diff --git a/tox.ini b/tox.ini
index a22e50a5..73bfb438 100644
--- a/tox.ini
+++ b/tox.ini
@@ -74,12 +74,12 @@ commands =
     yapf -dr {toxinidir}/armada {toxinidir}/setup.py
     flake8 {posargs}
     # Run security linter as part of the pep8 gate instead of a separate zuul job.
-    bandit -r armada -x armada/tests -n 5
+    bandit -r armada -n 5 -x armada/tests/*
 
 [testenv:bandit]
 basepython = python3
 commands =
-    bandit -r armada -x armada/tests -n 5
+    bandit -r armada -n 5 -x armada/tests/*
 
 [testenv:cover]
 basepython = python3