See https://github.com/tylerwince/flake8-bandit/issues/21 Today our fix is to add `bandit<1.7.3` in the flake8 requirements file