diff --git a/.gitignore b/.gitignore
index bcd2795..29380cf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,6 @@ docs/versions/devel.md
 
 # generated output from go run ./... compile
 checklist.md
+
+# go build artifacts
+cmd/security-baseline
\ No newline at end of file
diff --git a/cmd/go.mod b/cmd/go.mod
index 76f4e02..c344ca8 100644
--- a/cmd/go.mod
+++ b/cmd/go.mod
@@ -7,7 +7,7 @@ toolchain go1.24.1
 require (
 	github.com/defenseunicorns/go-oscal v0.6.2
 	github.com/goccy/go-yaml v1.18.0
-	github.com/revanite-io/sci v0.3.8
+	github.com/ossf/gemara v0.3.9
 	github.com/spf13/cobra v1.9.1
 )
 
diff --git a/cmd/go.sum b/cmd/go.sum
index 95ecc58..bc4808d 100644
--- a/cmd/go.sum
+++ b/cmd/go.sum
@@ -9,8 +9,6 @@ github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
-github.com/revanite-io/sci v0.3.8 h1:XbbUmpGgWgf0VZouZhoMH0P/wntbJ98AydBgewk5kCw=
-github.com/revanite-io/sci v0.3.8/go.mod h1:lEK7w8kfwWUXFKYoJYyqzTT74umE4OkOlRYp88uxHhc=
 github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
 github.com/spf13/cobra v1.9.1 h1:CXSaggrXdbHK9CF+8ywj8Amf7PBRmPCOJugH954Nnlo=
 github.com/spf13/cobra v1.9.1/go.mod h1:nDyEzZ8ogv936Cinf6g1RU9MRY64Ir93oCnqb9wxYW0=
diff --git a/cmd/pkg/baseline/loader.go b/cmd/pkg/baseline/loader.go
index ba474f4..a146ed0 100644
--- a/cmd/pkg/baseline/loader.go
+++ b/cmd/pkg/baseline/loader.go
@@ -9,7 +9,7 @@ import (
 	"path/filepath"
 
 	"github.com/goccy/go-yaml"
-	"github.com/revanite-io/sci/layer2"
+	"github.com/ossf/gemara/layer2"
 
 	"github.com/ossf/security-baseline/pkg/types"
 )
diff --git a/cmd/pkg/types/types.go b/cmd/pkg/types/types.go
index ac90a0d..7b672fc 100644
--- a/cmd/pkg/types/types.go
+++ b/cmd/pkg/types/types.go
@@ -3,7 +3,7 @@
 
 package types
 
-import "github.com/revanite-io/sci/layer2"
+import "github.com/ossf/gemara/layer2"
 
 var ControlFamilies = []string{
 	"AC",