diff --git a/.github/workflows/actionlint.yml b/.github/workflows/actionlint.yml
index 8b466e7172c2..1674b1102a10 100644
--- a/.github/workflows/actionlint.yml
+++ b/.github/workflows/actionlint.yml
@@ -5,6 +5,11 @@ on:
       - '.github/**'
     types: [opened, synchronize, reopened, ready_for_review]
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   actionlint:
     runs-on: ubuntu-latest
diff --git a/.github/workflows/enos-release-testing-oss.yml b/.github/workflows/enos-release-testing-oss.yml
index cb8a1c8df055..62bdf4891a25 100644
--- a/.github/workflows/enos-release-testing-oss.yml
+++ b/.github/workflows/enos-release-testing-oss.yml
@@ -6,6 +6,11 @@ on:
       - enos-release-testing-oss
       - enos-release-testing-oss::*
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   product-metadata:
     if: ${{ startsWith(github.event.client_payload.payload.branch, 'release/') }}
diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml
index 1b9a48be787c..455180e2be81 100644
--- a/.github/workflows/security-scan.yml
+++ b/.github/workflows/security-scan.yml
@@ -1,5 +1,10 @@
 name: Security Scan
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 on:
   push:
     branches: [main]
diff --git a/.github/workflows/stable-website.yaml b/.github/workflows/stable-website.yaml
index 2fa1833f10be..e450a64c1b86 100644
--- a/.github/workflows/stable-website.yaml
+++ b/.github/workflows/stable-website.yaml
@@ -3,6 +3,11 @@ on:
     types:
       - closed
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   stable_website_cherry_pick:
     if: github.event.pull_request.merged && contains(github.event.pull_request.labels.*.name, 'docs-cherrypick')
diff --git a/.github/workflows/test-acc-dockeronly-nightly.yml b/.github/workflows/test-acc-dockeronly-nightly.yml
index 4a78bb62f49a..a3c6e484d072 100644
--- a/.github/workflows/test-acc-dockeronly-nightly.yml
+++ b/.github/workflows/test-acc-dockeronly-nightly.yml
@@ -4,6 +4,11 @@ on:
   # Change to nightly cadence once API-credential-requiring tests are added to the jobs
   workflow_dispatch: 
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 # Currently the jobs here are only for acceptance tests that have no dependencies except for Docker
 jobs:
   plugins-database:
diff --git a/.github/workflows/test-ci-bootstrap.yml b/.github/workflows/test-ci-bootstrap.yml
index 4a812615ac11..e0aa302dc92a 100644
--- a/.github/workflows/test-ci-bootstrap.yml
+++ b/.github/workflows/test-ci-bootstrap.yml
@@ -1,5 +1,10 @@
 name: test-ci-bootstrap
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 on:
   workflow_dispatch:
   pull_request:
diff --git a/.github/workflows/test-enos-scenario-ui.yml b/.github/workflows/test-enos-scenario-ui.yml
index 3dc3270b31f8..f6d4d68f7613 100644
--- a/.github/workflows/test-enos-scenario-ui.yml
+++ b/.github/workflows/test-enos-scenario-ui.yml
@@ -1,6 +1,11 @@
 ---
 name: Vault UI Tests
 
+# cancel existing runs of the same workflow on the same ref
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
+  cancel-in-progress: true
+
 on:
   workflow_call:
     inputs: