diff --git a/sourcetool/go.mod b/sourcetool/go.mod
index 70ba6318..0604badb 100644
--- a/sourcetool/go.mod
+++ b/sourcetool/go.mod
@@ -3,7 +3,7 @@ module github.com/slsa-framework/slsa-source-poc/sourcetool
 go 1.23.5
 
 require (
-	github.com/carabiner-dev/bnd v0.0.1-pre1.0.20250219220316-b7a2b5a6034b
+	github.com/carabiner-dev/bnd v0.2.0
 	github.com/go-git/go-git/v5 v5.13.2
 	github.com/google/go-github/v69 v69.2.0
 	github.com/in-toto/attestation v1.1.1