Push container only when main pushed

.github/workflows/labs344-build.yml

@@ -45,6 +45,5 @@ jobs:
         with:
           context: containers/labs344
           platforms: ${{ matrix.platform }}
-          provenance: false
-          push: true
+          push: ${{ if github.event_name == 'push' && github.ref == 'refs/heads/main' }}
           tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest,${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}

.github/workflows/retention.yml

@@ -0,0 +1,24 @@
+name: ghcr-retention
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 12 * * 0"
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  clean:
+    runs-on: ubuntu-latest
+    name: Github Container Registry Retention Policy
+    steps:
+      - name: Clean up untagged Autoware images
+        uses: snok/[email protected]
+        with:
+          account: bounverif
+          token: ${{ secrets.GITHUB_TOKEN }}
+          image-names: "labs344"
+          tag-selection: untagged
+          cut-off: 1h
+          dry-run: false