diff --git a/.github/scripts/start-dev-node.sh b/.github/scripts/start-dev-node.sh
index d31e265..8c7549c 100755
--- a/.github/scripts/start-dev-node.sh
+++ b/.github/scripts/start-dev-node.sh
@@ -4,8 +4,9 @@
 # it answers. Fails if it never does, so a spec run cannot start without it.
 set -euo pipefail
 
-# pinned by digest: a tag can move under a run
-IMAGE=pezkuwi/bizinikiwi@sha256:130e8ddd1ec36b00422fcfe565fb596d6a81889e3aeb5f45d13bd92993d09a19
+# pinned by digest: a tag can move under a run. Built from pezkuwi-DKS main and published
+# publicly on GHCR (pulls anonymously).
+IMAGE=ghcr.io/pezkuwichain/bizinikiwi@sha256:2dfafa4db7766ce35fbcf20fcd281698a2981eeb87ec9c68a578b3e57f93bedb
 PORT=${TEST_BIZINIKIWI_PORT:-30333}
 
 docker run -d --name dev-node -p "$PORT:9944" "$IMAGE" --dev --rpc-external --rpc-cors all