diff --git a/tox.ini b/tox.ini
index 8da412ec..28982c3d 100644
--- a/tox.ini
+++ b/tox.ini
@@ -18,9 +18,11 @@ commands = {posargs}
 commands = sphinx-build -W -b html doc/source doc/build/html
 
 [testenv:pep8]
+# B303 - Use of insecure MD2, MD4, or MD5 hash function.
+# We're using sha1 to generate a hash of file contents.
 commands =
   flake8 ara hacking
-  bandit -r ara
+  bandit -r ara --skip B303
 
 [testenv:py35]
 commands = python manage.py test ara