Skip to content

Commit f53ce0d

Browse files
trxcllnttrxcllnt
authored
Use GHA id-token for sccache-dist auth token (#5425)
Use the GitHub OIDC token for sccache-dist auth instead of the org's `secrets.GIST_REPO_READ_ORG_GITHUB_TOKEN` personal access token. This change is already implemented, this PR just removes any references to `GIST_REPO_READ_ORG_GITHUB_TOKEN`.
1 parent 36a53b6 commit f53ce0d

3 files changed

Lines changed: 0 additions & 20 deletions

File tree

‎.github/workflows/build.yaml‎

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,6 @@ jobs:
4343
node_type: cpu16
4444
script: ci/build_cpp.sh
4545
sha: ${{ inputs.sha }}
46-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
4746
python-build:
4847
needs: [cpp-build]
4948
secrets: inherit
@@ -54,7 +53,6 @@ jobs:
5453
date: ${{ inputs.date }}
5554
script: ci/build_python.sh
5655
sha: ${{ inputs.sha }}
57-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
5856
# Build a conda package for each CUDA x ARCH x minimum supported Python version
5957
matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
6058
upload-conda:
@@ -94,7 +92,6 @@ jobs:
9492
node_type: cpu16
9593
package-name: libcugraph
9694
package-type: cpp
97-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
9895
wheel-publish-libcugraph:
9996
needs: wheel-build-libcugraph
10097
secrets: inherit
@@ -119,7 +116,6 @@ jobs:
119116
script: ci/build_wheel_pylibcugraph.sh
120117
package-name: pylibcugraph
121118
package-type: python
122-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
123119
# Build a wheel for each CUDA x ARCH x minimum supported Python version
124120
matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
125121
wheel-publish-pylibcugraph:
@@ -147,7 +143,6 @@ jobs:
147143
script: ci/build_wheel_cugraph.sh
148144
package-name: cugraph
149145
package-type: python
150-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
151146
# Build a wheel for each CUDA x ARCH x minimum supported Python version
152147
matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
153148
wheel-publish-cugraph:

‎.github/workflows/pr.yaml‎

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -218,7 +218,6 @@ jobs:
218218
build_type: pull-request
219219
node_type: cpu16
220220
script: ci/build_cpp.sh
221-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
222221
conda-cpp-tests:
223222
needs: [conda-cpp-build, changed-files]
224223
secrets: inherit
@@ -227,7 +226,6 @@ jobs:
227226
with:
228227
build_type: pull-request
229228
script: ci/test_cpp.sh
230-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
231229
conda-cpp-checks:
232230
needs: conda-cpp-build
233231
secrets: inherit
@@ -242,7 +240,6 @@ jobs:
242240
with:
243241
build_type: pull-request
244242
script: ci/build_python.sh
245-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
246243
# Build a conda package for each CUDA x ARCH x minimum supported Python version
247244
matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
248245
conda-python-tests:
@@ -253,7 +250,6 @@ jobs:
253250
with:
254251
build_type: pull-request
255252
script: ci/test_python.sh
256-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
257253
conda-notebook-tests:
258254
needs: [conda-python-build, changed-files]
259255
secrets: inherit
@@ -288,7 +284,6 @@ jobs:
288284
script: ci/build_wheel_libcugraph.sh
289285
package-name: libcugraph
290286
package-type: cpp
291-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
292287
wheel-build-pylibcugraph:
293288
needs: wheel-build-libcugraph
294289
secrets: inherit
@@ -299,7 +294,6 @@ jobs:
299294
script: ci/build_wheel_pylibcugraph.sh
300295
package-name: pylibcugraph
301296
package-type: python
302-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
303297
# Build a wheel for each CUDA x ARCH x minimum supported Python version
304298
matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
305299
wheel-tests-pylibcugraph:
@@ -310,7 +304,6 @@ jobs:
310304
with:
311305
build_type: pull-request
312306
script: ci/test_wheel_pylibcugraph.sh
313-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
314307
wheel-build-cugraph:
315308
needs: wheel-build-pylibcugraph
316309
secrets: inherit
@@ -321,7 +314,6 @@ jobs:
321314
script: ci/build_wheel_cugraph.sh
322315
package-name: cugraph
323316
package-type: python
324-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
325317
# Build a wheel for each CUDA x ARCH x minimum supported Python version
326318
matrix_filter: group_by({CUDA_VER, ARCH}) | map(min_by(.PY_VER | split(".") | map(tonumber)))
327319
wheel-tests-cugraph:
@@ -332,7 +324,6 @@ jobs:
332324
with:
333325
build_type: pull-request
334326
script: ci/test_wheel_cugraph.sh
335-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
336327
devcontainer:
337328
secrets: inherit
338329
needs: telemetry-setup
@@ -341,12 +332,10 @@ jobs:
341332
arch: '["amd64", "arm64"]'
342333
cuda: '["13.1"]'
343334
node_type: "cpu8"
344-
rapids-aux-secret-1: GIST_REPO_READ_ORG_GITHUB_TOKEN
345335
env: |
346336
SCCACHE_DIST_MAX_RETRIES=inf
347337
SCCACHE_SERVER_LOG=sccache=debug
348338
SCCACHE_DIST_FALLBACK_TO_LOCAL_COMPILE=false
349-
SCCACHE_DIST_AUTH_TOKEN_VAR=RAPIDS_AUX_SECRET_1
350339
build_command: |
351340
sccache --zero-stats;
352341
build-all -j0 --verbose -DBUILD_CUGRAPH_MG_TESTS=ON 2>&1 | tee telemetry-artifacts/build.log;

‎.github/workflows/test.yaml‎

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,6 @@ jobs:
4141
date: ${{ inputs.date }}
4242
script: ci/test_cpp.sh
4343
sha: ${{ inputs.sha }}
44-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
4544
conda-python-tests:
4645
secrets: inherit
4746
uses: rapidsai/shared-workflows/.github/workflows/conda-python-tests.yaml@main
@@ -51,7 +50,6 @@ jobs:
5150
date: ${{ inputs.date }}
5251
script: ci/test_python.sh
5352
sha: ${{ inputs.sha }}
54-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
5553
wheel-tests-pylibcugraph:
5654
secrets: inherit
5755
uses: rapidsai/shared-workflows/.github/workflows/wheels-test.yaml@main
@@ -61,7 +59,6 @@ jobs:
6159
date: ${{ inputs.date }}
6260
sha: ${{ inputs.sha }}
6361
script: ci/test_wheel_pylibcugraph.sh
64-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN
6562
wheel-tests-cugraph:
6663
secrets: inherit
6764
uses: rapidsai/shared-workflows/.github/workflows/wheels-test.yaml@main
@@ -71,4 +68,3 @@ jobs:
7168
date: ${{ inputs.date }}
7269
sha: ${{ inputs.sha }}
7370
script: ci/test_wheel_cugraph.sh
74-
sccache-dist-token-secret-name: GIST_REPO_READ_ORG_GITHUB_TOKEN

0 commit comments

Comments
 (0)