workspace: add additional sandbox hermeticity flags

Closes monogon-dev/monogon#176

Change-Id: Icc303a235bc441585301eab4f6a68035bb0c7fee
Reviewed-on: https://review.monogon.dev/c/monogon/+/2700
Reviewed-by: Serge Bazanski <serge@monogon.tech>
Tested-by: Jenkins CI
diff --git a/third_party/bazelrc/aspect/BUILD.bazel b/third_party/bazelrc/aspect/BUILD.bazel
new file mode 100644
index 0000000..4a870ae
--- /dev/null
+++ b/third_party/bazelrc/aspect/BUILD.bazel
@@ -0,0 +1,14 @@
+"Aspect bazelrc presets; see https://docs.aspect.build/guides/bazelrc"
+
+load("@aspect_bazel_lib//lib:bazelrc_presets.bzl", "write_aspect_bazelrc_presets")
+
+write_aspect_bazelrc_presets(
+    name = "update_aspect_bazelrc_presets",
+    presets = [
+        "bazel7",
+        "ci",
+        "convenience",
+        "correctness",
+        "performance",
+    ],
+)