diff --git a/dev/requirements_dev.txt b/dev/requirements_dev.txt
index 05ad1f96..5c845590 100644
--- a/dev/requirements_dev.txt
+++ b/dev/requirements_dev.txt
@@ -2,4 +2,5 @@ tox==2.7.0
 twine
 webhook2lambda2sqs
 wheel
-github3.py==1.3.0
\ No newline at end of file
+github3.py==1.3.0
+jwcrypto>=1.5.6 # not directly required, pinned by Snyk to avoid a vulnerability
\ No newline at end of file