diff --git a/dev_requirements.txt b/dev_requirements.txt
index a6a5a39..8cd1844 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -13,3 +13,4 @@ flaky>=3.5.3,<4
 
 # Test requirements
 pytest-dbt-adapter==0.4.0
+pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability