:
   contract-sizes:
     if: ${{ github.event_name == 'pull_request' }}
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     defaults:
       run:
         shell: bash
diff --git a/.github/workflows/pr-notifier.yml b/.github/workflows/pr-notifier.yml
index 8a45f3d5c6..ed62228979 100644
--- a/.github/workflows/pr-notifier.yml
+++ b/.github/workflows/pr-notifier.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   fetch-issues:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     strategy:
       max-parallel: 3
       matrix:
@@ -53,7 +53,7 @@ jobs:
           path: outputs/*.json
 
   message:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     needs: fetch-issues
     steps:
       - uses: actions/checkout@v4
diff --git a/.github/workflows/publish-docs.yml b/.github/workflows/publish-docs.yml
index b7741e8da4..a85e5be7d1 100644
--- a/.github/workflows/publish-docs.yml
+++ b/.github/workflows/publish-docs.yml
@@ -16,7 +16,7 @@ jobs:
       github.event.workflow_run.event == 'push' &&
         github.event.workflow_run.head_branch == 'master' &&
         github.event.workflow_run.conclusion == 'success'
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     steps:
       - name: Checkout
         uses: actions/checkout@v4
diff --git a/.github/workflows/release-bot.yml b/.github/workflows/release-bot.yml
index d26cf73985..0a83de9360 100644
--- a/.github/workflows/release-bot.yml
+++ b/.github/workflows/release-bot.yml
@@ -7,7 +7,7 @@ on:
       - published
 jobs:
   ping_matrix:
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     steps:
       - name: send message
         uses: s3krit/matrix-message-action@v0.0.3
diff --git a/.github/workflows/submit-contract-sizes.yml b/.github/workflows/submit-contract-sizes.yml
index f62073a4d3..a40de2f9d6 100644
--- a/.github/workflows/submit-contract-sizes.yml
+++ b/.github/workflows/submit-contract-sizes.yml
@@ -14,7 +14,7 @@ jobs:
   submit-contract-sizes:
     permissions:
       pull-requests: write
-    runs-on: self-hosted
+    runs-on: [self-hosted, Linux, X64, ink]
     timeout-minutes: 5
     if: >
       github.event.workflow_run.event == 'pull_request' &&