diff --git a/dev_requirements.txt b/dev_requirements.txt
index f057d039..b4a31528 100644
--- a/dev_requirements.txt
+++ b/dev_requirements.txt
@@ -2,3 +2,4 @@ flake8==3.8.4
 
 # Test requirements
 pytest-dbt-adapter==0.4.0
+pyyaml>=5.4 # not directly required, pinned by Snyk to avoid a vulnerability