fix: use exact cncf regex and re2 library

Author: d3vco

lib/image-reference.ts

@@ -3,19 +3,21 @@
  * Uses OCI distribution-style regexes to parse name, registry, tag, and digest.
  */
 
+import RE2 = require("re2");
+
 // Full reference: optional registry, repository path, optional tag, optional digest.
 // Capture groups: 1 = name (repo path including optional registry), 2 = tag, 3 = digest.
-const imageReferencePattern = String.raw`^((?:(?:(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))*|\[(?:[a-fA-F0-9:]+)\])(?::[0-9]+)?/)?[a-z0-9]+(?:(?:[._]|__|[-]+)[a-z0-9]+)*(?:/[a-z0-9]+(?:(?:[._]|__|[-]+)[a-z0-9]+)*)*)(?::([a-zA-Z0-9_][a-zA-Z0-9._-]{0,127}))?(?:@([A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][a-fA-F0-9]{32,}))?$`;
-const imageReferenceRegex = new RegExp(imageReferencePattern);
+const imageReferencePattern = String.raw`^((?:(?:(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))*|\[(?:[a-fA-F0-9:]+)\])(?::[0-9]+)?/)?[a-z0-9]+(?:(?:[._]|__|[-]+)[a-z0-9]+)*(?:/[a-z0-9]+(?:(?:[._]|__|[-]+)[a-z0-9]+)*)*)(?::([\w][\w.-]{0,127}))?(?:@([A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][[:xdigit:]]{32,}))?$`;
+const imageReferenceRegex = new RE2(imageReferencePattern);
 
 // Registry prefix only. Requires '.' or localhost to distinguish registry from repository.
 // Capture group 1 = registry hostname (no trailing '/' or '@').
 const imageRegistryPattern = String.raw`^((?:(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9])(?:\.(?:[a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9-]*[a-zA-Z0-9]))+|\[(?:[a-fA-F0-9:]+)\]|localhost)(?::[0-9]+)?)(?:/|@)`;
-const imageRegistryRegex = new RegExp(imageRegistryPattern);
+const imageRegistryRegex = new RE2(imageRegistryPattern);
 
 // Digest regex. Anchored to the start and end of the string.
 const digestPattern = String.raw`^[A-Za-z][A-Za-z0-9]*(?:[-_+.][A-Za-z][A-Za-z0-9]*)*[:][a-fA-F0-9]{32,}$`;
-const digestRegex = new RegExp(digestPattern);
+const digestRegex = new RE2(digestPattern);
 
 export class ParsedImageReference {
   /** Repository path (e.g. nginx, library/nginx) */