Identifiersflags: g
Docker Image Tag
Match Docker image references with an explicit tag — e.g. nginx:1.21, mycorp/service:v2.3.1.
Try it in RegexPro →Available in
Pattern
regexengine-agnostic
\b[a-z0-9]+(?:[._\-\/][a-z0-9]+)*:[\w.\-]+\b (flags: g)Raw source: \b[a-z0-9]+(?:[._\-\/][a-z0-9]+)*:[\w.\-]+\b
How it works
Image name is lowercase alphanumerics with optional . _ - / separators for registry paths. Tag follows the colon and can include letters, digits, dots, hyphens, and underscores.
Examples
Input
FROM nginx:1.21Matches
nginx:1.21
Input
image: mycorp/service:v2.3.1Matches
mycorp/service:v2.3.1
Input
ubuntu:latestMatches
ubuntu:latest
Common use cases
- •Dockerfile auditing
- •CI pipeline image pinning
- •Vulnerability scanning input
- •Deployment manifest validation
Related patterns
AWS ARN (Amazon Resource Name)
IdentifiersMatch AWS ARNs (Amazon Resource Names) across commercial, China, and GovCloud partitions.
AWS S3 Bucket Name
IdentifiersValidate AWS S3 bucket names per the standard naming rules: 3–63 chars, lowercase, alphanumeric + dots + hyphens.
Git Commit SHA
IdentifiersMatch Git commit hashes, both short (7 chars) and full (40 chars) forms.
Git Remote URL (HTTPS or SSH)
IdentifiersMatch git remote URLs in both `git@host:org/repo` and `https://host/org/repo` forms.