From c0318842fd4b63cece7d34e47c13832ff6774089 Mon Sep 17 00:00:00 2001
From: Cody Balos <balos1@llnl.gov>
Date: Wed, 15 May 2024 16:22:47 -0700
Subject: [PATCH] CI: Use LC template for gitlab id tokens and limit github
 actions push events (#479)

Addresses https://hpc.llnl.gov/technical-bulletins/bulletin-568 and also
limits our github action workflows to only run on push to certain
branches.
---
 .github/workflows/double-precision.yml   | 3 +++
 .github/workflows/extended-precision.yml | 4 ++++
 .github/workflows/single-precision.yml   | 4 ++++
 .gitlab-ci.yml                           | 2 ++
 4 files changed, 13 insertions(+)

diff --git a/.github/workflows/double-precision.yml b/.github/workflows/double-precision.yml
index b0ca087ef4..cda708a4a9 100644
--- a/.github/workflows/double-precision.yml
+++ b/.github/workflows/double-precision.yml
@@ -3,6 +3,9 @@ name: Build and Test - Ubuntu/gcc double precision (TPLs, no GPUs)
 
 on:
   push:
+    branches:
+      - main
+      - develop
   pull_request:
   merge_group:
   workflow_dispatch:
diff --git a/.github/workflows/extended-precision.yml b/.github/workflows/extended-precision.yml
index 51678b6e70..2c521b2fad 100644
--- a/.github/workflows/extended-precision.yml
+++ b/.github/workflows/extended-precision.yml
@@ -2,6 +2,10 @@
 name: Build and Test - Ubuntu/gcc extended precision (TPLs, no GPUs)
 
 on:
+  push:
+    branches:
+      - main
+      - develop
   pull_request:
   merge_group:
   workflow_dispatch:
diff --git a/.github/workflows/single-precision.yml b/.github/workflows/single-precision.yml
index 30a53b0402..d986643256 100644
--- a/.github/workflows/single-precision.yml
+++ b/.github/workflows/single-precision.yml
@@ -2,6 +2,10 @@
 name: Build and Test - Ubuntu/gcc single precision (TPLs, no GPUs)
 
 on:
+  push:
+    branches:
+      - main
+      - develop
   pull_request:
   merge_group:
   workflow_dispatch:
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index 63622ebb08..c02b239373 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -126,6 +126,8 @@ stages:
 
 # This is where jobs are included.
 include:
+  - project: 'lc-templates/id_tokens'
+    file: 'id_tokens.yml'
   - local: .gitlab/quartz-templates.yml
   - local: .gitlab/quartz-jobs.yml
   - local: .gitlab/lassen-templates.yml