diff --git a/buildpack.toml b/buildpack.toml
index 5e0b288..8503573 100644
--- a/buildpack.toml
+++ b/buildpack.toml
@@ -48,16 +48,16 @@ api = "0.7"
       uri = "https://github.com/anchore/syft/blob/main/LICENSE"
 
   [[metadata.dependencies]]
-    cpes = ["cpe:2.3:a:anchore:syft:1.17.0:*:*:*:*:*:*:*"]
+    cpes = ["cpe:2.3:a:anchore:syft:1.18.0:*:*:*:*:*:*:*"]
     id = "syft"
     name = "Syft"
-    purl = "pkg:generic/anchore-syft@1.17.0?arch=arm64"
-    sha256 = "7f3e0cf3f8bc5dc320e56b0e133c854c8000d5f473bd61d247341a1b7bfa27ea"
-    source = "https://github.com/anchore/syft/archive/refs/tags/v1.17.0.tar.gz"
-    source-sha256 = "904d3a64b750ef142b325670a55a7e8a9c4dd913998a752497ccc2c801ad6192"
+    purl = "pkg:generic/anchore-syft@1.18.0?arch=arm64"
+    sha256 = "24af468c55af7f52a90e6345e695dced1cb4311878578248a1ca90a332cda7df"
+    source = "https://github.com/anchore/syft/archive/refs/tags/v1.18.0.tar.gz"
+    source-sha256 = "293c69b36f1766764030fc9ae733cf4cf2a979d0647ff97295d0df61b37be4ae"
     stacks = ["*"]
-    uri = "https://github.com/anchore/syft/releases/download/v1.17.0/syft_1.17.0_linux_arm64.tar.gz"
-    version = "1.17.0"
+    uri = "https://github.com/anchore/syft/releases/download/v1.18.0/syft_1.18.0_linux_arm64.tar.gz"
+    version = "1.18.0"
 
     [[metadata.dependencies.licenses]]
       type = "Apache-2.0"