diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml
index 6d72232c6..9e5a54a66 100644
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@@ -10,9 +10,10 @@ on:
       - main
 jobs:
   collect:
+    runs-on: aws-cdk_ubuntu-latest_4-core
     permissions:
       id-token: write
-    if: github.repository == 'aws-cdk-cli/aws-cdk-cli'
+    if: github.repository == 'aws/aws-cdk-cli'
     steps:
       - name: Checkout
         uses: actions/checkout@v4
diff --git a/.projenrc.ts b/.projenrc.ts
index ccca08182..6b6e5f6c8 100644
--- a/.projenrc.ts
+++ b/.projenrc.ts
@@ -1283,7 +1283,7 @@ new CdkCliIntegTestsWorkflow(repo, {
 });
 
 new CodeCovWorkflow(repo, {
-  restrictToRepos: ['aws-cdk-cli/aws-cdk-cli'],
+  restrictToRepos: ['aws/aws-cdk-cli'],
   packages: [cli.name],
 });
 
diff --git a/projenrc/codecov.ts b/projenrc/codecov.ts
index 92219c8a3..2235cb19a 100644
--- a/projenrc/codecov.ts
+++ b/projenrc/codecov.ts
@@ -24,6 +24,7 @@ export class CodeCovWorkflow extends Component {
     });
 
     this.workflow.addJob('collect', {
+      runsOn: ['aws-cdk_ubuntu-latest_4-core'],
       permissions: { idToken: JobPermission.WRITE },
       if: props.restrictToRepos.map(r => `github.repository == '${r}'`).join(' || '),
       steps: [