diff --git a/buildpack.toml b/buildpack.toml
index 398290b..5e0b288 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -32,16 +32,16 @@ api = "0.7"
   pre-package = "scripts/build.sh"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:1.17.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:1.18.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@1.17.0?arch=amd64"
-    sha256 = "3485e831c21fd80b41fa3fc1f72e10367989b2d1aee082d642b5b0e658a02b44"
-    source = "https://github.com/anchore/syft/archive/refs/tags/v1.17.0.tar.gz"
-    source-sha256 = "904d3a64b750ef142b325670a55a7e8a9c4dd913998a752497ccc2c801ad6192"
+    purl = "pkg:generic/anchore-syft@1.18.0?arch=amd64"
+    sha256 = "0b6fd1e0dd5b00b19585e5cde8e1c1f4ef60dc8fba8b41fab55f00852a2fbb8d"
+    source = "https://github.com/anchore/syft/archive/refs/tags/v1.18.0.tar.gz"
+    source-sha256 = "293c69b36f1766764030fc9ae733cf4cf2a979d0647ff97295d0df61b37be4ae"
     stacks = ["*"]
-    uri = "https://github.com/anchore/syft/releases/download/v1.17.0/syft_1.17.0_linux_amd64.tar.gz"
-    version = "1.17.0"
+    uri = "https://github.com/anchore/syft/releases/download/v1.18.0/syft_1.18.0_linux_amd64.tar.gz"
+    version = "1.18.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"