# ci-templates

Reusable offline-safe CI/CD workflows.

## Container release retention

After a tagged release passes candidate verification and is promoted to Dev, the
container workflow keeps the current immutable `sha-<commit>` image and the most
recent previous release by default. Set `release_retention_count` on the caller
to retain a different positive number.

Retention only matches versions in `sha-` followed by a 40-character commit
hash. Registry versions named `sha256:*`, `ci-cache`, or anything else are never
selected for deletion by this step.