diff --git a/python/spec/fixtures/requirements/prefix_match.txt b/python/spec/fixtures/requirements/prefix_match.txt
index faef9d6c66..680b2bba7f 100644
--- a/python/spec/fixtures/requirements/prefix_match.txt
+++ b/python/spec/fixtures/requirements/prefix_match.txt
@@ -1,2 +1,3 @@
 psycopg2==2.6.*
 luigi==2.2.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability