diff --git a/requirements.txt b/requirements.txt
index d8003af..0517d9b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,2 +1,3 @@
 pytest
 tcms-api>=12.8.1
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability