From 469c8627053ebb99d92837a77f81d94feff61a1a Mon Sep 17 00:00:00 2001
From: Ryan Zmuda <ryanzmuda@gmail.com>
Date: Wed, 15 Jul 2026 10:48:20 -0400
Subject: [PATCH] ci: clenaup old images

---
 .github/workflows/cleanup-images.yml | 30 ++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 .github/workflows/cleanup-images.yml

diff --git a/.github/workflows/cleanup-images.yml b/.github/workflows/cleanup-images.yml
new file mode 100644
index 00000000..34bd2c89
--- /dev/null
+++ b/.github/workflows/cleanup-images.yml
@@ -0,0 +1,30 @@
+name: Cleanup Old GHCR Images
+
+on:
+  schedule:
+    - cron: '0 0 * * 0' # weekly, Sunday at 00:00 UTC
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  delete-old-versions:
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        package:
+          - resolve
+          - resolve/analyze-image/server-remediated
+
+    steps:
+      - name: Delete excess versions of ${{ matrix.package }}
+        uses: actions/delete-package-versions@v5
+        with:
+          owner: riversideresearch
+          package-name: ${{ matrix.package }}
+          package-type: container
+          min-versions-to-keep: 5
\ No newline at end of file