✨ Moved the cloudbuilds to yaml (#444)

* Moved the cloudbuild configuration into YAML

cloudbuild/README.md

@@ -0,0 +1,3 @@
+# cloud builds
+
+The container images for scorecard and the cron job is built using `cloud build` in `gcp`.

cloudbuild/cron.yaml

@@ -0,0 +1,38 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+build:
+  images:
+  - gcr.io/openssf/cron:latest
+  options:
+    diskSizeGb: '200'
+  steps:
+  - args:
+    - build
+    - -t
+    - gcr.io/openssf/cron:latest
+    - -f
+    - ./cron/Dockerfile
+    - .
+    name: gcr.io/cloud-builders/docker
+description: builds image for scorecard cron
+github:
+  name: scorecard
+  owner: ossf
+  push:
+    branch: ^main$
+name: scorecard-cron
+tags:
+- cron
+- scorecard

cloudbuild/scorecard-tag.yaml

@@ -0,0 +1,34 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+build:
+  images:
+  - gcr.io/openssf/scorecard:$TAG_NAME
+  options: {}
+  steps:
+  - args:
+    - build
+    - -t
+    - gcr.io/openssf/scorecard:$TAG_NAME
+    - .
+    name: gcr.io/cloud-builders/docker
+description: scorecard build based on tag
+github:
+  name: scorecard
+  owner: ossf
+  push:
+    tag: .*
+name: scorecard-tag
+tags:
+- v*

cloudbuild/scorecard.yaml

@@ -0,0 +1,37 @@
+# Copyright 2021 Security Scorecard Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+build:
+  images:
+  - gcr.io/openssf/scorecard:latest
+  options:
+    diskSizeGb: '200'
+  steps:
+  - args:
+    - build
+    - -t
+    - gcr.io/openssf/scorecard:latest
+    - -f
+    - Dockerfile
+    - .
+    name: gcr.io/cloud-builders/docker
+description: 'builds image for scorecard '
+github:
+  name: scorecard
+  owner: ossf
+  push:
+    branch: ^main$
+name: scorecard
+tags:
+- scorecard