diff --git a/.gitignore b/.gitignore
index dba45d2..ad3099d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,4 @@ project.clj
 .clj-kondo/.cache
 test-out/
 .vscode/
+.clj-watson/
diff --git a/deps.edn b/deps.edn
index 27cccc2..8cc64ca 100644
--- a/deps.edn
+++ b/deps.edn
@@ -31,7 +31,8 @@
           :main-opts ["-m" "clj-kondo.main" "--lint" "src/main/clojure" "--lint" "src/test/clojure"]}
 
    ;; clj -M:cve
-   :cve {:extra-deps {io.github.clj-holmes/clj-watson {:git/tag "v4.1.3" :git/sha "56dfd3e"}}
+   :cve {:extra-deps {io.github.clj-holmes/clj-watson {:git/tag "v5.0.0" :git/sha "c2349f5"}}
+         :extra-paths [".clj-watson"]
          :jvm-opts ["--illegal-access=deny"]
          :main-opts ["-m" "clj-watson.cli" "scan" "-p" "deps.edn"]}