diff --git a/Gopkg.lock b/Gopkg.lock
deleted file mode 100644
index 2d65e23a11b5289ede3cd63403a1be956570e89d..0000000000000000000000000000000000000000
--- a/Gopkg.lock
+++ /dev/null
@@ -1,17 +0,0 @@
-# This file is autogenerated, do not edit; changes may be undone by the next 'dep ensure'.
-
-
-[[projects]]
-  branch = "master"
-  digest = "1:c10265d5a71326618d37e97169eddb3582f78e8ac7dcf87403b4cf619efd519a"
-  name = "howett.net/plist"
-  packages = ["."]
-  pruneopts = "UT"
-  revision = "591f970eefbbeb04d7b37f334a0c4c3256e32876"
-
-[solve-meta]
-  analyzer-name = "dep"
-  analyzer-version = 1
-  input-imports = ["howett.net/plist"]
-  solver-name = "gps-cdcl"
-  solver-version = 1
diff --git a/Gopkg.toml b/Gopkg.toml
deleted file mode 100644
index 25d314f866695354058b2f9824ce1d6802109229..0000000000000000000000000000000000000000
--- a/Gopkg.toml
+++ /dev/null
@@ -1,34 +0,0 @@
-# Gopkg.toml example
-#
-# Refer to https://golang.github.io/dep/docs/Gopkg.toml.html
-# for detailed Gopkg.toml documentation.
-#
-# required = ["github.com/user/thing/cmd/thing"]
-# ignored = ["github.com/user/project/pkgX", "bitbucket.org/user/project/pkgA/pkgY"]
-#
-# [[constraint]]
-#   name = "github.com/user/project"
-#   version = "1.0.0"
-#
-# [[constraint]]
-#   name = "github.com/user/project2"
-#   branch = "dev"
-#   source = "github.com/myfork/project2"
-#
-# [[override]]
-#   name = "github.com/x/y"
-#   version = "2.4.0"
-#
-# [prune]
-#   non-go = false
-#   go-tests = true
-#   unused-packages = true
-
-
-[[constraint]]
-  branch = "master"
-  name = "howett.net/plist"
-
-[prune]
-  go-tests = true
-  unused-packages = true
diff --git a/Makefile b/Makefile
index 4e9e0793005ea3801f3d763bee3b34d29275f618..cb7f82adadb8bc13610b8e304196441f8b5c2fd8 100644
--- a/Makefile
+++ b/Makefile
@@ -1,10 +1,7 @@
 all:
 	go build -o bin/truststore cmd/truststore/main.go
 
-bootstrap:
-	dep ensure
-
 clean:
-	rm -rf bin vendor
+	rm -rf bin
 
-.PHONY: all bootstrap clean
+.PHONY: all clean
diff --git a/go.mod b/go.mod
new file mode 100644
index 0000000000000000000000000000000000000000..4b56c6c3c134033cedf79b945b95d1050735115b
--- /dev/null
+++ b/go.mod
@@ -0,0 +1,5 @@
+module github.com/smallstep/truststore
+
+go 1.13
+
+require howett.net/plist v0.0.0-20181124034731-591f970eefbb
diff --git a/go.sum b/go.sum
new file mode 100644
index 0000000000000000000000000000000000000000..949e08cdd03af22161f6a0ee8aba9e45d64e59f5
--- /dev/null
+++ b/go.sum
@@ -0,0 +1,9 @@
+github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+howett.net/plist v0.0.0-20181124034731-591f970eefbb h1:jhnBjNi9UFpfpl8YZhA9CrOqpnJdvzuiHsl/dnxl11M=
+howett.net/plist v0.0.0-20181124034731-591f970eefbb/go.mod h1:vMygbs4qMhSZSc4lCUl2OEE+rDiIIJAIdR4m7MiMcm0=