diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 832e3cf2..40831457 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -196,8 +196,9 @@ jobs:
         run: |
           yq eval-all '. as $item ireduce ({}; . *+ $item )' clusterimagecatalog/*-bullseye.yaml > Debian/ClusterImageCatalog-bullseye.yaml
           yq eval-all '. as $item ireduce ({}; . *+ $item )' clusterimagecatalog/*-bookworm.yaml > Debian/ClusterImageCatalog-bookworm.yaml
+          yq -i '.resources[0] |= "ClusterImageCatalog-" + env(DEFAULT_DISTRO) + ".yaml"' Debian/kustomization.yaml
           ln -f -s ClusterImageCatalog-${DEFAULT_DISTRO}.yaml Debian/ClusterImageCatalog.yaml
-          cat Debian/ClusterImageCatalog.yaml Debian/ClusterImageCatalog-bullseye.yaml Debian/ClusterImageCatalog-bookworm.yaml
+          cat Debian/kustomization.yaml Debian/ClusterImageCatalog.yaml Debian/ClusterImageCatalog-bullseye.yaml Debian/ClusterImageCatalog-bookworm.yaml
 
       - name: Temporarily disable "include administrators" branch protection
         if: ${{ always() && github.ref == 'refs/heads/main' }}
diff --git a/Debian/kustomization.yaml b/Debian/kustomization.yaml
new file mode 100644
index 00000000..1bd14bbe
--- /dev/null
+++ b/Debian/kustomization.yaml
@@ -0,0 +1,5 @@
+---
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - ClusterImageCatalog-bullseye.yaml