version that should fail

.bazelrc

@@ -62,6 +62,14 @@ build:remote_cache --noslim_profile
 build:remote_cache --remote_cache=grpcs://remote.buildbuddy.io
 build:remote_cache --remote_timeout=3600
 
+build:sandboxed --strategy=SwiftCompile=sandboxed
+build:sandboxed --spawn_strategy=sandboxed
+build:sandboxed --strategy=Genrule=sandboxed,local
+build:sandboxed --strategy=StoryboardCompile=sandboxed,local
+#build:sandboxed --strategy=CleaningFramework=sandboxed,local
+#build:sandboxed --strategy=StoryboardLink=sandboxed,local
+# build:sandboxed --strategy=ProcessAndSign=sandboxed,local
+
 # By default don't upload local results to remote cache, only CI does this.
 build --noremote_upload_local_results
 build:ci --remote_upload_local_results

.github/workflows/tests.yml

@@ -38,13 +38,7 @@ jobs:
       - if: matrix.sandbox
         name: Enable sandbox mode
         run: |
-          echo "build --strategy=SwiftCompile=sandboxed" >> user.bazelrcc
-          echo "build --spawn_strategy=sandboxed" >> user.bazelrc
-          echo "build --strategy=Genrule=sandboxed,local" >> user.bazelrc
-          echo "build --strategy=StoryboardCompile=sandboxed,local" >> user.bazelr
-          echo "build --strategy=CleaningFramework=sandboxed,local" >> user.bazelr
-          echo "build --strategy=StoryboardLink=sandboxed,local" >> user.bazelr
-          echo "build --strategy=ProcessAndSign=sandboxed,local" >> user.bazelr
+          echo "build --config=sandboxed" >> user.bazelrcc
       - name: Build and Test
         run: |
           # non-iOS tests