diff --git a/tox.ini b/tox.ini
index f8e6dfe4efc..234e2f0de88 100644
--- a/tox.ini
+++ b/tox.ini
@@ -210,10 +210,11 @@ import_exceptions = neutron._i18n
 envdir = {toxworkdir}/lint
 deps = {[testenv:pep8]deps}
 # B104: Possible binding to all interfaces
-# B303: prohibit list calls: md5, sha1
+# B303: prohibit list calls: md5, sha1 for python<3.9
 # B311: Standard pseudo-random generators are not suitable for security/cryptographic purpose
+# B324: prohibit list calls: md5, sha1 for python>=3.9
 # B604: any_other_function_with_shell_equals_true
-commands = bandit -r neutron -x tests -n5 -s B104,B303,B311,B604
+commands = bandit -r neutron -x tests -n5 -s B104,B303,B311,B324,B604
 
 [testenv:bashate]
 envdir = {toxworkdir}/lint