diff --git a/security-groups/README.md b/security-groups/README.md
index 3191a91..e22ad1e 100644
--- a/security-groups/README.md
+++ b/security-groups/README.md
@@ -39,9 +39,9 @@ module "base-security-groups" {
 
 | Name | Source | Version |
 |------|--------|---------|
-| <a name="module_sg-linux-base"></a> [sg-linux-base](#module\_sg-linux-base) | git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-linux-base | n/a |
-| <a name="module_sg-ois-scanner"></a> [sg-ois-scanner](#module\_sg-ois-scanner) | git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//ois-scanner | n/a |
-| <a name="module_sg-windows-base"></a> [sg-windows-base](#module\_sg-windows-base) | git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-windows-base | n/a |
+| <a name="module_sg-linux-base"></a> [sg-linux-base](#module\_sg-linux-base) | git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-linux-base | tf-upgrade |
+| <a name="module_sg-ois-scanner"></a> [sg-ois-scanner](#module\_sg-ois-scanner) | git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//ois-scanner | tf-ugprade |
+| <a name="module_sg-windows-base"></a> [sg-windows-base](#module\_sg-windows-base) | git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-windows-base | tf-upgrade |
 
 ## Resources
 
diff --git a/security-groups/main.tf b/security-groups/main.tf
index e0fcf35..1a04126 100644
--- a/security-groups/main.tf
+++ b/security-groups/main.tf
@@ -51,7 +51,7 @@ resource "aws_default_security_group" "default" {
 # base security groups in each vpc
 #---
 module "sg-linux-base" {
-  source        = "git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-linux-base"
+  source        = "git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-linux-base?ref=tf-upgrade"
   vpc_id        = var.vpc_id
   vpc_full_name = var.vpc_full_name
   use_vpc_cidr  = false
@@ -64,7 +64,7 @@ module "sg-linux-base" {
 }
 
 module "sg-windows-base" {
-  source        = "git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-windows-base"
+  source        = "git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//it-windows-base?ref=tf-upgrade"
   vpc_id        = var.vpc_id
   vpc_full_name = var.vpc_full_name
   use_vpc_cidr  = false
@@ -77,7 +77,7 @@ module "sg-windows-base" {
 }
 
 module "sg-ois-scanner" {
-  source        = "git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//ois-scanner"
+  source        = "git@github.e.it.census.gov:terraform-modules/aws-common-security-groups.git//ois-scanner?ref=tf-ugprade"
   vpc_id        = var.vpc_id
   vpc_full_name = var.vpc_full_name
   use_vpc_cidr  = false