diff --git a/.zuul.yaml b/.zuul.yaml
index dab976520e..243e55064e 100644
--- a/.zuul.yaml
+++ b/.zuul.yaml
@@ -548,6 +548,7 @@
               - ^(api-ref|doc|releasenotes)/.*$
               - ^test/probe/.*$
               - ^(.gitreview|.mailmap|AUTHORS|CHANGELOG|.*\.rst)$
+            voting: false
         - tempest-integrated-object-storage:
             irrelevant-files:
               - ^(api-ref|doc|releasenotes)/.*$
diff --git a/py2-constraints.txt b/py2-constraints.txt
index 137dc9f8d4..694c9ce343 100644
--- a/py2-constraints.txt
+++ b/py2-constraints.txt
@@ -70,4 +70,7 @@ greenlet===0.4.15
 oslo.utils===3.42.1
 gitdb===0.6.4
 gitdb2===2.0.6
+
+# Projects that are known to have had a final py2-supporting release
+bandit===1.6.2
 python-keystoneclient===3.22.0