diff --git a/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt b/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt
index b10c8d1048..9d36890ad6 100644
--- a/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt
+++ b/samcli/local/init/templates/cookiecutter-aws-sam-hello-golang/requirements-dev.txt
@@ -2,3 +2,4 @@ cookiecutter==1.6.0
 flake8==3.5.0
 pytest==3.3.2
 pytest-cookies==0.3.0
+setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability