diff --git a/requirements.txt b/requirements.txt
index 215805aa..33018094 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -9,3 +9,4 @@ RPi.GPIO==0.7.0
 thespian==3.10.1
 websocket-client==0.57.0
 requests==2.25.0
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability