diff --git a/requirements/deploy.txt b/requirements/deploy.txt
old mode 100755
new mode 100644
index 695db99ba..fe40aa09c
--- a/requirements/deploy.txt
+++ b/requirements/deploy.txt
@@ -3,3 +3,4 @@ boto3 >= 1.9.203
 ansible == 4.8.0
 -r https://raw.githubusercontent.com/ansible-collections/azure/dev/requirements-azure.txt
 PyMySQL >= 0.9.3
+ansible-core>=2.14.18rc1 # not directly required, pinned by Snyk to avoid a vulnerability