diff --git a/.github/actions/container-security/action.yml b/.github/actions/container-security/action.yml
index fb14261..0988521 100644
--- a/.github/actions/container-security/action.yml
+++ b/.github/actions/container-security/action.yml
@@ -46,5 +46,5 @@ runs:
       with:
         name: ${{ inputs.artifact-name }}
         path: ${{ inputs.report-directory }}/
-        retention-days: 14
+        retention-days: 1
         if-no-files-found: warn
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index bdac08b..23969f1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -62,6 +62,8 @@ jobs:
       - name: Test Backend, Verify Linked Runtime and Scan Vulnerabilities
         id: container_build_1
         uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
+        env:
+          DOCKER_BUILD_RECORD_RETENTION_DAYS: "1"
         with:
           outputs: ${{ steps.container_security_1.outputs.exporter }}
           cache-from: |
@@ -96,4 +98,4 @@ jobs:
             ${{ runner.temp }}/ci-storage-usage-start.json
             ${{ runner.temp }}/ci-storage-usage.json
           if-no-files-found: warn
-          retention-days: 14
+          retention-days: 1
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 1152adb..78a2fa2 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -110,6 +110,8 @@ jobs:
       - name: Build and push Docker image
         id: container_build_1
         uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
+        env:
+          DOCKER_BUILD_RECORD_RETENTION_DAYS: "1"
         with:
           outputs: ${{ steps.container_security_1.outputs.exporter }}
           cache-from: |
@@ -146,7 +148,7 @@ jobs:
             ${{ runner.temp }}/ci-storage-usage-start.json
             ${{ runner.temp }}/ci-storage-usage.json
           if-no-files-found: warn
-          retention-days: 14
+          retention-days: 1
       - name: Confirm tested commit is current main before publication
         env:
           TESTED_SHA: ${{ github.event.workflow_run.head_sha || github.sha }}