diff --git a/tox.ini b/tox.ini
index f0fe15180f..0008875a8c 100644
--- a/tox.ini
+++ b/tox.ini
@@ -45,7 +45,7 @@ deps =
   {[testenv]deps}
   flake8-import-order==0.12 # LGPLv3
   pylint==2.6.0 # GPLv2
-  bandit!=1.6.0,>=1.4.0 # Apache-2.0
+  bandit[baseline]>=1.7.7 # Apache-2.0
 setenv =
   DJANGO_SETTINGS_MODULE=openstack_dashboard.test.settings
 commands =