feat: add get-images-from-files action (#27)

Reviewed-on: t.behrendt/trivy-actions#27 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: t.behrendt <t.behrendt@t00n.de> Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-02-05 14:52:41 +01:00
parent cde02f6bc2
commit a076c9d732
5 changed files with 161 additions and 0 deletions
@@ -0,0 +1,37 @@
+name: "Get Images From Files"
+description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, and files with recognizable image references)"
+author: "Timo Behrendt <t.behrendt@t00n.de>"
+branding:
+  icon: "package"
+  color: "blue"
+
+inputs:
+  files:
+    description: "Files to extract images from. Multiple files can be specified (YAML list format)."
+    required: true
+
+outputs:
+  images:
+    description: "Comma-separated list of extracted image references (e.g. docker.io/library/alpine:latest,gcr.io/distroless/static:nonroot@sha256:...)"
+    value: ${{ steps.extract.outputs.images }}
+
+runs:
+  using: "composite"
+  steps:
+    - id: extract
+      shell: bash
+      run: |
+        set -e
+        files="${{ inputs.files }}"
+        # Parse YAML list: lines like "  - path/to/file" or "- file"
+        file_list=$(echo "$files" | sed -n 's/^[[:space:]]*-[[:space:]]*//p' | tr -d '"' | tr -d "'")
+        images=$(
+          for f in $file_list; do
+            [ -f "$f" ] || continue
+            # Dockerfile: FROM [--platform=...] <image>
+            awk '/^[[:space:]]*FROM[[:space:]]/ { print $NF }' "$f" 2>/dev/null || true
+            # Kubernetes / Compose: image: <ref>
+            grep -E '[[:space:]]image:[[:space:]]' "$f" 2>/dev/null | sed 's/.*image:[[:space:]]*//' | awk '{ print $1 }' || true
+          done | grep -E '/' | sort -u | paste -sd,
+        )
+        echo "images=${images:-}" >> "$GITHUB_OUTPUT"