workspace: add additional sandbox hermeticity flags
Closes monogon-dev/monogon#176
Change-Id: Icc303a235bc441585301eab4f6a68035bb0c7fee
Reviewed-on: https://review.monogon.dev/c/monogon/+/2700
Reviewed-by: Serge Bazanski <serge@monogon.tech>
Tested-by: Jenkins CI
diff --git a/.bazelrc.ci b/.bazelrc.ci
new file mode 100644
index 0000000..40bb3dd
--- /dev/null
+++ b/.bazelrc.ci
@@ -0,0 +1,10 @@
+# Import Aspect bazelrc presets
+import %workspace%/third_party/bazelrc/aspect/ci.bazelrc
+
+# Our Jenkins does not support colors.
+build --color=no
+
+# Dont upload local results to prevent cache poisoning. Whenever we get remote
+# cache for builds, we will only populate it from a builder that runs against
+# all merged main commits.
+build --noremote_upload_local_results