Use GHA id-token as sccache-dist auth token in CI (#663)

Authors:
  - Paul Taylor (https://github.com/trxcllnt)

Approvers:
  - James Lamb (https://github.com/jameslamb)

URL: #663

Author: trxcllnt

.github/workflows/build-all-rapids-repos.yml

@@ -47,13 +47,11 @@ jobs:
       arch: '["amd64", "arm64"]'
       cuda: '["12.9", "13.1"]'
       node_type: cpu16
-      rapids-aux-secret-1: GIST_REPO_READ_ORG_GITHUB_TOKEN
       timeout-minutes: 720
       # 1. Prohibit sccache from shutting down automatically
       # 2. Infinitely retry transient errors
       # 3. Enable debug logging to track cache misses
       # 4. Never fallback to locally compiling
-      # 5. Use RAPIDS_AUX_SECRET_1 as the sccache-dist auth token
       env: |
         CONDA_ENV_CREATE_QUIET=1
         INCLUDE_REPOS="${{ matrix.libs }}"
@@ -62,7 +60,6 @@ jobs:
         SCCACHE_SERVER_LOG=sccache=debug
         SCCACHE_DIST_MAX_RETRIES=inf
         SCCACHE_DIST_FALLBACK_TO_LOCAL_COMPILE=false
-        SCCACHE_DIST_AUTH_TOKEN_VAR=RAPIDS_AUX_SECRET_1
       build_command: |
         function begin_group() {
           local blue="34"
@@ -100,14 +97,6 @@ jobs:
           return "$exit_code"
         }
 
-        if test -n "${DISABLE_SCCACHE:+x}"; then
-          . /opt/devcontainer/bin/update-envvars.sh;
-          for VAR in RUSTC_WRAPPER CMAKE_C_COMPILER_LAUNCHER CMAKE_CXX_COMPILER_LAUNCHER CMAKE_CUDA_COMPILER_LAUNCHER; do
-            reset_envvar "$VAR";
-            override_envvar "$VAR" "";
-          done
-        fi
-
         # Clone all the repos
         run_command "Clone RAPIDS repositories" \
           clone-all -j$(nproc) -v -q --clone-upstream --depth 1 --single-branch --shallow-submodules --no-update-env;

.github/workflows/test-rapids-build-times.yml

@@ -54,22 +54,18 @@ jobs:
       arch: '["amd64", "arm64"]'
       cuda: '["12.9", "13.1"]'
       node_type: ${{ inputs.node_type }}
-      rapids-aux-secret-1: GIST_REPO_READ_ORG_GITHUB_TOKEN
       timeout-minutes: 720
       # 1. Prohibit sccache from shutting down automatically
       # 2. Infinitely retry transient errors
       # 3. Enable debug logging to track cache misses
       # 4. Never fallback to locally compiling
-      # 5. Use RAPIDS_AUX_SECRET_1 as the sccache-dist auth token
       env: |
         CONDA_ENV_CREATE_QUIET=1
         PARALLEL_LEVEL=0
         SCCACHE_IDLE_TIMEOUT=0
         SCCACHE_SERVER_LOG=sccache=debug
         SCCACHE_DIST_MAX_RETRIES=inf
         SCCACHE_DIST_FALLBACK_TO_LOCAL_COMPILE=false
-        SCCACHE_DIST_AUTH_TOKEN_VAR=RAPIDS_AUX_SECRET_1
-        TIME=real:\t%E
         ${{ matrix.env }}
       build_command: |
         function begin_group() {