diff --git a/trivy-0.40.0.tar.zst b/trivy-0.40.0.tar.zst
index 7789b61..b5de803 100644
--- a/trivy-0.40.0.tar.zst
+++ b/trivy-0.40.0.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:1438d1d21cc67ed45d82f725540831ca24f9fc119845cfe68eb2f87cb82b49e1
-size 76730751
+oid sha256:26a4295308f2a927f422338b81f42b4287dd08bcd8834814073e97a27f2a467e
+size 76945308
diff --git a/trivy.spec b/trivy.spec
index f83c12c..ae69624 100644
--- a/trivy.spec
+++ b/trivy.spec
@@ -14,10 +14,8 @@
 
 # Please submit bugfixes or comments via https://bugs.opensuse.org/
 #
-# nodebuginfo
 
 
-%global goipath github.com/aquasecurity/trivy
 Name:           trivy
 Version:        0.40.0
 Release:        0
@@ -46,17 +44,13 @@ name of the container.
 
 %prep
 %setup -qa1
-%autopatch -p1
 
 %build
-%goprep %{goipath}
-
 export CGO_ENABLED=0
-
-%gobuild -mod vendor -ldflags "-X=main.version=%{version}" cmd/trivy
+go build -o trivy -mod=vendor -buildmode=pie -trimpath -ldflags "-s -w -X=main.version=%{version}" cmd/trivy/main.go
 
 %install
-%goinstall
+install -D -m 755 trivy %{buildroot}/%{_bindir}/%{name}
 
 %files
 %license LICENSE
diff --git a/vendor.tar.zst b/vendor.tar.zst
index 6bf1fab..79fa466 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:02729eaeacb2c7766ab96065aaf3c12f78cae80f8c24cea2579a17adbdd7026f
-size 18644113
+oid sha256:d7be343b5d750b8fc7db53aa68733003a06759a25c9e95e7a5ace40ac90425b6
+size 18622680