diff --git a/ci/requirements.txt b/ci/requirements.txt
index 7b2b51d4..da69a7f0 100644
--- a/ci/requirements.txt
+++ b/ci/requirements.txt
@@ -1,2 +1,3 @@
 c2cciutils[checks,publish]==1.4.0.dev231
 setuptools>=65.5.1 # not directly required, pinned by Snyk to avoid a vulnerability
+certifi>=2022.12.7 # not directly required, pinned by Snyk to avoid a vulnerability