diff --git a/mise.lock b/mise.lock
index 62820a1..f492c12 100644
--- a/mise.lock
+++ b/mise.lock
@@ -1,8 +1,96 @@
 # @generated - this file is auto-generated by `mise lock` https://mise.en.dev/dev-tools/mise-lock.html
 
-[[tools.gh]]
+[[tools."github:anchore/syft"]]
+version = "1.45.1"
+backend = "github:anchore/syft"
+
+[tools."github:anchore/syft"."platforms.linux-arm64"]
+checksum = "sha256:7df9f45cba1f6358ecfc7fac349d43b4605137001f9646b41267abe15a7c6cd7"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_linux_arm64.tar.gz"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373968"
+provenance = "github-attestations"
+
+[tools."github:anchore/syft"."platforms.linux-arm64-musl"]
+checksum = "sha256:7df9f45cba1f6358ecfc7fac349d43b4605137001f9646b41267abe15a7c6cd7"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_linux_arm64.tar.gz"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373968"
+provenance = "github-attestations"
+
+[tools."github:anchore/syft"."platforms.linux-x64"]
+checksum = "sha256:20c84195e24927f50a3b2269946be51f4c4abc9d2f145fee7388b4199149f716"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_linux_amd64.tar.gz"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373963"
+provenance = "github-attestations"
+
+[tools."github:anchore/syft"."platforms.linux-x64-musl"]
+checksum = "sha256:20c84195e24927f50a3b2269946be51f4c4abc9d2f145fee7388b4199149f716"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_linux_amd64.tar.gz"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373963"
+provenance = "github-attestations"
+
+[tools."github:anchore/syft"."platforms.macos-arm64"]
+checksum = "sha256:2f79ccbba6236636125d1ece60a6dc71d4e4f91b9f580cc2afbbafc763ff353d"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_darwin_arm64.tar.gz"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373975"
+provenance = "github-attestations"
+
+[tools."github:anchore/syft"."platforms.macos-x64"]
+checksum = "sha256:abe6e73b819f433b69ece755dc180a19c7694896062bf806f89d0e3ca5db710a"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_darwin_amd64.tar.gz"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373967"
+provenance = "github-attestations"
+
+[tools."github:anchore/syft"."platforms.windows-x64"]
+checksum = "sha256:a9d12c26521e09213745884b8b7dc361dff83188c3a1ada0da1af71012dbcd52"
+url = "https://github.com/anchore/syft/releases/download/v1.45.1/syft_1.45.1_windows_amd64.zip"
+url_api = "https://api.github.com/repos/anchore/syft/releases/assets/439373962"
+provenance = "github-attestations"
+
+[[tools."github:cli/cli"]]
 version = "2.93.0"
-backend = "aqua:cli/cli"
+backend = "github:cli/cli"
+
+[tools."github:cli/cli"."platforms.linux-arm64"]
+checksum = "sha256:c55feb33684abba57e9909737340d5b39282257c0363e1edde6785ac4a413be7"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_linux_arm64.tar.gz"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301780"
+provenance = "github-attestations"
+
+[tools."github:cli/cli"."platforms.linux-arm64-musl"]
+checksum = "sha256:c55feb33684abba57e9909737340d5b39282257c0363e1edde6785ac4a413be7"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_linux_arm64.tar.gz"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301780"
+provenance = "github-attestations"
+
+[tools."github:cli/cli"."platforms.linux-x64"]
+checksum = "sha256:02d1290eba130e0b896f3709ffff22e1c75a51475ddb70476a85abc6b5807af0"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_linux_amd64.tar.gz"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301770"
+provenance = "github-attestations"
+
+[tools."github:cli/cli"."platforms.linux-x64-musl"]
+checksum = "sha256:02d1290eba130e0b896f3709ffff22e1c75a51475ddb70476a85abc6b5807af0"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_linux_amd64.tar.gz"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301770"
+provenance = "github-attestations"
+
+[tools."github:cli/cli"."platforms.macos-arm64"]
+checksum = "sha256:a86be4e0a86c26456cf71177d6572d6f1165cf1679e532b72f7f15918ee51fd2"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_macOS_arm64.zip"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301800"
+provenance = "github-attestations"
+
+[tools."github:cli/cli"."platforms.macos-x64"]
+checksum = "sha256:009425b9d175c482037fe25181817fd6b1ea3ae1f51cfae0e18f29f33d3152ac"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_macOS_amd64.zip"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301796"
+provenance = "github-attestations"
+
+[tools."github:cli/cli"."platforms.windows-x64"]
+checksum = "sha256:77aa01ed7317295ad550de0ad04f3f276b1ef0e9272e3d002ac28dd99853d211"
+url = "https://github.com/cli/cli/releases/download/v2.93.0/gh_2.93.0_windows_amd64.zip"
+url_api = "https://api.github.com/repos/cli/cli/releases/assets/431301821"
+provenance = "github-attestations"
 
 [[tools.grype]]
 version = "0.114.0"
@@ -11,10 +99,6 @@ backend = "ubi:anchore/grype"
 [tools.grype."platforms.linux-x64-grype"]
 checksum = "blake3:5cd9b6cce92e3268627efb24487a87e251094622d74bdfa9b32857d7fb314f18"
 
-[[tools.syft]]
-version = "1.45.1"
-backend = "aqua:anchore/syft"
-
 [[tools.zizmor]]
 version = "1.25.2"
 backend = "aqua:zizmorcore/zizmor"
diff --git a/mise.toml b/mise.toml
index 120457f..0ed2555 100644
--- a/mise.toml
+++ b/mise.toml
@@ -2,7 +2,7 @@
 lockfile = true
 
 [tools]
-gh = "2.93.0"
+"github:cli/cli" = "2.93.0"
 grype = "0.114.0"
-syft = "1.45.1"
+"github:anchore/syft" = "1.45.1"
 zizmor = "1.25.2"