diff --git a/go.mod b/go.mod
index 23b6f53..3bf216a 100644
--- a/go.mod
+++ b/go.mod
@@ -8,7 +8,7 @@ require (
 	github.com/anchore/syft v1.17.0
 	github.com/docker/buildx v0.19.1
 	github.com/docker/cli v27.4.0-rc.2+incompatible
-	github.com/google/go-containerregistry v0.20.2
+	github.com/google/go-containerregistry v0.20.3
 	github.com/in-toto/in-toto-golang v0.9.0
 	github.com/sigstore/cosign/v2 v2.4.1
 	github.com/sigstore/sigstore-go v0.6.2