Use a private GAR for images instead of public docker hub This will require workload identity to work correctly.