diff --git a/go.mod b/go.mod
index d37e820d..94eb65e3 100644
--- a/go.mod
+++ b/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/sigstore/rekor v1.3.9
 	github.com/sigstore/sigstore v1.9.3
 	github.com/sirupsen/logrus v1.9.3
-	github.com/theupdateframework/go-tuf v0.7.0
+	github.com/theupdateframework/go-tuf/v2 v2.0.2
 )
 
 require (