diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index cb93232..5e71408 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -146,12 +146,7 @@ jobs:
           bash scripts/retry-docker-build.sh 5 30 -- docker push "${REGISTRY}/eventhub-api-tests:${TAG}"
           echo "Pushed ${REGISTRY}/eventhub-api-tests:${TAG}"
 
-      - name: Prune old registry images
-        if: github.event_name == 'push'
-        env:
-          REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
-          REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
-        run: bash scripts/run-registry-prune.sh
+      # Prune после push удалял sha-* до deploy-ift — чистим в конце deploy-*.
 
       - name: Mark test complete
         id: mark_test
@@ -262,6 +257,8 @@ jobs:
         env:
           REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
           REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
+          EXTRA_KEEP_TAGS: ${{ steps.meta.outputs.tag }}
+          SHA_KEEP: "5"
         run: bash scripts/run-registry-prune.sh
 
   e2e-ift:
@@ -398,6 +395,8 @@ jobs:
         env:
           REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
           REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
+          EXTRA_KEEP_TAGS: ${{ steps.meta.outputs.tag }}
+          SHA_KEEP: "5"
         run: bash scripts/clone-devops-run.sh scripts/prune-registry-images.sh
 
   e2e-stage: