diff --git a/Dockerfile b/Dockerfile
index 3e80dfc5f..e39e4cfa3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -66,7 +66,7 @@ RUN mkdir -p /output/usr/bin && \
     /go/src/github.com/vmware-tanzu/velero/hack/build-restic.sh
 
 # Velero image packing section
-FROM gcr.io/distroless/base-debian11@sha256:99133cb0878bb1f84d1753957c6fd4b84f006f2798535de22ebf7ba170bbf434
+FROM gcr.io/distroless/base-nossl-debian11:nonroot
 
 LABEL maintainer="Nolan Brubaker <brubakern@vmware.com>"
 
diff --git a/changelogs/unreleased/5939-ywk253100 b/changelogs/unreleased/5939-ywk253100
new file mode 100644
index 000000000..28f47f191
--- /dev/null
+++ b/changelogs/unreleased/5939-ywk253100
@@ -0,0 +1 @@
+Switch the base image to distroless/base-nossl-debian11 to reduce the CVE triage efforts
\ No newline at end of file