.github/workflows: Set the BB API header only if the secret is set.

The secret will not be set on pull requests, intentionally.
opentibia · May 13, 2024 · 72e6a06 · 72e6a06
1 parent eea778d
commit 72e6a06
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/.github/workflows/ci-bazel.yml b/.github/workflows/ci-bazel.yml
@@ -118,7 +118,7 @@ jobs:
       # More useful with e.g. npm.
 
     - name: rbe bazel build
-      run: bazel build --config=remote --build_metadata=ROLE=CI --remote_header=x-buildbuddy-api-key=${{ secrets.BUILDBUDDY_ORG_API_KEY }} //:yatc
+      run: bazel build --config=remote --build_metadata=ROLE=CI ${BUILDBUDDY_ORG_API_KEY:+--remote_header=x-buildbuddy-api-key=${BUILDBUDDY_ORG_API_KEY}} //:yatc
 
   bazel_test_buildbuddy:
     runs-on: ubuntu-latest
@@ -154,10 +154,12 @@ jobs:
       # More useful with e.g. npm.
 
     - name: rbe bazel test
-      run: bazel test --config=remote --build_metadata=ROLE=CI --remote_header=x-buildbuddy-api-key=${{ secrets.BUILDBUDDY_ORG_API_KEY }} //:util_test
+      run: bazel test --config=remote --build_metadata=ROLE=CI ${BUILDBUDDY_ORG_API_KEY:+--remote_header=x-buildbuddy-api-key=${BUILDBUDDY_ORG_API_KEY}} //:util_test
       # Temporarily allow errors. This is known to fail at this time due to insufficient
       # number of binary packages installed by the rules_libsdl12.
       continue-on-error: true
+      env:
+        BUILDBUDDY_ORG_API_KEY: ${{ secrets.BUILDBUDDY_ORG_API_KEY }}
 
     - name: print ldd
       run: ldd bazel-bin/util_test