diff --git a/CHANGELOG.md b/CHANGELOG.md
index aef7ed33d09b7cc403343a2c7749c4b739eaecb2..6b0152c31b194640905def59c34ec7d72deb5ccc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 
 ---
 
+## [1.13.0-bb.3]
+### Fixed
+- incorrect label on `allow-egress-enterprise-engine-upgrade-job` network policy
+
 ## [1.13.0-bb.2]
 ### Changed
 - updated Redis dependency to `14.1.0-bb.2` to utilize `big-bang/base` image for upgrade jobs
diff --git a/chart/Chart.yaml b/chart/Chart.yaml
index 57a873390441f6fe405d5b0fbe59bd2724149d23..fc5c4c88c9f498dae0fcd2dfd5c5f6a9bd92dcaf 100644
--- a/chart/Chart.yaml
+++ b/chart/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: anchore-engine
-version: 1.13.0-bb.2
+version: 1.13.0-bb.3
 appVersion: 0.10.0
 description: Anchore container analysis and policy evaluation engine service
 keywords:
diff --git a/chart/templates/bigbang/networkpolicies/allow-egress-from-jobs.yaml b/chart/templates/bigbang/networkpolicies/allow-egress-from-jobs.yaml
index 20051cd7752a88950ec211c154302b2f30dead21..73a5e972e1d4957374b7c65240ba9061e90adb16 100644
--- a/chart/templates/bigbang/networkpolicies/allow-egress-from-jobs.yaml
+++ b/chart/templates/bigbang/networkpolicies/allow-egress-from-jobs.yaml
@@ -52,7 +52,7 @@ metadata:
 spec:
   podSelector:
     matchLabels:
-      job-name: anchore-engine-upgrade
+      job-name: anchore-enterprise-upgrade
   policyTypes:
   - Egress
   egress: