diff --git a/tox.ini b/tox.ini
index 801e49dd50..4998edd17d 100644
--- a/tox.ini
+++ b/tox.ini
@@ -30,6 +30,7 @@ commands =
     # B104: Test for binding to all interfaces
     # B107: Test for use of hard-coded password argument defaults
     # B110: Try, Except, Pass detected.
+    # B113: Requests call without timeout
     # B310: Audit url open for permitted schemes
     # B311: Standard pseudo-random generators are not suitable for security/cryptographic purposes
     # B404: Import of subprocess module
@@ -38,7 +39,7 @@ commands =
     # B506: Test for use of yaml load
     # B603: Test for use of subprocess with shell equals true
     # B607: Test for starting a process with a partial path
-    bandit -r heat -x tests --skip B101,B104,B107,B110,B310,B311,B404,B410,B504,B506,B603,B607
+    bandit -r heat -x tests --skip B101,B104,B107,B110,B113,B310,B311,B404,B410,B504,B506,B603,B607
     doc8 {posargs}
 
 [testenv:venv]
@@ -100,6 +101,7 @@ deps =
 # B104: Test for binding to all interfaces
 # B107: Test for use of hard-coded password argument defaults
 # B110: Try, Except, Pass detected.
+# B113: Requests call without timeout
 # B310: Audit url open for permitted schemes
 # B311: Standard pseudo-random generators are not suitable for security/cryptographic purposes
 # B404: Import of subprocess module
@@ -108,7 +110,7 @@ deps =
 # B506: Test for use of yaml load
 # B603: Test for use of subprocess with shell equals true
 # B607: Test for starting a process with a partial path
-commands = bandit -r heat -x tests --skip B101,B104,B107,B110,B310,B311,B404,B410,B504,B506,B603,B607
+commands = bandit -r heat -x tests --skip B101,B104,B107,B110,B113,B310,B311,B404,B410,B504,B506,B603,B607
 
 [flake8]
 show-source = true