diff --git a/.circleci/config.yml b/.circleci/config.yml
index 552f4a1d56..ae4ac9479f 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -64,10 +64,10 @@ common:
 executors:
   cif_executor:
     docker:
-      - image: cimg/openjdk:11.0-browsers
+      - image: cimg/openjdk:11.0-browsers@sha256:d41abcf26cb4714c8c451f87560ae3dc88767c84e0c03754286df1f301c00a51
   cif_executor_java8:
     docker:
-      - image: cimg/openjdk:8.0-browsers
+      - image: cimg/openjdk:8.0-browsers@sha256:5889f503182465bdb6d197ce9afee2ca62517acdc555b6703285e796a4f37626
   test_executor_cloudready:
     docker:
       - image: docker-adobe-cif-release.dr-uw2.adobeitc.com/circleci-qp:6.4.6-openjdk11
@@ -136,7 +136,7 @@ jobs:
 
   karma:
     docker:
-      - image: cimg/node:lts-browsers
+      - image: cimg/node:lts-browsers@sha256:5f2070d5e582a32f977e14e8d7e611acf91e4affb10dc4cf9e536e040dfd7038
     steps:
       - checkout
       - browser-tools/install-browser-tools
@@ -161,7 +161,7 @@ jobs:
 
   jest:
     docker:
-      - image: cimg/node:lts-browsers
+      - image: cimg/node:lts-browsers@sha256:5f2070d5e582a32f977e14e8d7e611acf91e4affb10dc4cf9e536e040dfd7038
     steps:
       - checkout
       - run:
@@ -184,7 +184,7 @@ jobs:
 
   jest-extension:
     docker:
-      - image: cimg/node:lts-browsers
+      - image: cimg/node:lts-browsers@sha256:5f2070d5e582a32f977e14e8d7e611acf91e4affb10dc4cf9e536e040dfd7038
     steps:
       - checkout
       - run: