diff --git a/test-requirements-bandit.txt b/test-requirements-bandit.txt
new file mode 100644
index 00000000..6a5a0a98
--- /dev/null
+++ b/test-requirements-bandit.txt
@@ -0,0 +1 @@
+bandit==0.10.0
diff --git a/tox.ini b/tox.ini
index 61284220..cde624b2 100644
--- a/tox.ini
+++ b/tox.ini
@@ -13,7 +13,7 @@ deps = -r{toxinidir}/requirements.txt
 commands = python setup.py testr --slowest --testr-args='{posargs}'
 
 [testenv:bandit]
-deps = bandit~=0.10.0
+deps = -r{toxinidir}/test-requirements-bandit.txt
 commands = bandit -c bandit.yaml -r magnumclient -n5 -p python-magnumclient_conservative
 
 [testenv:pypy]