cache github token
diff --git a/buildkite/bazelci.py b/buildkite/bazelci.py
index 5293b18..ba3cc44 100644
--- a/buildkite/bazelci.py
+++ b/buildkite/bazelci.py
@@ -379,16 +379,22 @@
def fetch_github_token():
+ if GITHUB_TOKEN:
+ return GITHUB_TOKEN
try:
execute_command(
["gsutil", "cp", "gs://bazel-encrypted-secrets/github-token.enc", "github-token.enc"])
- return subprocess.check_output(["gcloud", "kms", "decrypt", "--location", "global", "--keyring", "buildkite",
- "--key", "github-token", "--ciphertext-file", "github-token.enc",
- "--plaintext-file", "-"]).decode("utf-8").strip()
+ GITHUB_TOKEN = subprocess.check_output(["gcloud", "kms", "decrypt", "--location", "global", "--keyring", "buildkite",
+ "--key", "github-token", "--ciphertext-file", "github-token.enc",
+ "--plaintext-file", "-"]).decode("utf-8").strip()
+ return GITHUB_TOKEN
finally:
os.remove("github-token.enc")
+GITHUB_TOKEN = None
+
+
def owner_repository_from_url(git_repository):
m = re.search(r"/([^/]+)/([^/]+)\.git$", git_repository)
owner = m.group(1)
