diff --git a/ci/cloudbuild/dockerfiles/checkers.Dockerfile b/ci/cloudbuild/dockerfiles/checkers.Dockerfile
index 4b5e46e35e..b0ef0a9de1 100644
--- a/ci/cloudbuild/dockerfiles/checkers.Dockerfile
+++ b/ci/cloudbuild/dockerfiles/checkers.Dockerfile
@@ -41,6 +41,10 @@ RUN curl -L -o /usr/bin/buildifier https://github.com/bazelbuild/buildtools/rele
 RUN curl -L -o /usr/local/bin/shfmt https://github.com/mvdan/sh/releases/download/v3.4.3/shfmt_v3.4.3_linux_${ARCH} && \
     chmod 755 /usr/local/bin/shfmt
 
+# Install standard Artifact Registry keyring authentication backend
+# This is needed for using `--index-url` in requirements.txt
+RUN pip3 install --no-cache-dir keyrings.google-artifactregistry-auth
+
 COPY ./requirements.txt /var/tmp/ci/requirements.txt
 WORKDIR /var/tmp/downloads
 RUN if [ $(ls /var/tmp/ci/requirements.txt | grep -c requirements.txt) -eq 0 ] ; \
diff --git a/ci/cloudbuild/dockerfiles/debian-12-arm64.Dockerfile b/ci/cloudbuild/dockerfiles/debian-12-arm64.Dockerfile
index ab98e39383..cacc8e7ced 100644
--- a/ci/cloudbuild/dockerfiles/debian-12-arm64.Dockerfile
+++ b/ci/cloudbuild/dockerfiles/debian-12-arm64.Dockerfile
@@ -38,6 +38,7 @@ ENV LANG=en_US.UTF-8 LANGUAGE=en_US:en LC_ALL=en_US.UTF-8
 RUN update-alternatives --install /usr/bin/python python /usr/bin/python3 10
 
 COPY ./requirements.txt /var/tmp/ci/requirements.txt
+RUN pip3 install --break-system-packages --no-cache-dir keyrings.google-artifactregistry-auth
 RUN pip3 install --break-system-packages --require-hashes --no-deps \
     -r /var/tmp/ci/requirements.txt
 
diff --git a/ci/cloudbuild/dockerfiles/ubuntu-22.04-full.Dockerfile b/ci/cloudbuild/dockerfiles/ubuntu-22.04-full.Dockerfile
index 8b71fa5624..ec5fa96d2b 100644
--- a/ci/cloudbuild/dockerfiles/ubuntu-22.04-full.Dockerfile
+++ b/ci/cloudbuild/dockerfiles/ubuntu-22.04-full.Dockerfile
@@ -77,6 +77,10 @@ ENV LC_ALL en_US.UTF-8
 # clang-tidy-cache needs python
 RUN update-alternatives --install /usr/bin/python python $(which python3) 10
 
+# Install standard Artifact Registry keyring authentication backend
+# This is needed for using `--index-url` in requirements.txt
+RUN pip3 install --no-cache-dir keyrings.google-artifactregistry-auth
+
 COPY ./requirements.txt /var/tmp/ci/requirements.txt
 WORKDIR /var/tmp/downloads
 RUN if [ $(ls /var/tmp/ci/requirements.txt | grep -c requirements.txt) -eq 0 ] ; \
diff --git a/ci/cloudbuild/dockerfiles/ubuntu-22.04-install.Dockerfile b/ci/cloudbuild/dockerfiles/ubuntu-22.04-install.Dockerfile
index 33e5f46c3f..9f6053caf9 100644
--- a/ci/cloudbuild/dockerfiles/ubuntu-22.04-install.Dockerfile
+++ b/ci/cloudbuild/dockerfiles/ubuntu-22.04-install.Dockerfile
@@ -86,6 +86,10 @@ ENV PATH=/opt/cmake/bin:$PATH
 # clang-tidy-cache needs python
 RUN update-alternatives --install /usr/bin/python python $(which python3) 10
 
+# Install standard Artifact Registry keyring authentication backend
+# This is needed for using `--index-url` in requirements.txt
+RUN pip3 install --no-cache-dir keyrings.google-artifactregistry-auth
+
 COPY ./requirements.txt /var/tmp/ci/requirements.txt
 WORKDIR /var/tmp/downloads
 RUN if [ $(ls /var/tmp/ci/requirements.txt | grep -c requirements.txt) -eq 0 ] ; \
diff --git a/ci/requirements.txt b/ci/requirements.txt
index 3dfc17faa5..e4d124ca4b 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -4,6 +4,9 @@
 #
 #    pip-compile --allow-unsafe --generate-hashes requirements.in
 #
+
+--index-url https://us-python.pkg.dev/artifact-foundry-prod/python-3p-trusted/simple/
+
 black==26.3.1 \
     --hash=sha256:0126ae5b7c09957da2bdbd91a9ba1207453feada9e9fe51992848658c6c8e01c \
     --hash=sha256:0f76ff19ec5297dd8e66eb64deda23631e642c9393ab592826fd4bdc97a4bce7 \