diff --git a/tox.ini b/tox.ini
index d6c8d92..d4b5493 100644
--- a/tox.ini
+++ b/tox.ini
@@ -23,13 +23,15 @@ commands =
 description = run the linters
 skip_install = true
 deps =
+    bandit
     pycodestyle
     pyflakes
     reuse
 commands =
     reuse lint
-    pyflakes {posargs:find_work}
-    pycodestyle {posargs:find_work}
+    pyflakes {posargs:find_work tests}
+    pycodestyle {posargs:find_work tests}
+    bandit -r {posargs:find_work}
 
 [pycodestyle]
 max-line-length = 100