diff --git a/buildpack.toml b/buildpack.toml
index 96396fd..0072261 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -32,14 +32,14 @@ api = "0.7"
   pre-package = "scripts/build.sh"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:0.89.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:0.90.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@0.89.0"
-    sha256 = "b7cc7c1fb588454947ca678df7ddd906620d399a05f92a550b1b2d312fb26764"
+    purl = "pkg:generic/anchore-syft@0.90.0"
+    sha256 = "7368d65830fe90ad96edac8a1d548193a36e18853f30e11b9f97772a573eae2a"
     stacks = ["io.buildpacks.stacks.bionic", "io.paketo.stacks.tiny", "*"]
-    uri = "https://github.com/anchore/syft/releases/download/v0.89.0/syft_0.89.0_linux_amd64.tar.gz"
-    version = "0.89.0"
+    uri = "https://github.com/anchore/syft/releases/download/v0.90.0/syft_0.90.0_linux_amd64.tar.gz"
+    version = "0.90.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"