diff --git a/tox.ini b/tox.ini
index 86740d582b..4fab1099d7 100644
--- a/tox.ini
+++ b/tox.ini
@@ -54,6 +54,7 @@ commands = {[testenv:linters]commands}
 deps =
     hacking>=1.0.0
     bashate>=0.5.1
+    safety
 whitelist_externals = bash
 commands =
     flake8
@@ -61,6 +62,8 @@ commands =
                  -type f                 \
                  -name \*.sh             \
                  -print0 | xargs -0 bashate -v -iE006,E010"
+    bash -c 'sed -e "s,===,==," upper-constraints.txt > {envtmpdir}/safety-check.txt'
+    -safety check --json -r {envtmpdir}/safety-check.txt
 
 [testenv:bindep]
 # Do not install any requirements. We want this to be fast and work even if