diff --git a/.github/workflows/cd.yaml b/.github/workflows/cd.yaml
index 06e39f2..58391a2 100644
--- a/.github/workflows/cd.yaml
+++ b/.github/workflows/cd.yaml
@@ -15,7 +15,7 @@ jobs:
             ./terraform/env/prod,
             ./terraform/common,
           ]
-    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/terraform_apply.yaml@main
+    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/terraform_apply.yaml@8aad7d53dec2297122831639ae12e0ce9f4eeeff # main
     with:
       tf_dir: ${{ matrix.TF_DIR }}
       tf_token_keeper_path: sd33hj2cVYiRB4TEhAG_jg/field/password
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 70967d8..3d16976 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -10,12 +10,12 @@ env:
 
 jobs:
   terraform_fmt:
-    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/terraform_fmt.yaml@main
+    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/terraform_fmt.yaml@8aad7d53dec2297122831639ae12e0ce9f4eeeff # main
     with:
       parent_tf_dir: "./terraform"
 
   tflint:
-    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/tflint.yaml@main
+    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/tflint.yaml@8aad7d53dec2297122831639ae12e0ce9f4eeeff # main
     with:
       parent_tf_dir: "./terraform"
     secrets: inherit
@@ -31,7 +31,7 @@ jobs:
             ./terraform/env/prod,
             ./terraform/common,
           ]
-    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/terraform_plan.yaml@main
+    uses: CityOfPhiladelphia/citygeo-shared-workflows/.github/workflows/terraform_plan.yaml@8aad7d53dec2297122831639ae12e0ce9f4eeeff # main
     with:
       tf_dir: ${{ matrix.TF_DIR }}
       tf_token_keeper_path: sd33hj2cVYiRB4TEhAG_jg/field/password