diff --git a/requirements.txt b/requirements.txt
index 7938abe0..022ce329 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,3 +11,4 @@ pytest-watch==4.2.0
 pytest==4.4.0
 six==1.15.0; python_version >= '2.7' and python_version not in '3.0, 3.1, 3.2'
 watchdog==2.0.2; python_version >= '3.6'
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability