marshallku/image-check

Flag outdated third-party container images across Kubernetes / docker-compose manifests

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jun 6, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: marshallku/image-check@0da69ec07057f298b7e47ee2aba78c255a2cce1e # v1.1.0

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
path	Directory to scan for `image:` references.	no	.
ignore	Newline-separated list of extra image-ref prefixes to skip (added to the first-party defaults).	no	""
fail-on-outdated	Fail the step (exit 1) when any outdated image is found.	no	false
args	Extra raw flags passed through to the image-check binary (escape hatch, e.g. `--jobs 4`).	no	""
mode	`report` (default; just produce outputs) or `pr` (open/update one bump PR per outdated image).	no	report
base	Base branch for PRs (default: the branch the workflow runs on).	no	""
token	Token for git push + PR operations (pr mode). The default GITHUB_TOKEN works, but PRs it opens will NOT trigger other workflows — use a PAT or GitHub App token if you need CI to run on the bump PRs.	no	${{ github.token }}
max-prs	Cap on NEW PRs created per run (0 = unlimited). Existing PRs are always updated.	no	0
pr-label	Label applied to PRs this action opens, and used to find stale ones to close.	no	image-check

Outputs

name	description
outdated-count	Number of images with a newer comparable tag available.
major-count	Number of outdated images whose major version changed.
error-count	Number of images that could not be checked (registry errors).
report	Markdown report body (suitable for an Issue / PR comment).
json-path	Filesystem path to the JSON report.
report-path	Filesystem path to the Markdown report.
prs-created	Number of bump PRs newly created this run (pr mode).
prs-updated	Number of existing bump PRs updated this run (pr mode).
prs-closed	Number of stale bump PRs closed this run (pr mode).