diff --git a/.github/workflows/depsound.yml b/.github/workflows/depsound.yml
index 79f414b..35252f1 100644
--- a/.github/workflows/depsound.yml
+++ b/.github/workflows/depsound.yml
@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: read # diff the PR's manifests; this job never sees a write token
     steps:
-      - uses: rvagg/depsound-action@ca2026afd4d1fd614f990784867e09da10b6faa8 # v0.3.0
+      - uses: rvagg/depsound-action@e64e9937f8f5d7017446ce4f2375705e6c05a517 # v0.3.3
   post:
     needs: review
     if: ${{ always() && needs.review.result != 'cancelled' }} # a failed review still posts its failure marker
@@ -30,4 +30,4 @@ jobs:
       checks: write        # set the neutral check
       actions: read        # download the report artifact
     steps:
-      - uses: rvagg/depsound-action/post@ca2026afd4d1fd614f990784867e09da10b6faa8 # v0.3.0
+      - uses: rvagg/depsound-action/post@e64e9937f8f5d7017446ce4f2375705e6c05a517 # v0.3.3