Enable read-only for sccache for non-repo builds. (youtube#9225)

This should provide some sort of build acceleration for PRs that don't
have access to read_write.

Bug: 432823450
Change-Id: I2af70dcfa2e9609bf5dba10d13aa07047cda2d94

Author: SortaCookie

.github/actions/sccache/action.yaml

@@ -10,15 +10,29 @@ runs:
   - name: Install sccache
     shell: bash
     run: brew install sccache
+  # - name: 'Set up Cloud SDK'
+  #   if: inputs.sccache_gcs_key == ''
+  #   uses: 'google-github-actions/setup-gcloud@v3'
+  #   with:
+  #     version: '>= 363.0.0'
   - name: Configure sccache
     shell: bash
     env:
       SCCACHE_GCS_KEY: ${{ inputs.sccache_gcs_key }}
     run: |
-      printf "%s" "$SCCACHE_GCS_KEY" > "${HOME}/gcloud.json"
-      echo "SCCACHE_GCS_RW_MODE=READ_WRITE" >> $GITHUB_ENV
-      echo "SCCACHE_GCS_KEY_PATH=${HOME}/gcloud.json" >> $GITHUB_ENV
-      echo "SCCACHE_GCS_BUCKET=cobalt-sccache-tvos-bucket" >> $GITHUB_ENV
+      if [[ -n "$SCCACHE_GCS_KEY" ]]; then
+        # If we have a GCS key we use READ_WRITE
+        printf "%s" "$SCCACHE_GCS_KEY" > "${HOME}/gcloud.json"
+        echo "SCCACHE_GCS_KEY_PATH=${HOME}/gcloud.json" >> $GITHUB_ENV
+        echo "SCCACHE_GCS_RW_MODE=READ_WRITE" >> $GITHUB_ENV
+        echo "SCCACHE_GCS_BUCKET=cobalt-sccache-tvos-bucket" >> $GITHUB_ENV
+      else
+        # Read only
+        echo "SCCACHE_BUCKET=cobalt-sccache-tvos-bucket" >> $GITHUB_ENV
+        echo "SCCACHE_ENDPOINT=https://storage.googleapis.com" >> $GITHUB_ENV
+        echo "SCCACHE_S3_NO_CREDENTIALS=true" >> $GITHUB_ENV
+        echo "SCCACHE_REGION=auto" >> $GITHUB_ENV
+      fi
       echo "SCCACHE=1" >> $GITHUB_ENV
       echo "SCCACHE_IDLE_TIMEOUT=0" >> $GITHUB_ENV
   - name: Start sccache server

.github/workflows/main.yaml

@@ -438,7 +438,7 @@ jobs:
           targets: ${{ needs.initialize.outputs.targets }}
           test_root_target: ${{ needs.initialize.outputs.test_root_target }}
           test_targets_json_file: out/${{ matrix.platform }}_${{ matrix.config }}/test_targets.json
-          enable_sccache: ${{ needs.initialize.outputs.enable_sccache == 'true' && secrets.sccache_gcs_key != '' }}
+          enable_sccache: ${{ needs.initialize.outputs.enable_sccache == 'true' }}
           sccache_gcs_key: ${{ secrets.sccache_gcs_key }}
 
       - name: Release Package