From 846108c1a823a6fe0d9f6e29a142a2fad417440c Mon Sep 17 00:00:00 2001
From: Tiago Costa <tiagoffcc@hotmail.com>
Date: Mon, 8 Feb 2021 17:00:39 +0000
Subject: [PATCH] chore(NA): remove write permissions on Bazel remote cache for
 PRs

---
 src/dev/ci_setup/setup_env.sh | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/src/dev/ci_setup/setup_env.sh b/src/dev/ci_setup/setup_env.sh
index 0b835d4b9fa94..2deafaaf35a94 100644
--- a/src/dev/ci_setup/setup_env.sh
+++ b/src/dev/ci_setup/setup_env.sh
@@ -180,6 +180,15 @@ fi
 ###
 cp -f "$KIBANA_DIR/src/dev/ci_setup/.bazelrc-ci" "$HOME/.bazelrc";
 
+###
+### remove write permissions on buildbuddy remote cache for prs
+###
+if [[ "$ghprbPullId" ]] ; then
+  echo "# Appended by $KIBANA_DIR/src/dev/ci_setup/setup.sh" >> "$HOME/.bazelrc"
+  echo "# Uploads logs & artifacts without writing to cache" >> "$HOME/.bazelrc"
+  echo "build --noremote_upload_local_results" >> "$HOME/.bazelrc"
+fi
+
 ###
 ### append auth token to buildbuddy into "$HOME/.bazelrc";
 ###