diff --git a/go.mod b/go.mod
index e27e0cb3d..b1ae0e34e 100644
--- a/go.mod
+++ b/go.mod
@@ -30,9 +30,11 @@ require (
 	golang.org/x/oauth2 v0.0.0-20200107190931-bf48bf16ab8d
 	google.golang.org/grpc v1.28.1
 	gopkg.in/natefinch/lumberjack.v2 v2.0.0
-	gopkg.in/yaml.v2 v2.3.0
+	gopkg.in/yaml.v3 v3.0.1
 )
 
+require gopkg.in/yaml.v2 v2.3.0
+
 require (
 	cloud.google.com/go v0.56.0 // indirect
 	github.com/Azure/azure-sdk-for-go v41.3.0+incompatible // indirect
@@ -135,5 +137,4 @@ require (
 	gopkg.in/ini.v1 v1.55.0 // indirect
 	gopkg.in/ns1/ns1-go.v2 v2.3.0 // indirect
 	gopkg.in/square/go-jose.v2 v2.5.0 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
 )