From 6351b49991c56aa9cd4d26c2055a62a80affe681 Mon Sep 17 00:00:00 2001
From: zhenlonghe <zhenlonghe@gmail.com>
Date: Fri, 24 Oct 2025 19:00:32 +0800
Subject: [PATCH] chore(workflow): enhance GHCR retention policy with token
 generation

- Added a step to generate a GitHub App token for authentication.
- Updated the deletion process to use the generated token instead of the default GITHUB_TOKEN.
- Changed the image-names parameter to delete all images instead of just "rsshub".
---
 .github/workflows/ghcr-retention.yml | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ghcr-retention.yml b/.github/workflows/ghcr-retention.yml
index 3bbcbeeb6..117f477d8 100644
--- a/.github/workflows/ghcr-retention.yml
+++ b/.github/workflows/ghcr-retention.yml
@@ -19,12 +19,19 @@ jobs:
       packages: write
       contents: read
     steps:
+      - name: Generate a token
+        id: generate-token
+        uses: actions/create-github-app-token@v1
+        with:
+          app-id: ${{ secrets.GH_APP_ID }}
+          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
+
       - name: Delete old container versions (30+ days)
         uses: snok/container-retention-policy@v3.0.1
         with:
-          account: ${{ github.repository_owner }}
-          token: ${{ secrets.GITHUB_TOKEN }}
-          image-names: "rsshub"
+          account: user
+          token: ${{ steps.generate-token.outputs.token }}
+          image-names: "*"
           cut-off: 30d
           keep-n-most-recent: 5
           dry-run: false
\ No newline at end of file