feat: add get-images-from-files action (#27)

Reviewed-on: t.behrendt/trivy-actions#27 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: t.behrendt <t.behrendt@t00n.de> Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-02-05 14:52:41 +01:00
parent cde02f6bc2
commit a076c9d732
5 changed files with 161 additions and 0 deletions
@@ -31,3 +31,42 @@ jobs:
        uses: ./setup-db
      - name: Run Trivy
        run: trivy fs --skip-db-update --cache-dir ${{ steps.setup-db.outputs.cache-dir }} .
+
+  test-get-images-from-files:
+    name: Test Get Images From Files
+    runs-on:
+      - ubuntu-latest
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - id: giff
+        uses: ./get-images-from-files
+        with:
+          files: |
+            - get-images-from-files/test.Dockerfile
+            - get-images-from-files/test-deployment.yaml
+      - name: Check image formats extracted
+        run: |
+          images="${{ steps.giff.outputs.images }}"
+          echo "Extracted: $images"
+          echo ""
+          check() { echo -n "  $1: "; echo "$images" | grep -q "$2" && echo "OK" || { echo "FAIL (not found)"; exit 1; }; }
+          
+          # Dockerfile-only refs
+          check "Dockerfile registry+tag (nginx:v1)" "example.com/library/nginx:v1"
+          check "Dockerfile registry+digest (base@sha256:...)" "example.com/library/base@sha256:aaaaaaaa"
+          
+          # K8s-only refs
+          check "K8s registry+tag (app:v2)" "example.com/library/app:v2"
+          check "K8s registry+digest (helper@sha256:...)" "example.com/myproject/helper@sha256:bbbbbbbb"
+          
+          # Shared ref (in both files) — must appear exactly once
+          check "Shared ref present (distroless/static:nonroot)" "example.com/distroless/static:nonroot"
+          count=$(echo "$images" | tr ',' '\n' | grep -c 'example.com/distroless/static:nonroot' || true)
+          echo -n "  Shared ref appears once (no duplicates): "
+          [ "$count" -eq 1 ] && echo "OK (count=$count)" || { echo "FAIL (count=$count, expected 1)"; exit 1; }
+          total=$(echo "$images" | tr ',' '\n' | grep -c . || true)
+          echo -n "  Total unique refs: "
+          [ "$total" -eq 5 ] && echo "OK ($total)" || { echo "FAIL (got $total, expected 5)"; exit 1; }
+          
+          echo ""
+          echo "All checks passed."