Skip to content

ci: use GITHUB_TOKEN to clean up registry - #89

Merged
andre8244 merged 1 commit into
mainfrom
fix-clean-registry
Oct 9, 2026
Merged

andre8244 merged 1 commit into
mainfrom
fix-clean-registry

Conversation

@andre8244

Copy link
Copy Markdown
Contributor

The "Clean up registry" workflow should delete a branch's container images when the branch is deleted, but it always fails because the IMAGES_CLEANUP_TOKEN secret is not allowed to delete them. See NethServer/dev#8222.

The workflow now uses the token GitHub provides to each workflow run, with explicit permission to write packages.

How to test

  • Merge this PR and delete its branch
  • Check the "Clean up registry" run: it should be green, with one DELETE notice per image

Generated by Claude Code:claude-opus-5-5 with nethserver-pr

The IMAGES_CLEANUP_TOKEN secret can list package versions but cannot
delete them, so the workflow failed whenever a branch image existed.
The workflow token with packages write permission can delete them.

Assisted-by: Claude Code:Opus 5.5
@andre8244 andre8244 self-assigned this Oct 9, 2026
@andre8244
andre8244 merged commit a98668e into main Oct 9, 2026
5 checks passed
@andre8244
andre8244 deleted the fix-clean-registry branch October 9, 2026 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant