diff --git a/requirements.txt b/requirements.txt
index 8f0a71e..f380fce 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -7,3 +7,4 @@ PyYAML
 wheel>=0.38.1
 intbitset
 fosslight_binary>=5.0.0
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability