fix(github-actions): set remote exec script as executable and prevent regression

Note, I considered implementing another rule like `generated_file_test`
that supports ensuring file permissions- but it's not worth the effort
and a simple test can be implemented to verify permissions.

Author: devversion

circleci-orb/pack-orb-script.mjs

@@ -18,6 +18,7 @@ ${content}
 NGEOF
 `;
   await fs.promises.writeFile(outputExecpath, output, 'utf8');
+  await fs.promises.chmod(outputExecpath, 0o777);
 }
 
 try {

github-actions/setup-bazel-remote-exec/BUILD.bazel

@@ -2,6 +2,8 @@ load("@build_bazel_rules_nodejs//:index.bzl", "generated_file_test")
 
 package(default_visibility = ["//github-actions/slash-commands:__subpackages__"])
 
+exports_files(["setup_remote_exec.sh"])
+
 generated_file_test(
     name = "setup_remote_exec_script",
     src = "setup_remote_exec.sh",

github-actions/setup-bazel-remote-exec/setup_remote_exec.sh

@@ -0,0 +1,13 @@
+load("@build_bazel_rules_nodejs//:index.bzl", "nodejs_test")
+
+nodejs_test(
+    name = "test_file_permission_setup_script",
+    args = [
+        "$(execpath //github-actions/setup-bazel-remote-exec:setup_remote_exec.sh)",
+    ],
+    data = [
+        "check-file-permission.mjs",
+        "//github-actions/setup-bazel-remote-exec:setup_remote_exec.sh",
+    ],
+    entry_point = ":check-file-permission.mjs",
+)

github-actions/setup-bazel-remote-exec/test/BUILD.bazel

@@ -0,0 +1,19 @@
+/**
+ * @license
+ * Copyright Google LLC All Rights Reserved.
+ *
+ * Use of this source code is governed by an MIT-style license that can be
+ * found in the LICENSE file at https://angular.io/license
+ */
+
+import fs from 'fs';
+
+const scriptAbsPath = process.argv[2];
+
+try {
+  await fs.promises.access(scriptAbsPath, fs.constants.X_OK);
+} catch (e) {
+  console.error(`Script at: ${scriptAbsPath} is not executable.`);
+  console.error(e);
+  process.exitCode = 1;
+}