diff --git a/drydock_provisioner/drydock_client/session.py b/drydock_provisioner/drydock_client/session.py
index c2a893c8..975e9226 100644
--- a/drydock_provisioner/drydock_client/session.py
+++ b/drydock_provisioner/drydock_client/session.py
@@ -27,7 +27,6 @@ class DrydockSession(object):
 
     def __init__(self,
                  host,
-                 *,
                  port=None,
                  scheme='http',
                  token=None,
diff --git a/requirements-test.txt b/requirements-test.txt
index 9fb9f050..4de03046 100644
--- a/requirements-test.txt
+++ b/requirements-test.txt
@@ -7,3 +7,4 @@ oslo.versionedobjects[fixtures]>=1.23.0
 oslo.config[fixtures]
 yapf
 flake8
+bandit>=1.1.0
diff --git a/tox.ini b/tox.ini
index 7999f1a9..5c0a0bb1 100644
--- a/tox.ini
+++ b/tox.ini
@@ -32,6 +32,9 @@ commands = oslopolicy-sample-generator --config-file etc/drydock/drydock-policy-
 commands = flake8 \
              {posargs}
 
+[testenv:bandit]
+commands = bandit -r drydock_provisioner -n 5
+
 [flake8]
 ignore=E302,H306,H304,D101,D102,D103,D104
 exclude= venv,.venv,.git,.idea,.tox,*.egg-info,*.eggs,bin,dist,./build/