diff --git a/bazel/toolchains/ci_deps.bzl b/bazel/toolchains/ci_deps.bzl
index 7bce585d0..653d0410b 100644
--- a/bazel/toolchains/ci_deps.bzl
+++ b/bazel/toolchains/ci_deps.bzl
@@ -398,40 +398,40 @@ def _ghh_deps():
     http_archive(
         name = "com_github_katexochen_ghh_linux_amd64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/3d8f4c4f1aa59b4f983afe87131bf574738973bd18bade8a164dee6bdca22bf8",
-            "https://github.com/katexochen/ghh/releases/download/v0.2.1/ghh_0.2.1_linux_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/b7912ede97a95db9ae163bac3dcca228d1da37622b0dc20f32e5fa79de6c132b",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.0/ghh_0.3.0_linux_amd64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "3d8f4c4f1aa59b4f983afe87131bf574738973bd18bade8a164dee6bdca22bf8",
+        sha256 = "b7912ede97a95db9ae163bac3dcca228d1da37622b0dc20f32e5fa79de6c132b",
     )
     http_archive(
         name = "com_github_katexochen_ghh_linux_arm64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/c7a13bb1f32ff984d10246159db003290d4008154b0e92615c7067a180cc8c35",
-            "https://github.com/katexochen/ghh/releases/download/v0.2.1/ghh_0.2.1_linux_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/81b38d6d12e9b48892cba9261af3e34d7458c5738e82e45e6ac274e9b64e017f",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.0/ghh_0.3.0_linux_arm64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "c7a13bb1f32ff984d10246159db003290d4008154b0e92615c7067a180cc8c35",
+        sha256 = "81b38d6d12e9b48892cba9261af3e34d7458c5738e82e45e6ac274e9b64e017f",
     )
     http_archive(
         name = "com_github_katexochen_ghh_darwin_amd64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/d4caf11df2ab8d26222c6db35a44f53b5d8bfd0d8b12c79a0b9f8469efd0acfc",
-            "https://github.com/katexochen/ghh/releases/download/v0.2.1/ghh_0.2.1_darwin_amd64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/98334c079d1306f729b7c736116521e66277c7f177352f4c3ad20f9b5e69d5f0",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.0/ghh_0.3.0_darwin_amd64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "d4caf11df2ab8d26222c6db35a44f53b5d8bfd0d8b12c79a0b9f8469efd0acfc",
+        sha256 = "98334c079d1306f729b7c736116521e66277c7f177352f4c3ad20f9b5e69d5f0",
     )
     http_archive(
         name = "com_github_katexochen_ghh_darwin_arm64",
         urls = [
-            "https://cdn.confidential.cloud/constellation/cas/sha256/7601f0926ba0df7ad36ac05e20a60347f97ac443262dc691bc5060f27d727b39",
-            "https://github.com/katexochen/ghh/releases/download/v0.2.1/ghh_0.2.1_darwin_arm64.tar.gz",
+            "https://cdn.confidential.cloud/constellation/cas/sha256/1a29acfbe147ac7ed0669e43759cf43434f14a5a52cf0de3296575821ccdc3ab",
+            "https://github.com/katexochen/ghh/releases/download/v0.3.0/ghh_0.3.0_darwin_arm64.tar.gz",
         ],
         type = "tar.gz",
         build_file_content = """exports_files(["ghh"], visibility = ["//visibility:public"])""",
-        sha256 = "7601f0926ba0df7ad36ac05e20a60347f97ac443262dc691bc5060f27d727b39",
+        sha256 = "1a29acfbe147ac7ed0669e43759cf43434f14a5a52cf0de3296575821ccdc3ab",
     )