diff --git a/go.mod b/go.mod
index 1828218..dc37d21 100644
--- a/go.mod
+++ b/go.mod
@@ -12,7 +12,7 @@ require (
 	github.com/git-pkgs/registries v0.9.1
 	github.com/git-pkgs/sbom v0.1.6
 	github.com/git-pkgs/sigstore v0.2.1
-	github.com/git-pkgs/spdx v0.3.1
+	github.com/git-pkgs/spdx v0.3.2
 	github.com/git-pkgs/vers v0.7.0
 	github.com/sigstore/sigstore-go v1.3.0
 	github.com/spf13/cobra v1.10.2
diff --git a/go.sum b/go.sum
index 003d32c..c161f05 100644
--- a/go.sum
+++ b/go.sum
@@ -248,8 +248,8 @@ github.com/git-pkgs/sbom v0.1.6 h1:bHgk58NmpDZVNFe+6+kTEigrCaYkmpLjjDl8V0X9+RA=
 github.com/git-pkgs/sbom v0.1.6/go.mod h1:CHxXSiOfsMRzF7SfvlTlZ2xhJE+NbZ/GK/lFuEYGC3U=
 github.com/git-pkgs/sigstore v0.2.1 h1:lzKgK3ZSdmsDTAbNJcu8G6Qom90DdAKqYHU3j6ojhPQ=
 github.com/git-pkgs/sigstore v0.2.1/go.mod h1:exQpA4NVif/YsE6+O2foMz5XKInUejPiG8qC4nHu73A=
-github.com/git-pkgs/spdx v0.3.1 h1:58JPY5X9pYpXvnzzZIgehItlBykeOOw52pNc4OBcS+c=
-github.com/git-pkgs/spdx v0.3.1/go.mod h1:cqRoZcvl530s/W+oGNvwjt4ODN8T1W6D/20MUZEFdto=
+github.com/git-pkgs/spdx v0.3.2 h1:PV0w09Bt8rIkAof1+zuo3vxNYKgCoFTxQY9E1Q85PL0=
+github.com/git-pkgs/spdx v0.3.2/go.mod h1:n9rAicgw+Wqtfursju6oKaAL6cUCTiIS926mb1KWoKU=
 github.com/git-pkgs/vers v0.7.0 h1:7PD2DKFB8jTDIfiyWXbqYW54iVuNkFCBgXHgxOTdr8A=
 github.com/git-pkgs/vers v0.7.0/go.mod h1:ofLiBpPNkQmC0LB1k0zmN1gCv7Hi3MiZx8WtmWZ4A9A=
 github.com/github/go-spdx/v2 v2.7.0 h1:GzfXx4wFdlilARxmFRXW/mgUy3A4vSqZocCMFV6XFdQ=