From 7bc329dc15e8fa0615c96b00a845b50a32404f52 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thi=20Do=C3=A3n?= <t@thi.im>
Date: Wed, 27 Jul 2022 11:12:41 +0900
Subject: [PATCH] Enable sandboxing for swift builds

Prevents issues with non-hermetic bugs like
https://github.com/bazelbuild/rules_swift/pull/865.
---
 .bazelrc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/.bazelrc b/.bazelrc
index ceae641f3..2219123b4 100644
--- a/.bazelrc
+++ b/.bazelrc
@@ -8,3 +8,7 @@ build --macos_minimum_os=10.15
 
 # Make sure no warnings slip into the C++ tools we vendor
 build --features treat_warnings_as_errors
+
+# The default strategy is worker, which has sandboxing disabled by default,
+# which can hide issues with non-hermetic bugs.
+build --strategy=SwiftCompile=sandboxed