Handle not-logged-in public repos with credsStore

bazel-contrib · Jan 24, 2025 · 2d68278 · 2d68278
1 parent a911e9e
commit 2d68278
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/oci/private/authn.bzl b/oci/private/authn.bzl
@@ -126,6 +126,11 @@ exec "docker-credential-{}" get <<< "$1" """.format(helper_name),
 
     response = json.decode(result.stdout)
 
+    # If the username and secret are empty, the user does not have a login.
+    # Returning {} avoids sending invalid Basic auth headers that result in 401's
+    if response["Username"] == "" and response["Secret"] == "":
+        return {}
+
     return {
         "type": "basic",
         "login": response["Username"],