Note: Only fully-qualified refs (with registry, e.g. docker.io/library/alpine:latest, gcr.io/distroless/static:nonroot@sha256:...) are included; short refs like alpine:latest are omitted as their use is discouraged.

Supported file formats

Format	How images are extracted
Dockerfile	`FROM` lines; the image ref is the last token (handles `FROM --platform=... <image>`).
Kubernetes manifests	Lines with `image:` (e.g. under `containers` / `initContainers`); the value is taken as the image ref.
Docker Compose / Compose	Same as Kubernetes: `image:` key under services.
Helmfile values	Pairs of `repository` and `tag` (both required) at the same indent; ref is `repository:tag`. A lone `tag` without `repository` is skipped.

Other files are supported if they use one of these patterns (e.g. image: or FROM).

Usage

Basic Usage

- name: Get Images From Files
  uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/get-images-from-files@0.0.1
  with:
    files: |
        - Dockerfile
        - k8s/50_deployment.yaml
        - dockers/compose.yaml
        - values/traefik.yaml

Complete Example

name: Get Images From Files
on: [push, pull_request]

jobs:
  get-images-from-files:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - name: Get Images From Files
        uses: https://gitea.t000-n.de/t.behrendt/trivy-actions/get-images-from-files@0.0.1
        with:
            files: |
              - Dockerfile
              - k8s/50_deployment.yaml
              - dockers/compose.yaml
              - values/traefik.yaml

Inputs

Input	Description	Required	Default
`files`	Files to extract images from. Multiple files can be specified..	Yes

Outputs

Output	Description
`images`	JSON array of extracted image reference strings (e.g. `["docker.io/library/alpine:latest","gcr.io/distroless/static:nonroot@sha256:..."]`). Only fully-qualified refs (with registry) are included; short refs like `alpine:latest` are omitted. Parse with `jq` (e.g. `jq -r '.[]'`) to iterate.