diff --git a/docker/Dockerfile.goreleaser b/docker/Dockerfile.goreleaser
index 83ed3cf8..2ab24459 100644
--- a/docker/Dockerfile.goreleaser
+++ b/docker/Dockerfile.goreleaser
@@ -1,3 +1,5 @@
-FROM gcr.io/distroless/static-debian11
+# Pinned to the multi-arch index digest, not a per-arch one, so the amd64 and
+# arm64v8 GoReleaser builds can both resolve it via --platform.
+FROM registry.suse.com/bci/bci-micro:15.7@sha256:44f5c047210188eb290414c52f883b763efa1e234c2a15c325f03e83f0984fa6
 ENTRYPOINT ["/usr/bin/sts"]
-COPY sts /usr/bin/sts
\ No newline at end of file
+COPY sts /usr/bin/sts