diff --git a/tox.ini b/tox.ini
index 5852d7bb7d..b1796b7921 100644
--- a/tox.ini
+++ b/tox.ini
@@ -40,7 +40,7 @@ deps =
   {[testenv]deps}
   flake8-import-order==0.12 # LGPLv3
   pylint==2.6.0 # GPLv2
-  bandit!=1.6.0,>=1.4.0 # Apache-2.0
+  bandit[baseline]>=1.7.7 # Apache-2.0
 setenv =
   DJANGO_SETTINGS_MODULE=openstack_dashboard.test.settings
 commands =