diff --git a/conntrackfixer/root_test.go b/conntrackfixer/root_test.go
index 45dcdcc9..1afbb0b9 100644
--- a/conntrackfixer/root_test.go
+++ b/conntrackfixer/root_test.go
@@ -14,6 +14,7 @@ import (
 	"github.com/docker/docker/api/types"
 	"github.com/docker/docker/api/types/events"
 	"github.com/docker/go-connections/nat"
+	_ "github.com/opencontainers/image-spec/specs-go/v1" // used by mock
 	"github.com/ti-mo/conntrack"
 	"go.uber.org/mock/gomock"
 
diff --git a/go.mod b/go.mod
index 2d639820..5de485d9 100644
--- a/go.mod
+++ b/go.mod
@@ -33,6 +33,7 @@ require (
 	github.com/netsampler/goflow2/v2 v2.1.3
 	github.com/openconfig/gnmi v0.11.0
 	github.com/openconfig/gnmic/pkg/api v0.1.5
+	github.com/opencontainers/image-spec v1.1.0
 	github.com/oschwald/maxminddb-golang v1.12.0
 	github.com/osrg/gobgp/v3 v3.25.0
 	github.com/prometheus/client_golang v1.19.0
@@ -131,7 +132,6 @@ require (
 	github.com/modern-go/reflect2 v1.0.2 // indirect
 	github.com/openconfig/grpctunnel v0.1.0 // indirect
 	github.com/opencontainers/go-digest v1.0.0 // indirect
-	github.com/opencontainers/image-spec v1.1.0 // indirect
 	github.com/paulmach/orb v0.11.1 // indirect
 	github.com/pelletier/go-toml/v2 v2.1.0 // indirect
 	github.com/pierrec/lz4/v4 v4.1.21 // indirect