diff --git a/.github/workflows/container-images.yml b/.github/workflows/container-images.yml
index f5d2c40..987f2f6 100644
--- a/.github/workflows/container-images.yml
+++ b/.github/workflows/container-images.yml
@@ -70,13 +70,11 @@ jobs:
           docker push "ghcr.io/opencast/pyca:main"
 
       - name: delete untagged container images
-        uses: snok/container-retention-policy@v2
+        uses: snok/container-retention-policy@v3.0.0
         if: ${{ github.event_name == 'push' }}
         with:
+          account: opencast
           token: ${{ secrets.GITHUB_TOKEN }}
-          token-type: github-token
-          account-type: org
-          org-name: opencast
+          tag-selection: untagged
           image-names: pyca
-          untagged-only: true
           cut-off: 1 day ago UTC