diff --git a/test-requirements.txt b/test-requirements.txt
index a4b64ee7..129b1fdc 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -4,3 +4,4 @@ coverage!=4.4,>=4.0   # Apache-2.0
 keystoneauth1>=3.4.0  # Apache-2.0
 stestr>=2.0.0,!=3.0.0 # Apache-2.0
 openstacksdk>=0.11.0  # Apache-2.0
+setuptools>=78.1.1 # not directly required, pinned by Snyk to avoid a vulnerability