diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 382b998..498a3c2 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -21,7 +21,7 @@ repos:
     rev: 1.8.6
     hooks:
       - id: bandit
-        args: ['-x', 'tests']
+        args: ['-c', 'pyproject.toml']
   - repo: https://github.com/asottile/pyupgrade
     rev: v3.20.0
     hooks:
diff --git a/pyproject.toml b/pyproject.toml
index 504663b..d0207fb 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -45,3 +45,6 @@ e2 = "stevedore.tests.notfound:UnimportableExtension"
 packages = [
     "stevedore"
 ]
+
+[tool.bandit]
+exclude_dirs = ["tests"]