clean.yml

name: Cleanup Old Images
on:
  schedule:
    - cron: "15 1 * * 4" # Runs at 01:15, only on Thursday. 
  workflow_dispatch:

jobs:
  delete-older-than-30:
    runs-on: ubuntu-24.04-arm
    permissions:
      packages: write
    steps:
      - name: Harden the runner (Audit all outbound calls)
        uses: step-security/harden-runner@fe104658747b27e96e4f7e80cd0a94068e53901d # v2.16.1
        with:
          egress-policy: audit
      - name: Delete Images Older Than 30 Days
        uses: dataaxiom/ghcr-cleanup-action@cd0cdb900b5dbf3a6f2cc869f0dbb0b8211f50c4 # v1
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
          packages: fedora-createrepo-image
          older-than: 30 days
          delete-orphaned-images: true
          keep-n-tagged: 7
          keep-n-untagged: 7