diff --git a/scripts/clone.sh b/scripts/clone.sh
index 94c55e4..5246ee1 100755
--- a/scripts/clone.sh
+++ b/scripts/clone.sh
@@ -29,7 +29,8 @@
 
 # Global defaults
 REFSPEC_MASTER="refs/heads/master"
-REFSPEC_MAIN="refs/heads/main"
+REFSPEC_SHA_TF_M_TESTS="5da74a4aef63d879b6ef48ced617d6acaa5aeefa"
+REFSPEC_SHA_TF_M_EXTRAS="b2fe49b96ea77416e0f849be73f71a7a2acd3f50"
 GIT_REPO="https://git.trustedfirmware.org"
 GERRIT_HOST="https://review.trustedfirmware.org"
 GIT_CLONE_PARAMS=""
@@ -49,8 +50,8 @@
 TF_GERRIT_REFSPEC="${TF_GERRIT_REFSPEC:-${REFSPEC_MASTER}}"
 TFTF_GERRIT_REFSPEC="${TFTF_GERRIT_REFSPEC:-${REFSPEC_MASTER}}"
 SPM_REFSPEC="${SPM_REFSPEC:-${REFSPEC_MASTER}}"
-TF_M_TESTS_GERRIT_REFSPEC="${TF_M_TESTS_GERRIT_REFSPEC:-${REFSPEC_MAIN}}"
-TF_M_EXTRAS_GERRIT_REFSPEC="${TF_M_EXTRAS_GERRIT_REFSPEC:-${REFSPEC_MAIN}}"
+TF_M_TESTS_GERRIT_REFSPEC="${TF_M_TESTS_GERRIT_REFSPEC:-${REFSPEC_SHA_TF_M_TESTS}}"
+TF_M_EXTRAS_GERRIT_REFSPEC="${TF_M_EXTRAS_GERRIT_REFSPEC:-${REFSPEC_SHA_TF_M_EXTRAS}}"
 CI_REFSPEC="${CI_REFSPEC:-${REFSPEC_MASTER}}"
 JOBS_REFSPEC="${JOBS_REFSPEC:-${REFSPEC_MASTER}}"
 
diff --git a/tf-a-ci-gateway.yaml b/tf-a-ci-gateway.yaml
index 8f0d9b1..7ee0a75 100644
--- a/tf-a-ci-gateway.yaml
+++ b/tf-a-ci-gateway.yaml
@@ -49,14 +49,14 @@
           tf-a-tests refspec to use. The master branch is used by default.
     - string:
         name: TF_M_TESTS_GERRIT_REFSPEC
-        default: '+refs/heads/main:refs/remotes/origin/main'
+        default: '5da74a4aef63d879b6ef48ced617d6acaa5aeefa'
         description: |
-          tf-m-tests refspec to use. The main branch is used by default.
+          tf-m-tests refspec to use. Use stable SHA by default.
     - string:
         name: TF_M_EXTRAS_GERRIT_REFSPEC
-        default: '+refs/heads/main:refs/remotes/origin/main'
+        default: 'b2fe49b96ea77416e0f849be73f71a7a2acd3f50'
         description: |
-          tf-m-extras refspec to use. The main branch is used by default.
+          tf-m-extras refspec to use. Use stable SHA by default.
     - string:
        name: SPM_REFSPEC
        default: '+refs/heads/master:refs/remotes/origin/master'