diff --git a/manifests/Kptfile b/manifests/Kptfile
index 7bc3317..42abb1e 100644
--- a/manifests/Kptfile
+++ b/manifests/Kptfile
@@ -18,8 +18,8 @@ metadata:
   name: digester
 packageMetadata:
   shortDescription: >-
-    The digester mutating admission webhook resolves tags to digests for
-    container and initContainer images in Kubernetes Pods and Pod templates.
+    The digester mutating admission webhook resolves tags to digests for container
+    and initContainer images in Kubernetes Pods and Pod templates.
 openAPI:
   definitions:
     io.k8s.cli.setters.cert-dir:
@@ -70,9 +70,10 @@ openAPI:
       x-k8s-cli:
         setter:
           name: image
-          value: ko://github.com/google/k8s-digester
-          setBy: package-default
+          value: gcr.io/cloud-solutions-images/k8s-digester@sha256:a3c95b30687db280248c953ebd37ab5c3385109ebc8c3d89fabe571c9dbe7a61
+          setBy: cloudbuild
           required: true
+          isSet: true
     io.k8s.cli.setters.metrics-port:
       description: webhook metrics port
       x-k8s-cli:
diff --git a/manifests/deployment.yaml b/manifests/deployment.yaml
index 1e113df..bf6d8a3 100644
--- a/manifests/deployment.yaml
+++ b/manifests/deployment.yaml
@@ -43,7 +43,7 @@ spec:
         kubernetes.io/os: linux
       containers:
       - name: manager
-        image: ko://github.com/google/k8s-digester # {"$kpt-set":"image"}
+        image: gcr.io/cloud-solutions-images/k8s-digester@sha256:a3c95b30687db280248c953ebd37ab5c3385109ebc8c3d89fabe571c9dbe7a61 # {"$kpt-set":"image"}
         args:
         - webhook
         - --cert-dir=/certs # {"$kpt-set":"cert-dir-flag"}