Add .scl environment restrictions https://github.com/bazelbuild/bazel/commit/a0cd355347b57b17f28695a84af168f9fd200ba1 added the Starlark Configuration Language (SCL), a restricted subset of .bzl that is basically pure Starlark + Bazel-style load(), visibility(), and struct(). But that CL only made .scl files loadable. This CL completes the job by actually restricting .scl files to only access those symbols. The .scl predeclared environment is determined in StarlarkGlobals, like other Starlark evaluation contexts. BzlLoadFunction and BzlCompileFunction branch on whether the key is for .scl, and if so use that environment instead of their normal logic. Added tests that .scl can use the mentioned symbols and cannot use anything else. PiperOrigin-RevId: 534144656 Change-Id: I6cca8db234beaf74529a2a7efbdb40d0420fa9c1
{Fast, Correct} - Choose two
Build and test software of any size, quickly and reliably.
Speed up your builds and tests: Bazel rebuilds only what is necessary. With advanced local and distributed caching, optimized dependency analysis and parallel execution, you get fast and incremental builds.
One tool, multiple languages: Build and test Java, C++, Android, iOS, Go, and a wide variety of other language platforms. Bazel runs on Windows, macOS, and Linux.
Scalable: Bazel helps you scale your organization, codebase, and continuous integration solution. It handles codebases of any size, in multiple repositories or a huge monorepo.
Extensible to your needs: Easily add support for new languages and platforms with Bazel's familiar extension language. Share and re-use language rules written by the growing Bazel community.
Follow our tutorials:
To report a security issue, please email security@bazel.build with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue. Our vulnerability management team will respond within 3 working days of your email. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline.
See CONTRIBUTING.md
