I'm trying to create an artifact retention policy in my team's dockerhub and JFrog repositories. Are there any standardized methods or best practices that have been published on this topic?
A few things that I believe would be a good starting point:
- Retain any images that are currently deployed in kubernetes (high priority)
- Retain any images based on recent activity (i.e. all images pushed or pulled in the last 30 days, 60 days, etc.)
- Retain images based on specific versions/tags/releases of application
Any resources on this topic would be much appreciated.