diff --git a/buildpack.toml b/buildpack.toml
index bdac8fe..88a7ddb 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -32,14 +32,14 @@ api = "0.7"
   pre-package = "scripts/build.sh"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:0.87.1:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:0.88.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@0.87.1"
-    sha256 = "1f6f5aa0bb5682f8db74cb5adf00fac9bddec40f6fcde808b71c43d3593e3cf5"
+    purl = "pkg:generic/anchore-syft@0.88.0"
+    sha256 = "d22c5e840c1a9ba10aee264d8bd015aca9c745bfd23efdfe75fdd36eeaf75ea8"
     stacks = ["io.buildpacks.stacks.bionic", "io.paketo.stacks.tiny", "*"]
-    uri = "https://github.com/anchore/syft/releases/download/v0.87.1/syft_0.87.1_linux_amd64.tar.gz"
-    version = "0.87.1"
+    uri = "https://github.com/anchore/syft/releases/download/v0.88.0/syft_0.88.0_linux_amd64.tar.gz"
+    version = "0.88.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"