diff --git a/buildpack.toml b/buildpack.toml
index 0072261..3ae3b0b 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -32,14 +32,14 @@ api = "0.7"
   pre-package = "scripts/build.sh"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:0.90.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:0.91.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@0.90.0"
-    sha256 = "7368d65830fe90ad96edac8a1d548193a36e18853f30e11b9f97772a573eae2a"
+    purl = "pkg:generic/anchore-syft@0.91.0"
+    sha256 = "51188401eb2a2425db1155ba18cb64db8275491a1e1049690fe6e8a371ff222a"
     stacks = ["io.buildpacks.stacks.bionic", "io.paketo.stacks.tiny", "*"]
-    uri = "https://github.com/anchore/syft/releases/download/v0.90.0/syft_0.90.0_linux_amd64.tar.gz"
-    version = "0.90.0"
+    uri = "https://github.com/anchore/syft/releases/download/v0.91.0/syft_0.91.0_linux_amd64.tar.gz"
+    version = "0.91.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"