use ECR public images

tools/docker/Dockerfile.integ-test

@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:experimental
 # Test image that starts up containerd and the devmapper snapshotter. The default CMD will drop to a bash shell. Overrides
 # to CMD will be provided appended to /bin/bash -c
-FROM golang:1.21-bullseye
+FROM public.ecr.aws/docker/library/golang:1.21-bullseye
 ENV PATH="/bin:/usr/bin:/usr/local/bin:/sbin:/usr/sbin:/usr/local/sbin:/usr/local/go/bin"
 ENV INSTALLROOT="/usr/local"
 ENV DEBIAN_FRONTEND="noninteractive"

tools/docker/Dockerfile.proto-builder

@@ -11,7 +11,7 @@
 # express or implied. See the License for the specific language governing
 # permissions and limitations under the License.
 
-FROM golang:1.21-bullseye
+FROM public.ecr.aws/docker/library/golang:1.21-bullseye
 
 RUN apt-get update && apt-get install --yes --no-install-recommends \
 	libprotobuf-dev=3.12.4-1+deb11u1 \

tools/docker/Dockerfile.runc-builder

@@ -11,7 +11,7 @@
 # express or implied. See the License for the specific language governing
 # permissions and limitations under the License.
 
-FROM golang:1.21-bullseye
+FROM public.ecr.aws/docker/library/golang:1.21-bullseye
 
 RUN apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get -y install libseccomp-dev pkg-config

tools/docker/Dockerfile.stargz-builder

@@ -11,4 +11,4 @@
 # express or implied. See the License for the specific language governing
 # permissions and limitations under the License.
 
-FROM golang:1.21-bullseye
+FROM public.ecr.aws/docker/library/golang:1.21-bullseye

tools/image-builder/Dockerfile.debian-image

@@ -11,7 +11,7 @@
 # express or implied. See the License for the specific language governing
 # permissions and limitations under the License.
 
-FROM debian:bullseye-slim
+FROM public.ecr.aws/docker/library/debian:bullseye-slim
 
 RUN apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get -y install \