fix: Dockerfile handling with alias
CI / Test Setup Trivy amd64 (pull_request) Successful in 10s
CI / Test Merge SARIF Files (pull_request) Successful in 16s
CI / Test Setup DB (pull_request) Successful in 1m17s
CI / Test Get Images From Files (pull_request) Successful in 1m21s
CI / Test Setup Trivy arm64 (pull_request) Successful in 1m40s
CI / Test Setup Trivy amd64 (pull_request) Successful in 10s
CI / Test Merge SARIF Files (pull_request) Successful in 16s
CI / Test Setup DB (pull_request) Successful in 1m17s
CI / Test Get Images From Files (pull_request) Successful in 1m21s
CI / Test Setup Trivy arm64 (pull_request) Successful in 1m40s
This commit is contained in:
@@ -28,8 +28,12 @@ runs:
|
||||
images=$(
|
||||
for f in $file_list; do
|
||||
[ -f "$f" ] || continue
|
||||
# Dockerfile: FROM [--platform=...] <image>
|
||||
awk '/^[[:space:]]*FROM[[:space:]]/ { print $NF }' "$f" 2>/dev/null || true
|
||||
# Dockerfile: FROM [--platform=...] <image> [AS <name>]
|
||||
awk '/^[[:space:]]*FROM[[:space:]]/ {
|
||||
for (i = 2; i <= NF; i++) {
|
||||
if ($i !~ /^--/) { print $i; break }
|
||||
}
|
||||
}' "$f" 2>/dev/null || true
|
||||
# Kubernetes / Docker Compose: image: <ref>
|
||||
grep -E '[[:space:]]image:[[:space:]]' "$f" 2>/dev/null | sed 's/.*image:[[:space:]]*//' | awk '{ print $1 }' || true
|
||||
# Helmfile values: repository + tag (both required, by indent); tag without repo is skipped
|
||||
|
||||
@@ -4,7 +4,7 @@ FROM example.com/library/nginx:v1
|
||||
# Registry path with tag — shared with K8s to test deduplication
|
||||
FROM example.com/distroless/static:nonroot
|
||||
# Registry with digest (Dockerfile)
|
||||
FROM example.com/library/base@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
|
||||
FROM example.com/library/base@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa AS base
|
||||
|
||||
# Ignored tags
|
||||
## Short repo:tag (ignored by design; only registry refs are extracted)
|
||||
|
||||
Reference in New Issue
Block a user