diff --git a/apps/admission-webhook-k8s/admission-webhook.yaml b/apps/admission-webhook-k8s/admission-webhook.yaml
index 824bc8d7bc66..468ef686c495 100644
--- a/apps/admission-webhook-k8s/admission-webhook.yaml
+++ b/apps/admission-webhook-k8s/admission-webhook.yaml
@@ -17,7 +17,7 @@ spec:
       serviceAccount: admission-webhook-sa
       containers:
         - name: admission-webhook-k8s
-          image: ghcr.io/networkservicemesh/ci/cmd-admission-webhook-k8s:b0b12e1
+          image: ghcr.io/networkservicemesh/cmd-admission-webhook-k8s:v1.5.0-rc.1
           imagePullPolicy: IfNotPresent
           readinessProbe:
             httpGet:
diff --git a/apps/nse-vfio/nse.yaml b/apps/nse-vfio/nse.yaml
index 0d9dda1a93df..81bf1de728cd 100644
--- a/apps/nse-vfio/nse.yaml
+++ b/apps/nse-vfio/nse.yaml
@@ -32,7 +32,7 @@ spec:
               mountPath: /dev/vfio
 
         - name: sidecar
-          image: ghcr.io/networkservicemesh/ci/cmd-nse-vfio:28b3a99
+          image: ghcr.io/networkservicemesh/cmd-nse-vfio:v1.5.0-rc.1
           env:
             - name: SPIFFE_ENDPOINT_SOCKET
               value: unix:///run/spire/sockets/agent.sock