diff --git a/test/Dockerfile.distro b/test/Dockerfile.distro
index 977ba65852..026a0c26d9 100644
--- a/test/Dockerfile.distro
+++ b/test/Dockerfile.distro
@@ -111,7 +111,7 @@ RUN install-tool rust 1.97.1
 RUN install-tool skopeo 1.23.0
 
 # renovate: datasource=github-releases packageName=getsops/sops
-RUN install-tool sops v3.13.2
+RUN install-tool sops v3.13.3
 
 # not yet supported on resolute https://github.com/swiftlang/swift-docker/issues/524
 # renovate: datasource=docker depName=swift
diff --git a/test/latest/Dockerfile b/test/latest/Dockerfile
index 54c19d006c..620d99cfaa 100644
--- a/test/latest/Dockerfile
+++ b/test/latest/Dockerfile
@@ -250,7 +250,7 @@ RUN install-tool mise 2026.7.11
 RUN install-tool skopeo 1.23.0
 
 # renovate: datasource=github-releases packageName=getsops/sops
-RUN install-tool sops v3.13.2
+RUN install-tool sops v3.13.3
 
 # renovate: datasource=github-releases packageName=opentofu/opentofu
 RUN install-tool tofu 1.12.5
diff --git a/test/latest/Dockerfile.arm64 b/test/latest/Dockerfile.arm64
index dfb77d9c7d..d726f1852b 100644
--- a/test/latest/Dockerfile.arm64
+++ b/test/latest/Dockerfile.arm64
@@ -194,7 +194,7 @@ RUN install-tool mise 2026.7.11
 RUN install-tool skopeo 1.23.0
 
 # renovate: datasource=github-releases packageName=getsops/sops
-RUN install-tool sops v3.13.2
+RUN install-tool sops v3.13.3
 
 # renovate: datasource=github-releases packageName=containerbase/wally-prebuild
 RUN install-tool wally 0.3.2