Image name from either Docker Hub or Google Container Registry. Users that run pipelines must have READ access to the image.