diff --git a/.yardstick.yaml b/.yardstick.yaml
index 4e3e1803..1940176e 100644
--- a/.yardstick.yaml
+++ b/.yardstick.yaml
@@ -116,6 +116,6 @@ result-sets:
           # try not to bump this syft version unless you really need to. The consequence of bumping this version
           # is that other repos (such as the grype test/quality gate and vunnel tests/quality gate) will not
           # be able to leverage the cache without matching the specific syft version referenced here.
-          version: v0.87.1
+          version: v0.89.0
           # once we have results captured, don't re-capture them
           refresh: false