diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 7bd7e228..6c60aa27 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -36,6 +36,8 @@ jobs:
     - uses: actions/setup-go@v3
       with:
         go-version: 1.18.x
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - uses: vmware-tanzu/carvel-setup-action@v1
     - run: |
         imgpkg version
@@ -134,6 +136,8 @@ jobs:
     - uses: vmware-tanzu/carvel-setup-action@v1
       with:
         imgpkg: v0.29.0
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
     - run: |
         imgpkg version
         kbld version
diff --git a/.ko.yaml b/.ko.yaml
index adfca750..1fd4f73c 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1 +1,2 @@
-defaultBaseImage: paketobuildpacks/run-jammy-tiny:latest
+# paketobuildpacks/run-jammy-static:0.0.28
+defaultBaseImage: paketobuildpacks/run-jammy-static@sha256:43f8f7f1b9181866221cc472719ddeca748dc95792a35b35a082935b50a554b7