Google Cloud Build with GitHub plugin

cloudbuild-deploy.yaml

steps:

# Decrypt the file containing the key
- name: 'gcr.io/cloud-builders/gcloud'
  args: ...

cloudbuild.yaml

steps:
# Debug - checks files checkedout from Github
# - name: 'gcr.io/cloud-builders/gcloud'
#   entrypoint: 'bash'
#   args:
#   - '-c'
#   - |
#     ls -la
#     ls -la wp-content

- name: 'gcr.io/cloud-builders/gcloud'
  entrypoint: 'bash'
  args:
  - '-c'
  - |
    echo 
    echo 
    echo "Deploying and building branch $BRANCH_NAME @ $REPO_NAME ($SHORT_SHA)..."
    echo 
    echo 
    case $BRANCH_NAME in
      master)
        gcloud builds submit --gcs-log-dir=gs://cloudbuild.bbi.codes/$REPO_NAME/$BRANCH_NAME/$SHORT_SHA/logs --gcs-source-staging-dir=gs://cloudbuild.bbi.codes/$REPO_NAME/$BRANCH_NAME/$SHORT_SHA/sources --config=cloudbuild-deploy.yaml --substitutions=_ENVIRONMENT="production",REPO_NAME="$REPO_NAME",SHORT_SHA="$SHORT_SHA",BRANCH_NAME="$BRANCH_NAME"
        ;;
      *)
        echo 
        echo 
        echo "branch $BRANCH_NAME ignored."
        echo 
        echo 
        ;;
    esac
logsBucket: 'gs://cloudbuild.bbi.codes/$REPO_NAME/$BRANCH_NAME/$SHORT_SHA'
# options:
#     substitution_option: 'ALLOW_LOOSE'