From 682a74d0969bdc8624f3ad61e500a5550197de60 Mon Sep 17 00:00:00 2001
From: Claude <claude@adriahub.de>
Date: Wed, 11 Mar 2026 11:03:27 +0100
Subject: [PATCH] Add CI cleanup step to prevent orphan Docker images [skip ci]

---
 .forgejo/workflows/build.yml | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/.forgejo/workflows/build.yml b/.forgejo/workflows/build.yml
index cead178..0c9415a 100644
--- a/.forgejo/workflows/build.yml
+++ b/.forgejo/workflows/build.yml
@@ -43,7 +43,6 @@ jobs:
             --build-arg "VITE_BUILD_CHANNEL=${{ steps.vars.outputs.channel }}" \
             --build-arg "VITE_APP_VERSION=${{ steps.vars.outputs.version }}" \
             -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ steps.vars.outputs.tag }} \
-            -t ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }} \
             .
           if [ "${GITHUB_REF_NAME}" = "main" ]; then
             docker tag ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ steps.vars.outputs.tag }} \
@@ -51,7 +50,15 @@ jobs:
           fi
           echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u root --password-stdin
           docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ steps.vars.outputs.tag }}
-          docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ github.sha }}
           if [ "${GITHUB_REF_NAME}" = "main" ]; then
             docker push ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
           fi
+
+      - name: Cleanup build artifacts
+        if: always()
+        run: |
+          TAG="${{ steps.vars.outputs.tag }}"
+          docker rmi "${{ env.REGISTRY }}/${{ env.IMAGE }}:${TAG}" 2>/dev/null || true
+          docker rmi "${{ env.REGISTRY }}/${{ env.IMAGE }}:latest" 2>/dev/null || true
+          docker image prune -f 2>/dev/null || true
+          docker builder prune -f --keep-storage=4GB 2>/dev/null || true