Fix docs and add read-only keys to workflow

TraceMachina · Jul 26, 2024 · 22219cf · 22219cf
1 parent 534a102
commit 22219cf
Show file tree

Hide file tree

Showing 2 changed files with 17 additions and 4 deletions.
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
@@ -20,7 +20,6 @@ jobs:
     runs-on: ubuntu-22.04
     environment: production
     # Only run on main branch.
-    if: github.ref == 'refs/heads/main'
     steps:
     - name: Checkout
       uses: >- # v4.1.1
@@ -30,7 +29,8 @@ jobs:
         bazel-contrib/setup-bazel@b388b84bb637e50cdae241d0f255670d4bd79f29
       with:
         bazelisk-cache: true
-    - name: Run Bazel tests
+    - name: Run Bazel tests for non-PR events
+      if: ${{ github.ref == 'refs/heads/main' }}
       shell: bash
       run: |
         bazel test \
@@ -42,6 +42,21 @@ jobs:
           --remote_header=x-nativelink-project=nativelink-ci \
           //...
 
+    - name: Run Bazel tests for PR events
+      if: ${{ github.ref != 'refs/heads/main' }}
+      shell: bash
+      run: |
+        bazel test \
+          --remote_cache=${{ vars.NATIVELINK_COM_REMOTE_CACHE_URL }} \
+          --remote_header=${{ vars.NATIVELINK_COM_API_HEADER_RO }} \
+          --bes_backend=${{ vars.NATIVELINK_COM_BES_URL }} \
+          --bes_header=${{ vars.NATIVELINK_COM_API_HEADER_RO }} \
+          --bes_results_url=${{ vars.NATIVELINK_COM_BES_RESULTS_URL }} \
+          --remote_header=x-nativelink-project=nativelink-ci-pr \
+          --nogenerate_json_trace_profile \
+          --remote_upload_local_results=false \
+          //...
+
   docker-compose-compiles-nativelink:
     # The type of runner that the job will run on.
     runs-on: large-ubuntu-22.04

diff --git a/docs/src/content/docs/nativelink-cloud/api-key.mdx b/docs/src/content/docs/nativelink-cloud/api-key.mdx
@@ -16,7 +16,6 @@ your `.github/workflows` folder with the following added to your `jobs` section:
 jobs:
   build-test:
     runs-on: ubuntu-22.04
-    environment: production
     steps:
     - name: Checkout
       uses: >- # v4.1.1
@@ -35,7 +34,6 @@ jobs:
           --bes_backend=${{ vars.NATIVELINK_COM_BES_URL }} \
           --bes_header=${{ secrets.NATIVELINK_COM_API_HEADER }} \
           --bes_results_url=${{ vars.NATIVELINK_COM_BES_RESULTS_URL }} \
-          --remote_header=x-nativelink-project=nativelink-ci \
           //...
 ```