Function main

github-actions/bazel/configure-remote/index.ts:18–48

()

import {exportVariable, getBooleanInput, getInput} from '@actions/core';

async function main() {
  const isWindows = os.platform() === 'win32';
  const bazelRcPath = getInput('bazelrc', {required: false, trimWhitespace: true});
  const allowWindowsRbe = getBooleanInput('allow_windows_rbe', {required: true});
  const trustedBuild = getBooleanInput('trusted_build', {required: false});
  const credential =
    getInput('google_credential', {required: false, trimWhitespace: true}) ||
    getEmbeddedCredential();

  const destPath = isWindows
    ? path.join(process.env.APPDATA!, 'gcloud/application_default_credentials.json')
    : path.join(process.env.HOME!, '.config/gcloud/application_default_credentials.json');

  await fs.promises.mkdir(path.dirname(destPath), {recursive: true});
  await fs.promises.writeFile(destPath, credential, 'utf8');

  const configMode = isWindows && !allowWindowsRbe ? 'remote-cache' : 'remote';

  if (bazelRcPath) {
    let content = await readFileGracefully(bazelRcPath);
    content += ['', `build --config=${configMode}`, 'test --flaky_test_attempts=3'].join('\n');
    if (trustedBuild) {
      content += `\nbuild --config=trusted-build`;
    }
    await fs.promises.writeFile(bazelRcPath, content, 'utf8');
  }

  // Expose application credentials as variable. This may not be necessary with the default
  // path being used for credentials, but it's helpful when we cross boundaries with e.g. WSL.
  exportVariable('GOOGLE_APPLICATION_CREDENTIALS', destPath);
}

async function readFileGracefully(filePath: string): Promise<string> {
  try {