diff --git a/config/controller.yaml b/config/controller.yaml
index 7de00223292..bf51841037e 100644
--- a/config/controller.yaml
+++ b/config/controller.yaml
@@ -42,7 +42,7 @@ spec:
       serviceAccountName: tekton-pipelines-controller
       containers:
       - name: tekton-pipelines-controller
-        image: github.com/tektoncd/pipeline/cmd/controller
+        image: ko://github.com/tektoncd/pipeline/cmd/controller
         args: [
           "-kubeconfig-writer-image", "github.com/tektoncd/pipeline/cmd/kubeconfigwriter",
           "-creds-image", "github.com/tektoncd/pipeline/cmd/creds-init",
diff --git a/config/webhook.yaml b/config/webhook.yaml
index a51a2e1f721..ef0d03d42f9 100644
--- a/config/webhook.yaml
+++ b/config/webhook.yaml
@@ -48,7 +48,7 @@ spec:
       - name: webhook
         # This is the Go import path for the binary that is containerized
         # and substituted here.
-        image: github.com/tektoncd/pipeline/cmd/webhook
+        image: ko://github.com/tektoncd/pipeline/cmd/webhook
         env:
         - name: SYSTEM_NAMESPACE
           valueFrom: