diff --git a/buildpack.toml b/buildpack.toml
index d1f9233..29807b7 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -48,16 +48,16 @@ api = "0.7"
       uri = "https://github.com/anchore/syft/blob/main/LICENSE"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:1.15.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:1.16.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@1.15.0?arch=arm64"
-    sha256 = "98fc03dbba3de4f9c4227598c6ac185e7e78704a2638962f3973a6a0aa270208"
-    source = "https://github.com/anchore/syft/archive/refs/tags/v1.15.0.tar.gz"
-    source-sha256 = "0e98e7066725ac2aff9de522aef2ea46b40cc2a5dcaa076373701b4bd4eac2f8"
+    purl = "pkg:generic/anchore-syft@1.16.0?arch=arm64"
+    sha256 = "26f4cfd4cf712c24ed208566fb564ace629f5f069c068b8130f2e88e4b58912a"
+    source = "https://github.com/anchore/syft/archive/refs/tags/v1.16.0.tar.gz"
+    source-sha256 = "ebf48d31c816a6d1689ed281cf489bf0813bfdaaa91c67dcb40f21447cf15dfe"
     stacks = ["*"]
-    uri = "https://github.com/anchore/syft/releases/download/v1.15.0/syft_1.15.0_linux_arm64.tar.gz"
-    version = "1.15.0"
+    uri = "https://github.com/anchore/syft/releases/download/v1.16.0/syft_1.16.0_linux_arm64.tar.gz"
+    version = "1.16.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"