diff --git a/docker/test-py3.sh b/docker/test-py3.sh
index 27241f79..9f2bb29a 100755
--- a/docker/test-py3.sh
+++ b/docker/test-py3.sh
@@ -22,4 +22,4 @@ sed -i \
 
 # Since tox seems to ignore `usedevelop` when we have `sitepackages` on, we have to run it manually
 python3 setup.py develop --no-deps
-/usr/bin/tox -e flake8,py3,intflake "$@"
+/usr/bin/tox -e flake8,py3,intflake,bandit "$@"
diff --git a/tox.ini b/tox.ini
index db649b5a..e50fed45 100644
--- a/tox.ini
+++ b/tox.ini
@@ -4,7 +4,7 @@
 # and then run "tox" from this directory.
 
 [tox]
-envlist = flake8, intflake, py27, py3
+envlist = flake8, intflake, py27, py3, bandit
 
 [flake8]
 ignore = E731,W503
@@ -57,7 +57,7 @@ deps = flake8
 commands = flake8 tests/integration
 
 [testenv:bandit]
-basepython = python2
+basepython = python3
 skip_install = true
 deps = bandit
 commands =