diff --git a/tools/scheduler/requirements.txt b/tools/scheduler/requirements.txt
index d4d47e6e..be845d94 100644
--- a/tools/scheduler/requirements.txt
+++ b/tools/scheduler/requirements.txt
@@ -1,2 +1,3 @@
 flask
 google-api-python-client
+zipp>=3.19.1 # not directly required, pinned by Snyk to avoid a vulnerability