diff --git a/helm/hack/requirements.txt b/helm/hack/requirements.txt
index 91a83073..9c04c84f 100644
--- a/helm/hack/requirements.txt
+++ b/helm/hack/requirements.txt
@@ -1,2 +1,3 @@
 PyYAML==5.4
 requests==2.22.0
+certifi>=2024.7.4 # not directly required, pinned by Snyk to avoid a vulnerability