diff --git a/tox.ini b/tox.ini
index d534b0cb6..8d6eb99e6 100644
--- a/tox.ini
+++ b/tox.ini
@@ -65,8 +65,9 @@ import-order-style = pep8
 enable-extensions=H904
 
 [testenv:bandit]
+# B303: blacklist calls: md5, sha1
 deps = -r{toxinidir}/test-requirements.txt
-commands = bandit -r neutronclient -x tests -n5
+commands = bandit -r neutronclient -x tests -n5 -s B303
 
 [testenv:lower-constraints]
 basepython = python3