diff --git a/kubernetes/apps/sure/helm-release.yml b/kubernetes/apps/sure/helm-release.yml
index 49d74416ee..1d3a139533 100644
--- a/kubernetes/apps/sure/helm-release.yml
+++ b/kubernetes/apps/sure/helm-release.yml
@@ -189,7 +189,7 @@ spec:
       enabled: true
       image:
         repository: ghcr.io/luckypipewrench/pipelock
-        tag: 3.0.0
+        tag: 3.3.0
         pullPolicy: IfNotPresent
       replicas: 1
       # Pipelock run mode: strict, balanced, audit