move back

Signed-off-by: cpanato <ctadeu@gmail.com>

.github/workflows/validate-release.yml

@@ -59,7 +59,7 @@ jobs:
           docker run --rm --privileged \
           -e PROJECT_ID=honk-fake-project \
           -e CI=$CI \
-          -e RUNTIME_IMAGE=ghcr.io/distroless/static:latest \
+          -e RUNTIME_IMAGE=gcr.io/distroless/static:debug-nonroot \
           -v ${PWD}:/go/src/sigstore/cosign \
           -v /var/run/docker.sock:/var/run/docker.sock \
           -w /go/src/sigstore/cosign \

.ko.yaml

@@ -14,7 +14,7 @@
 # limitations under the License.
 
 # We need a shell for a lot of redirection/piping to work
-defaultBaseImage: ghcr.io/distroless/alpine-base:latest
+defaultBaseImage: gcr.io/distroless/base:debug-nonroot
 
 builds:
 - id: cosign

Makefile

@@ -24,7 +24,7 @@ GOFILES ?= $(shell find . -type f -name '*.go' -not -path "./vendor/*")
 
 # Set version variables for LDFLAGS
 PROJECT_ID ?= projectsigstore
-RUNTIME_IMAGE ?= ghcr.io/distroless/static
+RUNTIME_IMAGE ?= gcr.io/distroless/static
 GIT_TAG ?= dirty-tag
 GIT_VERSION ?= $(shell git describe --tags --always --dirty)
 GIT_HASH ?= $(shell git rev-parse HEAD)
@@ -54,7 +54,7 @@ SRCS = $(shell find cmd -iname "*.go") $(shell find pkg -iname "*.go")
 GOLANGCI_LINT_DIR = $(shell pwd)/bin
 GOLANGCI_LINT_BIN = $(GOLANGCI_LINT_DIR)/golangci-lint
 
-KO_PREFIX ?= gcr.io/projectsigstore
+KO_PREFIX ?= gcr.io/cpanato-general
 export KO_DOCKER_REPO=$(KO_PREFIX)
 GHCR_PREFIX ?= ghcr.io/sigstore/cosign
 COSIGNED_YAML ?= cosign-$(GIT_TAG).yaml