diff --git a/helm/values.yaml b/helm/values.yaml
index ef44bed..d3a901e 100644
--- a/helm/values.yaml
+++ b/helm/values.yaml
@@ -5,7 +5,7 @@ image:
   repository: socketdev/socket-registry-firewall
   # Defaults to the latest published image so deployments pick up new releases
   # without a chart bump. Pin a version for reproducibility, e.g. tag: "1.1.327".
-  tag: "latest"
+  tag: "1.1.328"
   # Always (not IfNotPresent) so "latest" actually refreshes on pod restart.
   pullPolicy: Always