Fallback to GitHub repo if sourceUrl not found for ghcr.io container image

[AverageMarcus]

Tell us more.

I've got several images I pull from ghcr.io that don't have their source labels correctly set so the changelog isn't fetched. It'd be really useful if when working with a ghcr.io image that doesn't have a sourceUrl that renovate could default / fallback to using the associated GitHub repo to try and get the changelog details.

[viceice]

isn't easily doable, because the docker API doesn't provide that information

[AverageMarcus]

You can even do a web request for the ghcr URL and it'll redirect to the packages page of the GitHub repo: e.g. Https://ghcr.io/tailscale/tailscale

[viceice]

But the image URL is based on the GitHub URL. You just replace ghcr.io with github.com

wrong, only the org name matches, the image name can be arbitrary.

[viceice]

You can even do a web request for the ghcr URL and it'll redirect to the packages page of the GitHub repo: e.g. Https://ghcr.io/tailscale/tailscale

we don't like to parse html pages, those change too frequently.

[AverageMarcus]

wrong, only the org name matches, the image name can be arbitrary.

Oh really? I had no idea about that. I thought the image had to be associated with a repo. I've never seen any other example. 😞 That's frustrating then.

we don't like to parse html pages, those change too frequently.

Yeah, I wasn't suggesting parsing HTML, just pointing out that the http redirects link up to a repo.

[viceice]

sample: https://github.com/orgs/visualon/packages

I've a lot images the which don't match a repo name.

[rarkins]

How can Renovate determine "the associated GitHub repo" if it only knows the image name?

[AverageMarcus]

The ghcr.io URL is related to the GitHub URL. You just replace ghcr.io with github.com.

[viceice]

The ghcr.io URL is related to the GitHub URL. You just replace ghcr.io with github.com.

wrong

[AverageMarcus]

Yeah, looks like I misunderstood GHCR and wasn't aware that images could exist without an associated repo. I guess it would cause too many false positives to be useful. Thanks for your feedback.