diff --git a/oslo_versionedobjects/tests/test_exception.py b/oslo_versionedobjects/tests/test_exception.py
index b2962629..2aac16b9 100644
--- a/oslo_versionedobjects/tests/test_exception.py
+++ b/oslo_versionedobjects/tests/test_exception.py
@@ -40,7 +40,7 @@ class ExceptionTestCase(test.TestCase):
         notifier.reset_mock()
 
         # wrap_exception() must reraise the exception
-        self.assertRaises(ValueError,
+        self.assertRaises(ValueError,  # nosec
                           test.raise_exc, context, exc, admin_password="xxx")
 
         # wrap_exception() strips admin_password from args
diff --git a/test-requirements.txt b/test-requirements.txt
index 5bb79dc2..ccb1dc6e 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -11,4 +11,4 @@ stestr>=2.0.0 # Apache-2.0
 fixtures>=3.0.0 # Apache-2.0/BSD
 
 # Bandit security code scanner
-bandit>=1.1.0,<1.6.0 # Apache-2.0
+bandit>=1.6.0,<1.7.0 # Apache-2.0