diff --git a/deploy/helmfile.yaml b/deploy/helmfile.yaml
index cc5e165..5e80194 100644
--- a/deploy/helmfile.yaml
+++ b/deploy/helmfile.yaml
@@ -181,7 +181,7 @@ releases:
       - postgresql
     values:
       # https://helmfile.readthedocs.io/en/latest/#loading-remote-environment-values-files
-      - git::https://github.com/TourmalineCore/inner-circle-time-api.git@/ci/values.yaml?ref=master
+      - git::https://github.com/TourmalineCore/inner-circle-time-api.git@/ci/values.yaml?ref=e676523b205bf0ed2d5c4d07e361381b2ed82059
       - values.yaml.gotmpl
       - values-time-api.yaml.gotmpl
 
diff --git a/deploy/values-time-api.yaml.gotmpl b/deploy/values-time-api.yaml.gotmpl
index 0ba3c4c..e7fb3c6 100644
--- a/deploy/values-time-api.yaml.gotmpl
+++ b/deploy/values-time-api.yaml.gotmpl
@@ -1,5 +1,5 @@
 image:
-  tag: "latest"
+  tag: "sha-e676523b205bf0ed2d5c4d07e361381b2ed82059"
 
 extraConfigMapEnvVars:
   ASPNETCORE_HTTP_PORTS: "80"
diff --git a/deploy/values-time-ui.yaml.gotmpl b/deploy/values-time-ui.yaml.gotmpl
index f2e7aa4..54cad59 100644
--- a/deploy/values-time-ui.yaml.gotmpl
+++ b/deploy/values-time-ui.yaml.gotmpl
@@ -1,5 +1,5 @@
 image:
-  tag: "latest"
+  tag: "sha-82ae737e1d6e5f227fce50b33b6d778d4738301c"
 
 extraConfigMapEnvVars:
   API_ROOT_URL: "{{ .Values.baseExternalUrl }}/api/time"