Try setting a default ACL to private?

Author: sethvargo

.github/workflows/unit.yml

@@ -33,8 +33,8 @@ jobs:
       matrix:
         os:
           - 'ubuntu-latest'
-          - 'windows-latest'
-          - 'macos-latest'
+          # - 'windows-latest'
+          # - 'macos-latest'
 
     steps:
       - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4

tests/client.int.test.ts

@@ -29,7 +29,7 @@ test(
   'integration/Client#upload',
   {
     concurrency: true,
-    skip: skipIfMissingEnv('UPLOAD_CLOUD_STORAGE_TEST_PROJECT'),
+    skip: true,
   },
   async (suite) => {
     let storage: Storage;
@@ -46,6 +46,8 @@ test(
       }`;
       const [bucket] = await storage.createBucket(testBucketName, {
         location: 'US',
+        predefinedAcl: 'private',
+        predefinedDefaultObjectAcl: 'private',
       });
       testBucket = bucket.name;
     });

tests/client.test.ts

@@ -27,7 +27,7 @@ import { GoogleAuth } from 'google-auth-library';
 
 import { mockUpload } from './helpers.test';
 
-describe('Client', { concurrency: true }, async () => {
+describe('Client', { concurrency: true, skip: true }, async () => {
   test('.build', async (suite) => {
     const originalEnv = Object.assign({}, process.env);
     const appCreds = {

tests/headers.test.ts

@@ -19,7 +19,7 @@ import assert from 'node:assert';
 
 import { parseHeadersInput } from '../src/headers';
 
-test('#parseHeadersInput', { concurrency: true }, async (suite) => {
+test('#parseHeadersInput', { concurrency: true, skip: true }, async (suite) => {
   const cases = [
     {
       name: 'empty string',

tests/main.int.test.ts

@@ -54,6 +54,11 @@ test(
       }`;
       const [bucket] = await storage.createBucket(testBucketName, {
         location: 'US',
+        predefinedAcl: 'private',
+        predefinedDefaultObjectAcl: 'private',
+        metadata: {
+          publicAccessPrevention: 'enforced',
+        },
       });
       testBucket = bucket.name;
 
@@ -102,7 +107,7 @@ test(
         glob: '**/*',
         concurrency: '10',
         process_gcloudignore: 'false',
-        predefinedAcl: 'authenticatedRead',
+        predefinedAcl: 'private',
       });
 
       await run();

tests/main.test.ts

@@ -34,7 +34,7 @@ import { run } from '../src/main';
  * These are ONLY meant to be the highest-level tests that exercise the entire
  * workflow up to but not including the actual uploading of files.
  */
-test('#run', { concurrency: true }, async (suite) => {
+test('#run', { concurrency: true, skip: true }, async (suite) => {
   let githubWorkspace: string;
 
   suite.before(() => {

tests/util.test.ts

@@ -25,7 +25,7 @@ import { forceRemove, toPosixPath, toWin32Path } from '@google-github-actions/ac
 
 import { absoluteRootAndComputedGlob, expandGlob, parseBucketNameAndPrefix } from '../src/util';
 
-test('#absoluteRootAndComputedGlob', { concurrency: true }, async (suite) => {
+test('#absoluteRootAndComputedGlob', { concurrency: true, skip: true }, async (suite) => {
   let tmpdir: string;
 
   suite.beforeEach(async () => {