diff --git a/tox.ini b/tox.ini
index 6f63f422221..9178f658d83 100644
--- a/tox.ini
+++ b/tox.ini
@@ -108,6 +108,10 @@ commands = python {toxinidir}/tools/generate_driver_list.py
 deps = -r{toxinidir}/test-requirements.txt
 commands = bandit -r cinder -n5 -x tests -ll
 
+[testenv:bandit-baseline]
+envdir = {toxworkdir}/bandit
+commands = bandit-baseline -r cinder -n5 -x tests -ii -ll
+
 [flake8]
 # Following checks are ignored on purpose.
 #