diff --git a/buildpack.toml b/buildpack.toml
index 88a7ddb..96396fd 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -32,14 +32,14 @@ api = "0.7"
   pre-package = "scripts/build.sh"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:0.88.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:0.89.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@0.88.0"
-    sha256 = "d22c5e840c1a9ba10aee264d8bd015aca9c745bfd23efdfe75fdd36eeaf75ea8"
+    purl = "pkg:generic/anchore-syft@0.89.0"
+    sha256 = "b7cc7c1fb588454947ca678df7ddd906620d399a05f92a550b1b2d312fb26764"
     stacks = ["io.buildpacks.stacks.bionic", "io.paketo.stacks.tiny", "*"]
-    uri = "https://github.com/anchore/syft/releases/download/v0.88.0/syft_0.88.0_linux_amd64.tar.gz"
-    version = "0.88.0"
+    uri = "https://github.com/anchore/syft/releases/download/v0.89.0/syft_0.89.0_linux_amd64.tar.gz"
+    version = "0.89.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"