diff --git a/.github/workflows/flowctl-release.yaml b/.github/workflows/flowctl-release.yaml
index 40b5e3dba7..91fb795f5e 100644
--- a/.github/workflows/flowctl-release.yaml
+++ b/.github/workflows/flowctl-release.yaml
@@ -23,7 +23,7 @@ jobs:
             assetName: flowctl-x86_64-linux
           # On mac, it's the opposite. Programs built on the latest macos can run on older versions,
           # but not the other way around.
-          - os: macos-latest
+          - os: macos-14
             assetName: flowctl-multiarch-macos
     steps:
       - name: Checkout code
@@ -42,7 +42,7 @@ jobs:
 
       # Mac build steps:
       - name: Setup mac signing certificate
-        if: matrix.config.os == 'macos-latest'
+        if: matrix.config.os == 'macos-14'
         env:
           MAC_SIGNING_CERTIFICATE_BASE64: ${{ secrets.MAC_SIGNING_CERTIFICATE_BASE64 }}
           MAC_CERTIFICATE_PASSWORD: ${{ secrets.MAC_CERTIFICATE_PASSWORD }}
@@ -72,7 +72,7 @@ jobs:
 
       # This one mac build runs on both intel and m1 macs
       - name: Build Mac
-        if: matrix.config.os == 'macos-latest'
+        if: matrix.config.os == 'macos-14'
         env:
           MAC_CERTIFICATE_IDENTITY: ${{ secrets.MAC_CERTIFICATE_IDENTITY }}
         # The toolchain action always gives you the default target, but we always need both
diff --git a/.github/workflows/flowctl-test.yaml b/.github/workflows/flowctl-test.yaml
index c16be253f2..f4bcd7778d 100644
--- a/.github/workflows/flowctl-test.yaml
+++ b/.github/workflows/flowctl-test.yaml
@@ -15,7 +15,7 @@ concurrency:
 jobs:
   test:
     name: Test flowctl on macos
-    runs-on: macos-latest
+    runs-on: macos-14
     steps:
       - name: Checkout code
         uses: actions/checkout@v2