diff --git a/zuul.d/ironic-python-agent-jobs.yaml b/zuul.d/ironic-python-agent-jobs.yaml
index 3176ff71a..58219b37d 100644
--- a/zuul.d/ironic-python-agent-jobs.yaml
+++ b/zuul.d/ironic-python-agent-jobs.yaml
@@ -104,8 +104,10 @@
       - ^ironic_python_agent/tests/.*$
       - ^releasenotes/.*$
       - ^setup.cfg$
-      - ^tools/(?!bandit.yml).*$
       - ^tox.ini$
+      - ^tools/.*$
+      - regex: ^tools/bandit\.yml$
+        negate: true
 
 - job:
     name: ipa-tox-examples
@@ -120,8 +122,9 @@
       - ^ironic_python_agent/tests/.*$
       - ^releasenotes/.*$
       - ^setup.cfg$
-      - ^tools/(?!bandit.yml).*$
       - ^tox.ini$
+      - regex: ^tools/bandit\.yml$
+        negate: true
 
 # used by ironic-python-agent-builder
 - job: