diff --git a/kubernetes/requirements.txt b/kubernetes/requirements.txt
index 6efce7e9d2..b18251e178 100644
--- a/kubernetes/requirements.txt
+++ b/kubernetes/requirements.txt
@@ -1 +1,2 @@
 checkov==1.0.717
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability