bazel-modules

Imported from retail-cortex/castor (examples/skills/bazel/bazel-modules/SKILL.md). Install upstream with npx skills add retail-cortex/castor --skill bazel-modules. Copyright stays with the author (Apache-2.0).

Bazel Modules & Bzlmod Dependency SDLC Skill

This skill prescribes best practices for designing, managing, securing, and testing enterprise polyglot repositories using Bazel 8/9 and the Bzlmod dependency system.

Prerequisites & Pre-Flight Checklist

1. Bazel 8.0.0+ or Bazelisk installed.
2. MODULE.bazel file initialized in repository root.

Security Checkpoints & CWE Invariants

• CWE-829 (Unverified External Imports): Commit MODULE.bazel.lock to ensure all remote BCR dependencies match cryptographic checksums.
• Hermetic Execution: Build actions MUST NOT reach out to external networks during compilation.

HTTP 429 Rate Limit & Quota Backoff Invariants

• Outbound remote cache actions and CI download tools must implement exponential backoff with jitter to handle HTTP 429 rate limits from remote artifact stores.

3-Phase Execution Protocol

Phase 1: Declare Bzlmod Rulesets in MODULE.bazel

Import platform rules (bazel_skylib, rules_go, rules_python, rules_java, aspect_rules_js, rules_proto_grpc, rules_hugo).

Phase 2: Hermetic TDD Testing & Coverage Collection

Execute unit tests across all languages within Bazel's sandboxed environment:

bazel test //... --test_output=errors
bazel coverage //... --combined_report=lcov

Phase 3: Compile Hugo Docs for GitHub Pages

bazel build //docs:hugo_site

Troubleshooting & Remediation Matrix

Progressive Disclosure References

• Bzlmod Architecture Guide: Read references/bzlmod_guide.md.
• CI/CD & Hugo Docs Guide: Read references/ci_cd_hugo.md.
• Reference Module File: View examples/MODULE.bazel.