diff --git a/.ko.yaml b/.ko.yaml
index e11a59d5794..2d9285b10f4 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1,5 +1,5 @@
-defaultBaseImage: ghcr.io/distroless/static
+defaultBaseImage: distroless.dev/static
 baseImageOverrides:
   # git-init uses a base image that includes Git, and supports running either
   # as root or as user nonroot with UID 65532.
-  github.com/tektoncd/pipeline/cmd/git-init: ghcr.io/distroless/git
+  github.com/tektoncd/pipeline/cmd/git-init: distroless.dev/git
diff --git a/config/controller.yaml b/config/controller.yaml
index 4e174f15a14..032c070793c 100644
--- a/config/controller.yaml
+++ b/config/controller.yaml
@@ -77,9 +77,9 @@ spec:
           "-gsutil-image", "gcr.io/google.com/cloudsdktool/cloud-sdk@sha256:27b2c22bf259d9bc1a291e99c63791ba0c27a04d2db0a43241ba0f1f20f4067f",
 
           # The shell image must allow root in order to create directories and copy files to PVCs.
-          # ghcr.io/distroless/busybox as of April 14 2022
+          # distroless.dev/busybox as of April 14 2022
           # image shall not contains tag, so it will be supported on a runtime like cri-o
-          "-shell-image", "ghcr.io/distroless/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791",
+          "-shell-image", "distroless.dev/busybox@sha256:19f02276bf8dbdd62f069b922f10c65262cc34b710eea26ff928129a736be791",
 
           # for script mode to work with windows we need a powershell image
           # pinning to nanoserver tag as of July 15 2021
diff --git a/tekton/publish.yaml b/tekton/publish.yaml
index 886c570c036..8556f1757d6 100644
--- a/tekton/publish.yaml
+++ b/tekton/publish.yaml
@@ -95,7 +95,7 @@ spec:
 
       # Combine Distroless with a Windows base image, used for the entrypoint image.
       COMBINED_BASE_IMAGE=$(go run ./vendor/github.com/tektoncd/plumbing/cmd/combine/main.go \
-        ghcr.io/distroless/static \
+        distroless.dev/static \
         mcr.microsoft.com/windows/nanoserver:ltsc2019 \
         mcr.microsoft.com/windows/nanoserver:ltsc2022 \
         ${CONTAINER_REGISTRY}/$(params.package)/combined-base-image:latest)
@@ -103,7 +103,7 @@ spec:
       # NOTE: Make sure this list of images to use the combined base image is in sync with what's in test/presubmit-tests.sh's 'ko_resolve' function.
       cat <<EOF > ${PROJECT_ROOT}/.ko.yaml
       # This matches the value configured in .ko.yaml
-      defaultBaseImage: ghcr.io/distroless/static
+      defaultBaseImage: distroless.dev/static
       baseImageOverrides:
         # Use the combined base image for images that should include Windows support.
         $(params.package)/cmd/entrypoint: ${COMBINED_BASE_IMAGE}
@@ -111,7 +111,7 @@ spec:
         $(params.package)/cmd/workingdirinit: ${COMBINED_BASE_IMAGE}
 
         # This matches values configured in .ko.yaml
-        $(params.package)/cmd/git-init: ghcr.io/distroless/git
+        $(params.package)/cmd/git-init: distroless.dev/git
       EOF
 
       cat ${PROJECT_ROOT}/.ko.yaml
diff --git a/test/presubmit-tests.sh b/test/presubmit-tests.sh
index 3cb616f20c5..fd9ac1e3838 100755
--- a/test/presubmit-tests.sh
+++ b/test/presubmit-tests.sh
@@ -61,7 +61,7 @@ function ko_resolve() {
   header "Running `ko resolve`"
 
   cat <<EOF > .ko.yaml
-    defaultBaseImage: ghcr.io/distroless/static
+    defaultBaseImage: distroless.dev/static
     baseImageOverrides:
       # Use the combined base image for images that should include Windows support.
       # NOTE: Make sure this list of images to use the combined base image is in sync with what's in tekton/publish.yaml's 'create-ko-yaml' Task.
@@ -69,7 +69,7 @@ function ko_resolve() {
       github.com/tektoncd/pipeline/cmd/nop: gcr.io/tekton-releases/github.com/tektoncd/pipeline/combined-base-image:latest
       github.com/tektoncd/pipeline/cmd/workingdirinit: gcr.io/tekton-releases/github.com/tektoncd/pipeline/combined-base-image:latest
 
-      github.com/tektoncd/pipeline/cmd/git-init: ghcr.io/distroless/git
+      github.com/tektoncd/pipeline/cmd/git-init: distroless.dev/git
 EOF
 
   KO_DOCKER_REPO=example.com ko resolve --platform=all --push=false -R -f config 1>/dev/null