diff --git a/gocd/templates/bash/deploy.sh b/gocd/templates/bash/deploy.sh
index 2bba608f..56c957e3 100644
--- a/gocd/templates/bash/deploy.sh
+++ b/gocd/templates/bash/deploy.sh
@@ -2,8 +2,15 @@
 
 eval $(regions-project-env-vars --region="${SENTRY_REGION}")
 
+# Run the distroless image variant in s4s2 first to validate it before other
+# regions. The "-distroless" tag is published by .github/workflows/image.yaml.
+IMAGE_TAG="${GO_REVISION_VROOM_REPO}"
+if [ "${SENTRY_REGION}" = "s4s2" ]; then
+	IMAGE_TAG="${GO_REVISION_VROOM_REPO}-distroless"
+fi
+
 /devinfra/scripts/get-cluster-credentials
 k8s-deploy \
 	--label-selector="${LABEL_SELECTOR}" \
-	--image="us-central1-docker.pkg.dev/sentryio/vroom/vroom:${GO_REVISION_VROOM_REPO}" \
+	--image="us-central1-docker.pkg.dev/sentryio/vroom/vroom:${IMAGE_TAG}" \
 	--container-name="vroom"