feat: migrate sitemap generation

deployment/build-and-stage.yaml

@@ -132,6 +132,20 @@ steps:
   args: ['push', '--all-tags', 'gcr.io/oss-vdb/relations']
   waitFor: ['build-relations', 'cloud-build-queue']
 
+- name: 'gcr.io/cloud-builders/docker'
+  entrypoint: 'bash'
+  args: ['-c', 'docker pull gcr.io/oss-vdb/generatesitemap:latest || exit 0']
+  id: 'pull-generatesitemap'
+  waitFor: ['setup']
+- name: gcr.io/cloud-builders/docker
+  args: ['build', '-t', 'gcr.io/oss-vdb/generatesitemap:latest', '-t', 'gcr.io/oss-vdb/generatesitemap:$COMMIT_SHA', '-f', 'cmd/generatesitemap/Dockerfile', '--cache-from', 'gcr.io/oss-vdb/generatesitemap:latest', '--pull', '.']
+  dir: 'go'
+  id: 'build-generatesitemap'
+  waitFor: ['pull-generatesitemap']
+- name: gcr.io/cloud-builders/docker
+  args: ['push', '--all-tags', 'gcr.io/oss-vdb/generatesitemap']
+  waitFor: ['build-generatesitemap', 'cloud-build-queue']
+
 - name: 'gcr.io/cloud-builders/docker'
   entrypoint: 'bash'
   args: ['-c', 'docker pull gcr.io/oss-vdb/custommetrics:latest || exit 0']
@@ -372,6 +386,7 @@ steps:
      record-checker=gcr.io/oss-vdb/record-checker:$COMMIT_SHA,\
      custommetrics=gcr.io/oss-vdb/custommetrics:$COMMIT_SHA,\
      relations=gcr.io/oss-vdb/relations:$COMMIT_SHA,\
+     generatesitemap=gcr.io/oss-vdb/generatesitemap:$COMMIT_SHA,\
      gitter=gcr.io/oss-vdb/gitter:$COMMIT_SHA"
   ]
   dir: deployment/clouddeploy/gke-workers
@@ -432,4 +447,5 @@ images:
 - 'gcr.io/oss-vdb/record-checker:$COMMIT_SHA'
 - 'gcr.io/oss-vdb/custommetrics:$COMMIT_SHA'
 - 'gcr.io/oss-vdb/relations:$COMMIT_SHA'
+- 'gcr.io/oss-vdb/generatesitemap:$COMMIT_SHA'
 - 'gcr.io/oss-vdb/gitter:$COMMIT_SHA'

deployment/clouddeploy/gke-workers/base/generate-sitemap.yaml

@@ -13,9 +13,8 @@ spec:
         spec:
           containers:
           - name: generate-sitemap-cron
-            image: cron
+            image: generatesitemap
             imagePullPolicy: Always
-            command: ["/usr/local/bin/generate_sitemap/generate_and_upload.sh"]
             resources:
               requests:
                 cpu: "1"

deployment/clouddeploy/gke-workers/environments/oss-vdb-test/generate-sitemap.yaml

@@ -10,9 +10,11 @@ spec:
           containers:
           - name: generate-sitemap-cron
             env:
-            - name: BASE_URL
-              value: "https://test.osv.dev"
             - name: GOOGLE_CLOUD_PROJECT
               value: oss-vdb-test
-            - name: OUTPUT_GCS_BUCKET
-              value: test-osv-dev-sitemap
+            args:
+              - "--base-url=https://test.osv.dev"
+              - "--osv-vulns-bucket=osv-test-vulnerabilities"
+              - "--upload-to-gcs=true"
+              - "--bucket=test-osv-dev-sitemap"
+

deployment/clouddeploy/gke-workers/environments/oss-vdb/generate-sitemap.yaml

@@ -10,9 +10,11 @@ spec:
           containers:
           - name: generate-sitemap-cron
             env:
-            - name: BASE_URL
-              value: "https://osv.dev"
             - name: GOOGLE_CLOUD_PROJECT
               value: oss-vdb
-            - name: OUTPUT_GCS_BUCKET
-              value: osv-dev-sitemap
+            args:
+              - "--base-url=https://osv.dev"
+              - "--osv-vulns-bucket=osv-vulnerabilities"
+              - "--upload-to-gcs=true"
+              - "--bucket=osv-dev-sitemap"
+

go/cmd/generatesitemap/Dockerfile

@@ -0,0 +1,31 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+FROM golang:1.25.5-alpine@sha256:3587db7cc96576822c606d119729370dbf581931c5f43ac6d3fa03ab4ed85a10 AS build
+
+WORKDIR /src
+
+COPY ./go.mod /src/go.mod
+COPY ./go.sum /src/go.sum
+RUN go mod download && go mod verify
+
+
+COPY ./ /src/
+RUN CGO_ENABLED=0 go build -o generatesitemap ./cmd/generatesitemap
+
+FROM gcr.io/distroless/static-debian12@sha256:87bce11be0af225e4ca761c40babb06d6d559f5767fbf7dc3c47f0f1a466b92c
+
+COPY --from=build /src/generatesitemap /
+
+ENTRYPOINT ["/generatesitemap"]