diff --git a/addons/Dockerfile b/addons/Dockerfile
index 2f9dbe7c0d4..6460aead704 100644
--- a/addons/Dockerfile
+++ b/addons/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/capabilities/controller/Dockerfile b/capabilities/controller/Dockerfile
index bc26740015c..4b8e0d03e9c 100644
--- a/capabilities/controller/Dockerfile
+++ b/capabilities/controller/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/featuregates/controller/Dockerfile b/featuregates/controller/Dockerfile
index ae4d04dd4d2..7fe4f8d0200 100644
--- a/featuregates/controller/Dockerfile
+++ b/featuregates/controller/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pinniped-components/post-deploy/Dockerfile b/pinniped-components/post-deploy/Dockerfile
index 19372f9e2e2..855e2dade31 100644
--- a/pinniped-components/post-deploy/Dockerfile
+++ b/pinniped-components/post-deploy/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the post-deploy binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pinniped-components/tanzu-auth-controller-manager/Dockerfile b/pinniped-components/tanzu-auth-controller-manager/Dockerfile
index 7a0541ee916..f8150e8ced3 100644
--- a/pinniped-components/tanzu-auth-controller-manager/Dockerfile
+++ b/pinniped-components/tanzu-auth-controller-manager/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the tanzu-auth-controller-manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v1/tkr/Dockerfile b/pkg/v1/tkr/Dockerfile
index db328715412..12fbfadd604 100644
--- a/pkg/v1/tkr/Dockerfile
+++ b/pkg/v1/tkr/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/object-propagation/Dockerfile b/pkg/v2/object-propagation/Dockerfile
index f6f63e50a8b..d45fa97b7de 100644
--- a/pkg/v2/object-propagation/Dockerfile
+++ b/pkg/v2/object-propagation/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/tkr/controller/tkr-source/Dockerfile b/pkg/v2/tkr/controller/tkr-source/Dockerfile
index 636797c07c2..bda3869532a 100644
--- a/pkg/v2/tkr/controller/tkr-source/Dockerfile
+++ b/pkg/v2/tkr/controller/tkr-source/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/tkr/controller/tkr-status/Dockerfile b/pkg/v2/tkr/controller/tkr-status/Dockerfile
index e123596605f..f77cad74e08 100644
--- a/pkg/v2/tkr/controller/tkr-status/Dockerfile
+++ b/pkg/v2/tkr/controller/tkr-status/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/tkr/webhook/cluster/tkr-resolver/Dockerfile b/pkg/v2/tkr/webhook/cluster/tkr-resolver/Dockerfile
index 0c8da8005ce..d93c3a0a04e 100644
--- a/pkg/v2/tkr/webhook/cluster/tkr-resolver/Dockerfile
+++ b/pkg/v2/tkr/webhook/cluster/tkr-resolver/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/tkr/webhook/cluster/vsphere-template-resolver/Dockerfile b/pkg/v2/tkr/webhook/cluster/vsphere-template-resolver/Dockerfile
index 3bda2280168..23a327630fe 100644
--- a/pkg/v2/tkr/webhook/cluster/vsphere-template-resolver/Dockerfile
+++ b/pkg/v2/tkr/webhook/cluster/vsphere-template-resolver/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/tkr/webhook/infra-machine/Dockerfile b/pkg/v2/tkr/webhook/infra-machine/Dockerfile
index a58e7397862..588b6697fa9 100644
--- a/pkg/v2/tkr/webhook/infra-machine/Dockerfile
+++ b/pkg/v2/tkr/webhook/infra-machine/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder
diff --git a/pkg/v2/tkr/webhook/tkr-conversion/Dockerfile b/pkg/v2/tkr/webhook/tkr-conversion/Dockerfile
index 7050d72b7da..50194ff6887 100644
--- a/pkg/v2/tkr/webhook/tkr-conversion/Dockerfile
+++ b/pkg/v2/tkr/webhook/tkr-conversion/Dockerfile
@@ -3,7 +3,7 @@
 
 # Build from publicly reachable source by default, but allow people to re-build images on
 # top of their own trusted images.
-ARG BUILDER_BASE_IMAGE=golang:1.18
+ARG BUILDER_BASE_IMAGE=harbor-repo.vmware.com/dockerhub-proxy-cache/library/golang:1.18
 
 # Build the manager binary
 FROM $BUILDER_BASE_IMAGE as builder