diff --git a/auth/keychain.go b/auth/keychain.go
index 1bde34e0e..8b74799d2 100644
--- a/auth/keychain.go
+++ b/auth/keychain.go
@@ -38,13 +38,15 @@ func DefaultKeychain(images ...string) (authn.Keychain, error) {
 		return nil, err
 	}
 
-	keychains := []authn.Keychain{envKeychain, authn.DefaultKeychain}
-
+	keychains := []authn.Keychain{
+		envKeychain,
+		NewResolvedKeychain(authn.DefaultKeychain, images...),
+	}
 	if vendorKeychainEnabled("amazon") {
-		keychains = append(keychains, amazonKeychain)
+		keychains = append(keychains, NewResolvedKeychain(amazonKeychain, images...))
 	}
 	if vendorKeychainEnabled("azure") {
-		keychains = append(keychains, azureKeychain)
+		keychains = append(keychains, NewResolvedKeychain(azureKeychain, images...))
 	}
 
 	return authn.NewMultiKeychain(