@turboops/cli 1.0.33 → 1.0.34

package/dist/index.js

@@ -2500,24 +2500,20 @@ import { readFileSync as readFileSync3, existsSync as existsSync4 } from "fs";
 import { resolve as resolve2 } from "path";
 import { Command as Command4 } from "commander";
 import chalk6 from "chalk";
+var DOCKER_TAG_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/;
 function detectCiCommitSha() {
-  if (process.env.CI_COMMIT_SHA) {
-    return process.env.CI_COMMIT_SHA;
-  }
-  if (process.env.GITHUB_SHA) {
-    return process.env.GITHUB_SHA;
-  }
-  if (process.env.BITBUCKET_COMMIT) {
-    return process.env.BITBUCKET_COMMIT;
-  }
-  if (process.env.BUILD_SOURCEVERSION) {
-    return process.env.BUILD_SOURCEVERSION;
-  }
-  if (process.env.CIRCLE_SHA1) {
-    return process.env.CIRCLE_SHA1;
-  }
-  if (process.env.GIT_COMMIT) {
-    return process.env.GIT_COMMIT;
+  const candidates = [
+    process.env.CI_COMMIT_SHA,
+    process.env.GITHUB_SHA,
+    process.env.BITBUCKET_COMMIT,
+    process.env.BUILD_SOURCEVERSION,
+    process.env.CIRCLE_SHA1,
+    process.env.GIT_COMMIT
+  ];
+  for (const sha of candidates) {
+    if (sha && DOCKER_TAG_REGEX.test(sha.trim())) {
+      return sha.trim();
+    }
   }
   return null;
 }
@@ -2541,14 +2537,20 @@ var deployCommand = new Command4("deploy").description("Trigger a deployment (fo
   logger.header(`Deploying: ${project.name} \u2192 ${env.name}`);
   const isFirstStage = !env.stageOrder || env.stageOrder === 0;
   let imageTag = options.image;
+  if (imageTag && !DOCKER_TAG_REGEX.test(imageTag)) {
+    logger.error(
+      `Invalid image tag format: "${imageTag}". Must be alphanumeric with dots, dashes, or underscores.`
+    );
+    process.exit(11 /* CONFIG_ERROR */);
+  }
   if (!imageTag) {
     if (isFirstStage) {
       const commitSha = detectCiCommitSha();
       const ciEnv = detectCiEnvironment();
       if (commitSha && ciEnv) {
-        imageTag = `${configService.getRegistryUrl()}/${project.slug}:${commitSha}`;
+        imageTag = commitSha;
         logger.info(`CI/CD detected (${ciEnv})`);
-        logger.info(`Auto-using image: ${imageTag}`);
+        logger.info(`Auto-using image tag: ${commitSha}`);
       }
     } else {
       const ciEnv = detectCiEnvironment();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turboops/cli",
-  "version": "1.0.33",
+  "version": "1.0.34",
   "description": "TurboCLI - Command line interface for TurboOps deployments",
   "keywords": [
     "cli",