From 655a004ef433e8dc518dede0c2b2e9ca1de8da81 Mon Sep 17 00:00:00 2001
From: Ryan Boehning <1250684+ryboe@users.noreply.github.com>
Date: Sun, 22 Feb 2026 17:24:19 -0800
Subject: [PATCH] fix: use third-party library for cleaning up untagged images

`actions/delete-package-version` doesn't work with SBOM for some reason.
---
 .github/workflows/cleanup.yml | 11 +++--------
 1 file changed, 3 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/cleanup.yml b/.github/workflows/cleanup.yml
index fb8e733..a17f4e1 100644
--- a/.github/workflows/cleanup.yml
+++ b/.github/workflows/cleanup.yml
@@ -6,15 +6,10 @@ on:
   workflow_dispatch:
 
 jobs:
-  cleanup_untagged_images:
+  clean_up_untagged_images:
     runs-on: ubuntu-latest
-    permissions:
-      packages: write
     steps:
       - name: Delete untagged images
-        uses: actions/delete-package-versions@v5
+        uses: dataaxiom/ghcr-cleanup-action@v1
         with:
-          package-name: alpinecodespace
-          package-type: container
-          delete-only-untagged-versions: "true"
-          min-versions-to-keep: 10
+          delete-untagged: true