diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
index da11b399..c3d73ce6 100644
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -39,7 +39,7 @@ jobs:
         uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
       - name: Publish Capsule
         id: publish-capsule
-        uses: oliverbaehler/github-actions/ko-publish-image@debug-ko
+        uses: oliverbaehler/github-actions/ko-publish-image@979018716f7d0cbe8d2711f572b350afad4ef211 # v0.1.1
         with:
           makefile-target: ko-publish-capsule
           registry: ghcr.io
@@ -62,7 +62,7 @@ jobs:
       actions: read     # To read the workflow path.
     uses: slsa-framework/slsa-github-generator/.github/workflows/generator_container_slsa3.yml@v1.9.0
     with:
-      image: ghcr.io/${{ github.repository_owner }}/capsule
+      image: ghcr.io/${{ github.repository_owner }}/capsule/capsule
       digest: "${{ needs.publish-images.outputs.capsule-digest }}"
       registry-username: ${{ github.actor }}
     secrets: