t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

feat(get-images-from-files): add support for helm values

Browse Source
This commit is contained in:
t.behrendt
2026-02-05 15:47:08 +01:00
parent 2269b09740
commit d244282e62
4 changed files with 45 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
get-images-from-files/README.md
+1 -1
View File
@@ -2,7 +2,7 @@
A reusable Gitea Action, that extracts docker images from selected files in a repository.
The action supports Dockerfiles, Kubernetes manifests, and Docker Compose/compose files. Other files are supported if they have a recognizable image reference. Duplicate image references are deduplicated.
The action supports Dockerfiles, Kubernetes manifests, Docker Compose/compose files, and Helmfile value files (convention: `repository` required, `tag` optional; a lone `tag` without `repository` is skipped). Other files are supported if they have a recognizable image reference. Duplicate image references are deduplicated.
**Note:** Only fully-qualified refs (with registry, e.g. `docker.io/library/alpine:latest`, `gcr.io/distroless/static:nonroot@sha256:...`) are included; short refs like `alpine:latest` are omitted as their use is discouraged.
get-images-from-files/action.yaml
+14 -1
View File
@@ -1,5 +1,5 @@
name: "Get Images From Files"
description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, Docker Compose/compose files, and files with recognizable image references)"
description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, Docker Compose/compose files, Helmfile values, and files with recognizable image references)"
author: "Timo Behrendt <t.behrendt@t00n.de>"
branding:
icon: "package"
@@ -32,6 +32,19 @@ runs:
awk '/^[[:space:]]*FROM[[:space:]]/ { print $NF }' "$f" 2>/dev/null || true
# Kubernetes / Docker Compose: image: <ref>
grep -E '[[:space:]]image:[[:space:]]' "$f" 2>/dev/null | sed 's/.*image:[[:space:]]*//' | awk '{ print $1 }' || true
# Helmfile values: repository (required), tag optional (by indent); tag without repo is skipped
awk '
match($0, /^[[:space:]]*/) { indent = RLENGTH }
/^[[:space:]]*repository:[[:space:]]/ {
v = $0; sub(/^[^:]*:[[:space:]]*"?/, "", v); sub(/"?[[:space:]]*$/, "", v); repo[indent] = v;
if (tag[indent] != "") { print repo[indent] ":" tag[indent] } else { print repo[indent] };
delete repo[indent]; delete tag[indent]; next
}
/^[[:space:]]*tag:[[:space:]]/ {
v = $0; sub(/^[^:]*:[[:space:]]*"?/, "", v); sub(/"?[[:space:]]*$/, "", v); tag[indent] = v;
if (repo[indent] != "") { print repo[indent] ":" tag[indent]; delete repo[indent]; delete tag[indent] } else { delete tag[indent] }; next
}
' "$f" 2>/dev/null || true
done | grep -E '/' | sort -u | paste -sd,
)
echo "images=${images:-}" >> "$GITHUB_OUTPUT"
get-images-from-files/test-values-helmfile.yaml
+20
View File
@@ -0,0 +1,20 @@
# Used by CI to test get-images-from-files action (Helmfile values, fully-qualified refs only)
# Simple convention: image.repository + image.tag
image:
repository: example.com/helmfile/app
tag: "v4"
# Nested under images (repository + tag)
images:
worker:
repository: example.com/helmfile/worker
tag: "v5"
helper:
repository: example.com/myproject/helper
tag: "2.0@sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc"
# Repository only (no tag) — should be extracted
repo_only:
repository: example.com/helmfile/repo-only
# Tag only (no repository) — should be skipped
tag_only:
tag: "v99"