diff --git a/requirements.txt b/requirements.txt
old mode 100755
new mode 100644
index ac021ec5..edf61ab1
--- a/requirements.txt
+++ b/requirements.txt
@@ -6,3 +6,4 @@ importlib_metadata
 jsonschema==3.2.0
 psycopg2==2.8.4
 pyyaml
+setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability