diff --git a/requirements/developer.txt b/requirements/developer.txt
index 8f08f16001d..4c1ec14c32a 100644
--- a/requirements/developer.txt
+++ b/requirements/developer.txt
@@ -1,2 +1,3 @@
 black==20.8b1
 pre-commit==2.7.1
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability