diff --git a/CHANGELOG.md b/CHANGELOG.md
index f4b4dfa..4485834 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Configure `gsoci.azurecr.io` as the default container image registry.
+
 ## [0.9.0] - 2023-10-27
 
 ### Changed
diff --git a/helm/trivy/charts/trivy/values.yaml b/helm/trivy/charts/trivy/values.yaml
index cc34469..dba5e73 100644
--- a/helm/trivy/charts/trivy/values.yaml
+++ b/helm/trivy/charts/trivy/values.yaml
@@ -2,7 +2,7 @@ nameOverride: ""
 fullnameOverride: ""
 
 image:
-  registry: docker.io
+  registry: gsoci.azurecr.io
   repository: aquasec/trivy
   # tag is an override of the image tag, which is by default set by the
   # appVersion field in Chart.yaml.
diff --git a/helm/trivy/values.yaml b/helm/trivy/values.yaml
index 3995999..7d2e36a 100644
--- a/helm/trivy/values.yaml
+++ b/helm/trivy/values.yaml
@@ -21,7 +21,7 @@ trivy:
   rbac:
     pspEnabled: true
   image:
-    registry: docker.io
+    registry: gsoci.azurecr.io
     repository: giantswarm/trivy
     # Tag must also be updated to match in trivy-operator-app
     # If not set here, the image version is taken from the appVersion of the upstream chart.
@@ -30,7 +30,7 @@ trivy:
   modules:
     enabled: false
     urls:
-    - ghcr.io/aquasecurity/trivy-module-spring4shell
+      - ghcr.io/aquasecurity/trivy-module-spring4shell
   securityContext:
     privileged: false
     readOnlyRootFilesystem: true