diff --git a/Makefile b/Makefile
index 3060399..1aa59a4 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,4 @@
-.PHONY: default build
+.PHONY: default build clean
 
 -include .env
 
@@ -6,10 +6,16 @@ VERSION=0.15.1-1.2
 
 SHELL := /bin/bash
 
+guard:
+	@ if [ -z "$(git status --porcelain)" ]; then echo "git repo not clean"; exit 1; fi
+
 default: build
 
 build:
 	podman build --build-arg VERSION=$(VERSION) --tag docker.io/bardak/restic:$(VERSION) .
 
-push:
+clean:
+	podman image rm docker.io/bardak/restic:$(VERSION)
+
+push: guard build
 	podman push --creds $(USERNAME):$(PASSWORD) docker.io/bardak/restic:$(VERSION)