diff --git a/build/requirements.txt b/build/requirements.txt
index e16cccb..f2108a9 100644
--- a/build/requirements.txt
+++ b/build/requirements.txt
@@ -10,3 +10,4 @@ pytest-cov==2.5.1
 click==7.0
 joblib==0.14.1
 scikit-learn==0.22.2
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability