Files
sec-actions/get-images-from-files/action.yaml
T
t.behrendt a076c9d732
CD / Release (push) Successful in 11s
feat: add get-images-from-files action (#27)
Reviewed-on: t.behrendt/trivy-actions#27
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: t.behrendt <t.behrendt@t00n.de>
Co-committed-by: t.behrendt <t.behrendt@t00n.de>
2026-02-05 14:52:41 +01:00

38 lines
1.4 KiB
YAML

name: "Get Images From Files"
description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, and files with recognizable image references)"
author: "Timo Behrendt <t.behrendt@t00n.de>"
branding:
icon: "package"
color: "blue"
inputs:
files:
description: "Files to extract images from. Multiple files can be specified (YAML list format)."
required: true
outputs:
images:
description: "Comma-separated list of extracted image references (e.g. docker.io/library/alpine:latest,gcr.io/distroless/static:nonroot@sha256:...)"
value: ${{ steps.extract.outputs.images }}
runs:
using: "composite"
steps:
- id: extract
shell: bash
run: |
set -e
files="${{ inputs.files }}"
# Parse YAML list: lines like " - path/to/file" or "- file"
file_list=$(echo "$files" | sed -n 's/^[[:space:]]*-[[:space:]]*//p' | tr -d '"' | tr -d "'")
images=$(
for f in $file_list; do
[ -f "$f" ] || continue
# Dockerfile: FROM [--platform=...] <image>
awk '/^[[:space:]]*FROM[[:space:]]/ { print $NF }' "$f" 2>/dev/null || true
# Kubernetes / Compose: image: <ref>
grep -E '[[:space:]]image:[[:space:]]' "$f" 2>/dev/null | sed 's/.*image:[[:space:]]*//' | awk '{ print $1 }' || true
done | grep -E '/' | sort -u | paste -sd,
)
echo "images=${images:-}" >> "$GITHUB_OUTPUT"