Mutate image references where needed for trusted pulls Upstream-commit: b70f9296dd Component: cli
b70f9296dd