if [[ $TRAVIS_SECURE_ENV_VARS == "true" ]]; then

scripts/decrypt-secrets.sh "$SECRETS_PASSWORD"

source ${TRAVIS_BUILD_DIR}/testing/test-env.sh;

export GOOGLE_APPLICATION_CREDENTIALS=${TRAVIS_BUILD_DIR}/testing/service-account.json

nox --stop-on-first-error -s lint travis;

# only run lint on external PRs

echo 'External PR: only running lint.'

nox --stop-on-first-error -s lint;