diff --git a/.github/workflows/integrate.yaml b/.github/workflows/integrate.yaml
index e745339..e48947a 100644
--- a/.github/workflows/integrate.yaml
+++ b/.github/workflows/integrate.yaml
@@ -4,24 +4,16 @@ name: CI
 on:
   workflow_call:
     secrets:
-      charmcraft-credentials:
+      CHARMCRAFT_CREDENTIALS:
         required: true
 
 jobs:
-
   lib-check:
     name: Check libraries
-    runs-on: ubuntu-20.04
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v2
-        with:
-          fetch-depth: 0
-      - name: Check libs
-        uses: canonical/charming-actions/check-libraries@2.1.1
-        with:
-          credentials: "${{ secrets.charmcraft-credentials }}"
-          github-token: "${{ secrets.GITHUB_TOKEN }}"
+    uses: canonical/charmed-kubeflow-workflows/.github/workflows/_quality-checks.yaml@main
+    secrets: inherit
+    with:
+        charm-path: "."
 
   lint:
     name: Lint Check
diff --git a/.github/workflows/on_pull_request.yaml b/.github/workflows/on_pull_request.yaml
index aabbaf7..d6fe0c3 100644
--- a/.github/workflows/on_pull_request.yaml
+++ b/.github/workflows/on_pull_request.yaml
@@ -12,12 +12,11 @@ jobs:
   tests:
     name: Run Tests
     uses: ./.github/workflows/integrate.yaml
-    secrets:
-      charmcraft-credentials: ${{ secrets.CHARMCRAFT_CREDENTIALS }}
+    secrets: inherit
 
   # publish runs in parallel with tests, as we always publish in this situation
   publish-charm:
     name: Publish Charm
     uses: ./.github/workflows/publish.yaml
-    secrets:
-      CHARMCRAFT_CREDENTIALS: ${{ secrets.CHARMCRAFT_CREDENTIALS }}
+    secrets: inherit
+
diff --git a/.github/workflows/on_push.yaml b/.github/workflows/on_push.yaml
index 3ccfb28..bb989f0 100644
--- a/.github/workflows/on_push.yaml
+++ b/.github/workflows/on_push.yaml
@@ -3,14 +3,13 @@ name: On Push
 # On push to a "special" branch, we:
 # * always publish to charmhub at latest/edge/branchname
 # * always run tests
-# where a "special" branch is one of main/master or track/**, as
+# where a "special" branch is one of main or track/**, as
 # by convention these branches are the source for a corresponding
 # charmhub edge channel.
 
 on:
   push:
     branches:
-    - master
     - main
     - track/**
 
@@ -19,13 +18,12 @@ jobs:
   tests:
     name: Run Tests
     uses: ./.github/workflows/integrate.yaml
-    secrets:
-      charmcraft-credentials: ${{ secrets.CHARMCRAFT_CREDENTIALS }}
+    secrets: inherit
 
   # publish runs in series with tests, and only publishes if tests passes
   publish-charm:
     name: Publish Charm
     needs: tests
     uses: ./.github/workflows/publish.yaml
-    secrets:
-      CHARMCRAFT_CREDENTIALS: ${{ secrets.CHARMCRAFT_CREDENTIALS }}
+    secrets: inherit
+