.reusable-cleanup-registry.yml

name: cleanup registry

on:
  workflow_call:

permissions: {}

jobs:
  cleanup-registry:
    runs-on: ubuntu-latest
    steps:
      - name: Cleanup test images in 'connaisseur-test'
        uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03 # v3.0.0
        with:
          image-names: connaisseur-test
          cut-off: 3w
          timestamp-to-use: updated_at
          account: sse-secure-systems
          token: ${{ secrets.GHCR_PAT }}
      - name: Cleanup dangling images without tag
        uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03 # v3.0.0
        with:
          image-names: connaisseur*
          tag-selection: untagged
          cut-off: 4h
          timestamp-to-use: updated_at
          account: sse-secure-systems
          token: ${{ secrets.GHCR_PAT }}
      # - name: Cleanup all connaisseur images
      #   uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03 # v3.0.0
      #   with:
      #     image-names: connaisseur
      #     image-tags: !master, !develop, !v*, !sha256-*
      #     cut-off: 4d
      #     timestamp-to-use: updated_at
      #     account: sse-secure-systems
      #     token: ${{ secrets.GHCR_PAT }}