Files
sec-actions/get-images-from-files/action.yaml
T
t.behrendt 19cf9c7dd6
CI / Test Setup Trivy amd64 (pull_request) Successful in 9s
CI / Test Setup DB (pull_request) Successful in 15s
CI / Test Get Images From Files (pull_request) Successful in 21s
CI / Test Setup Trivy arm64 (pull_request) Successful in 24s
refactor: remove handling of sole repository, always require both repo and tag
2026-02-05 17:15:14 +01:00

49 lines
2.1 KiB
YAML

name: "Get Images From Files"
description: "Extract docker images from selected files (Dockerfiles, Kubernetes manifests, Docker Compose/compose files, Helmfile values, and files with recognizable image references)"
author: "Timo Behrendt <t.behrendt@t00n.de>"
branding:
icon: "package"
color: "blue"
inputs:
files:
description: "Files to extract images from. Multiple files can be specified (YAML list format)."
required: true
outputs:
images:
description: "Comma-separated list of extracted image references (e.g. docker.io/library/alpine:latest,gcr.io/distroless/static:nonroot@sha256:...)"
value: ${{ steps.extract.outputs.images }}
runs:
using: "composite"
steps:
- id: extract
shell: bash
run: |
set -e
files="${{ inputs.files }}"
# Parse YAML list: lines like " - path/to/file" or "- file"
file_list=$(echo "$files" | sed -n 's/^[[:space:]]*-[[:space:]]*//p' | tr -d '"' | tr -d "'")
images=$(
for f in $file_list; do
[ -f "$f" ] || continue
# Dockerfile: FROM [--platform=...] <image>
awk '/^[[:space:]]*FROM[[:space:]]/ { print $NF }' "$f" 2>/dev/null || true
# Kubernetes / Docker Compose: image: <ref>
grep -E '[[:space:]]image:[[:space:]]' "$f" 2>/dev/null | sed 's/.*image:[[:space:]]*//' | awk '{ print $1 }' || true
# Helmfile values: repository + tag (both required, by indent); tag without repo is skipped
awk '
match($0, /^[[:space:]]*/) { indent = RLENGTH }
/^[[:space:]]*repository:[[:space:]]/ {
v = $0; sub(/^[^:]*:[[:space:]]*"?/, "", v); sub(/"?[[:space:]]*$/, "", v); repo[indent] = v; next
}
/^[[:space:]]*tag:[[:space:]]/ {
v = $0; sub(/^[^:]*:[[:space:]]*"?/, "", v); sub(/"?[[:space:]]*$/, "", v);
if (repo[indent] != "") { print repo[indent] ":" v; delete repo[indent] }; next
}
' "$f" 2>/dev/null || true
done | grep -E '/' | sort -u | paste -sd,
)
echo "images=${images:-}" >> "$GITHUB_OUTPUT"