{#- OZI 0.1
# ozi/templates/github_workflows/cleanup.yml.j2
# SPDX-License-Identifier: Unlicense
-#}
name: cleanup caches by a branch
on:
  pull_request:
    types:
      - closed

permissions: read-all

jobs:
  cleanup:
    runs-on: ubuntu-latest
    permissions:
        id-token: write
        contents: write
        actions: write
    steps:
{%- if project.github_harden_runner %}
{%- extends "github_workflows/harden_runner.yml.j2" %}
{%- block body %}
{{ super() }}
{%- endblock %}
{%- block endpoints %}
{{ super() }}
            api.github.com:443
            github.com:443
            objects.githubusercontent.com:443
            uploads.github.com:443
{%- endblock %}
{%- endif %}

      - name: Cleanup caches
        run: |
          gh extension install actions/gh-actions-cache

          echo "Fetching list of cache key"
          cacheKeysForPR=$(gh actions-cache list -R $REPO -B $BRANCH -L 100 | cut -f 1 )

          ## Setting this to not fail the workflow while deleting cache keys.
          set +e
          echo "Deleting caches..."
          for cacheKey in $cacheKeysForPR
          do
              gh actions-cache delete $cacheKey -R $REPO -B $BRANCH --confirm
          done
          echo "Done"
        env:
{%- raw %}
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          REPO: ${{ github.repository }}
          BRANCH: refs/pull/${{ github.event.pull_request.number }}/merge
{%- endraw %}