diff --git a/test-requirements.txt b/test-requirements.txt
index effcc24..0250f6c 100644
--- a/test-requirements.txt
+++ b/test-requirements.txt
@@ -7,4 +7,4 @@ oslotest>=3.2.0 # Apache-2.0
 stestr>=1.0.0 # Apache-2.0
 
 # Bandit security code scanner
-bandit>=1.4.0 # Apache-2.0
+bandit>=1.6.0,<1.7.0 # Apache-2.0