diff --git a/buildpack.toml b/buildpack.toml
index d1f9233..ecc9ef9 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -32,16 +32,16 @@ api = "0.7"
   pre-package = "scripts/build.sh"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:1.15.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:1.17.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@1.15.0?arch=amd64"
-    sha256 = "bd7215c3e0bfaec1139c3c46908b65ae01bc8d745723a3ce42b9659c2b62e428"
-    source = "https://github.com/anchore/syft/archive/refs/tags/v1.15.0.tar.gz"
-    source-sha256 = "0e98e7066725ac2aff9de522aef2ea46b40cc2a5dcaa076373701b4bd4eac2f8"
+    purl = "pkg:generic/anchore-syft@1.17.0?arch=amd64"
+    sha256 = "3485e831c21fd80b41fa3fc1f72e10367989b2d1aee082d642b5b0e658a02b44"
+    source = "https://github.com/anchore/syft/archive/refs/tags/v1.17.0.tar.gz"
+    source-sha256 = "904d3a64b750ef142b325670a55a7e8a9c4dd913998a752497ccc2c801ad6192"
     stacks = ["*"]
-    uri = "https://github.com/anchore/syft/releases/download/v1.15.0/syft_1.15.0_linux_amd64.tar.gz"
-    version = "1.15.0"
+    uri = "https://github.com/anchore/syft/releases/download/v1.17.0/syft_1.17.0_linux_amd64.tar.gz"
+    version = "1.17.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"