diff --git a/requirements.txt b/requirements.txt
index ad4d50e5..520211a8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -22,3 +22,4 @@ blessings==1.6
 demjson==2.2.4
 yamllint==1.8.1
 restructuredtext_lint==1.1.1
+pygments>=2.7.4 # not directly required, pinned by Snyk to avoid a vulnerability