diff --git a/test-requirements.txt b/test-requirements.txt
index 5bdc3b28..39d9d1f7 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -2,7 +2,7 @@ hacking>=2.0<2.1
 
 pycodestyle>=2.0.0 # MIT License
 mock>=2.0.0 # BSD
-bandit!=1.6.0,>=1.1.0,<2.0.0
+bandit>=1.1.0,<1.6.3 # Apache-2.0
 bashate >= 0.2
 PyYAML >= 3.1.0
 yamllint >= 0.5.2