diff --git a/playbooks/osh-infra-bandit.yaml b/playbooks/osh-infra-bandit.yaml
index 65ee76d68..e39dcdd6b 100644
--- a/playbooks/osh-infra-bandit.yaml
+++ b/playbooks/osh-infra-bandit.yaml
@@ -8,7 +8,7 @@
         set -xe;
         ./tools/deployment/common/000-install-packages.sh
         ./tools/deployment/common/005-deploy-k8s.sh
-        sudo -H pip3 install yq bandit
+        sudo -H pip3 install yq bandit==1.7.1 setuptools
       environment:
         zuul_site_mirror_fqdn: "{{ zuul_site_mirror_fqdn }}"
       args: