diff --git a/internal/templates/.github/workflows/pr.yaml.tmpl b/internal/templates/.github/workflows/pr.yaml.tmpl
index deabd86d..ec36afab 100644
--- a/internal/templates/.github/workflows/pr.yaml.tmpl
+++ b/internal/templates/.github/workflows/pr.yaml.tmpl
@@ -22,7 +22,7 @@ env:
 
 jobs:
   setup-webkit:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     outputs:
       version: {{ ghExpr "steps.version.outputs.version" }}
     steps:
@@ -54,7 +54,7 @@ jobs:
           if-no-files-found: error
   secret-scan:
     name: gitleaks
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     steps:
       - name: Checkout Repository
         uses: actions/checkout@v5
@@ -67,7 +67,7 @@ jobs:
           GITHUB_TOKEN: {{ ghSecret "GITHUB_TOKEN" }}
           GITLEAKS_LICENSE: {{ ghSecret "ORG_GITLEAKS_LICENSE" }}
   detect-changes:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     outputs:
 {{- range .Apps }}
       {{ .Name }}-changed: {{ ghExpr (printf "steps.filter.outputs.%s" .Name) }}
@@ -100,7 +100,7 @@ jobs:
               - 'turbo.json'
 
   drift-detection:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: setup-webkit
     steps:
       - name: Checkout Repository
@@ -148,7 +148,7 @@ jobs:
           echo "Run 'webkit update' to sync your project with the latest templates"
           exit 1
   app-json-diff:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: setup-webkit
     steps:
       - name: Checkout Repository
@@ -327,7 +327,7 @@ jobs:
           issue-number: {{ ghExpr "github.event.pull_request.number" }}
           private-key: {{ ghSecret "ORG_GITHUB_APP_PRIVATE_KEY" }}
   validate-app-json:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: setup-webkit
     steps:
       - name: Checkout Repository
diff --git a/internal/templates/.github/workflows/release.yaml.tmpl b/internal/templates/.github/workflows/release.yaml.tmpl
index 3f4b970a..dc2ea426 100644
--- a/internal/templates/.github/workflows/release.yaml.tmpl
+++ b/internal/templates/.github/workflows/release.yaml.tmpl
@@ -21,7 +21,7 @@ env:
 jobs:
   # Setup WebKit CLI
   setup-webkit:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     outputs:
       version: {{ ghExpr "steps.version.outputs.version" }}
     steps:
@@ -105,7 +105,7 @@ jobs:
 
   # Remove Unwanted Containers
   cleanup-containers:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: build-and-push
     permissions:
       packages: write
@@ -391,7 +391,7 @@ jobs:
 
   # Notify Slack on successful release
   notify-success:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: [{{- $first := true }}{{- range $app := .Apps }}{{- if and (eq $app.Infra.Provider "digitalocean") (eq $app.Infra.Type "container") }}{{- if not $first }}, {{ end }}{{- $first = false }}deploy-app-{{ $app.Name }}{{- else if and (or (eq $app.Infra.Provider "digitalocean") (eq $app.Infra.Provider "hetzner")) (eq $app.Infra.Type "vm") }}{{- if not $first }}, {{ end }}{{- $first = false }}deploy-vm-{{ $app.Name }}{{- end }}{{- end }}]
     if: success()
     steps:
@@ -418,7 +418,7 @@ jobs:
 
   # Notify Slack on release failure
   notify-failure:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-slim
     needs: [build-and-push{{- range $app := .Apps }}{{- if and (eq $app.Infra.Provider "digitalocean") (eq $app.Infra.Type "container") }}, deploy-app-{{ $app.Name }}{{- else if and (or (eq $app.Infra.Provider "digitalocean") (eq $app.Infra.Provider "hetzner")) (eq $app.Infra.Type "vm") }}, deploy-vm-{{ $app.Name }}{{- end }}{{- end }}]
     if: failure()
     steps: