diff --git a/.ko.yaml b/.ko.yaml
index 18c35c779..18b4c9d2c 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -13,8 +13,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-# We need a shell for a lot of redirection/piping to work
-defaultBaseImage: gcr.io/distroless/base:debug-nonroot
+defaultBaseImage: gcr.io/distroless/static-debian12:nonroot
 
 builds:
 - id: rekor-server