diff --git a/apps/gcp_to_cwl/requirements.txt b/apps/gcp_to_cwl/requirements.txt
index 9bd7ae5..b19c25f 100644
--- a/apps/gcp_to_cwl/requirements.txt
+++ b/apps/gcp_to_cwl/requirements.txt
@@ -2,3 +2,5 @@ boto3==1.7.19
 google-cloud-pubsub==0.30.1
 proto-google-cloud-pubsub-v1==0.15.4
 dcplib
+protobuf>=5.29.6 # not directly required, pinned by Snyk to avoid a vulnerability
+pyasn1>=0.6.2 # not directly required, pinned by Snyk to avoid a vulnerability