Files
sec-actions/.gitea/workflows/ci.yaml
T
t.behrendt 923962f961
CI / Test Setup Trivy amd64 (pull_request) Successful in 11s
CI / Test Get Images From Files (pull_request) Successful in 14s
CI / Test Setup DB (pull_request) Successful in 17s
CI / Test Setup Trivy arm64 (pull_request) Successful in 41s
feat: add get-images-from-files action
2026-02-05 14:27:27 +01:00

62 lines
2.1 KiB
YAML

name: CI
on:
pull_request:
jobs:
test-setup-trivy:
strategy:
matrix:
arch: [amd64, arm64]
name: Test Setup Trivy ${{ matrix.arch }}
runs-on:
- ubuntu-latest
- linux_${{ matrix.arch }}
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Setup Trivy
uses: ./setup-trivy
- name: Run Trivy
run: trivy --version
test-setup-db:
name: Test Setup DB
runs-on:
- ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: ./setup-trivy
- name: Setup DB
id: setup-db
uses: ./setup-db
- name: Run Trivy
run: trivy fs --skip-db-update --cache-dir ${{ steps.setup-db.outputs.cache-dir }} .
test-get-images-from-files:
name: Test Get Images From Files
runs-on:
- ubuntu-latest
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Get Images From Files
id: giff
uses: ./get-images-from-files
with:
files: |
- get-images-from-files/test.Dockerfile
- get-images-from-files/test-deployment.yaml
- name: Check image formats extracted
run: |
images="${{ steps.giff.outputs.images }}"
echo "Extracted: $images"
# Registry with tag
echo "$images" | grep -q 'example.com/library/nginx:latest'
echo "$images" | grep -q 'example.com/library/redis:7-alpine'
echo "$images" | grep -q 'example.com/library/app:1.25-alpine'
# Registry path with tag
echo "$images" | grep -q 'example.com/distroless/static:nonroot'
# Registry with digest
echo "$images" | grep -q 'example.com/distroless/static@sha256:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcd'
echo "$images" | grep -q 'example.com/library/alpine@sha256:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef'
echo "$images" | grep -q 'example.com/myproject/myimg@sha256:abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcd'