t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

feat(get-images-from-files): add support for helm values (#29)
CD / Release (push) Successful in 13s
Details

Browse Source 
Adding support for images inside of helm value files as per helm convention.
Limitation: Default images the chart may propose are not exposed and therefore not supported, only what's specifically mentioned in the values file.

Reviewed-on: t.behrendt/trivy-actions#29
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>
This commit was merged in pull request #29.
This commit is contained in:
t.behrendt
2026-02-05 17:29:01 +01:00
committed by t.behrendt
parent 2269b09740
commit 9411465688
4 changed files with 47 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
get-images-from-files/action.yaml
+12 -1
View File
@@ -1,5 +1,5 @@
name: "Get Images From Files"
description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, Docker Compose/compose files, and files with recognizable image references)"
description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, Docker Compose/compose files, Helmfile values, and files with recognizable image references)"
author: "Timo Behrendt <t.behrendt@t00n.de>"
branding:
icon: "package"
@@ -32,6 +32,17 @@ runs:
awk '/^[[:space:]]*FROM[[:space:]]/ { print $NF }' "$f" 2>/dev/null || true
# Kubernetes / Docker Compose: image: <ref>
grep -E '[[:space:]]image:[[:space:]]' "$f" 2>/dev/null | sed 's/.*image:[[:space:]]*//' | awk '{ print $1 }' || true
# Helmfile values: repository + tag (both required, by indent); tag without repo is skipped
awk '
match($0, /^[[:space:]]*/) { indent = RLENGTH }
/^[[:space:]]*repository:[[:space:]]/ {
v = $0; sub(/^[^:]*:[[:space:]]*"?/, "", v); sub(/"?[[:space:]]*$/, "", v); repo[indent] = v; next
}
/^[[:space:]]*tag:[[:space:]]/ {
v = $0; sub(/^[^:]*:[[:space:]]*"?/, "", v); sub(/"?[[:space:]]*$/, "", v);
if (repo[indent] != "") { print repo[indent] ":" v; delete repo[indent] }; next
}
' "$f" 2>/dev/null || true
done | grep -E '/' | sort -u | paste -sd,
)
echo "images=${images:-}" >> "$GITHUB_OUTPUT"