diff --git a/tools/azure-sdk-tools/ci_tools/environment_exclusions.py b/tools/azure-sdk-tools/ci_tools/environment_exclusions.py
index fc09f3f15e4b..728ddab87ee2 100644
--- a/tools/azure-sdk-tools/ci_tools/environment_exclusions.py
+++ b/tools/azure-sdk-tools/ci_tools/environment_exclusions.py
@@ -35,6 +35,9 @@
     "azure-template",
 ]
 
+MUST_RUN_ENVS = [
+    "bandit"
+]
 
 def is_check_enabled(package_path: str, check: str, default: Any = True) -> bool:
     """
@@ -78,7 +81,7 @@ def filter_tox_environment_string(namespace_argument: str, package_path: str) ->
         filtered_set = []
 
         for tox_env in [env.strip().lower() for env in tox_envs]:
-            if is_check_enabled(package_path, tox_env, True):
+            if is_check_enabled(package_path, tox_env, True) or tox_env in MUST_RUN_ENVS:
                 filtered_set.append(tox_env)
         return ",".join(filtered_set)