diff --git a/pyproject.toml b/pyproject.toml
index d56f592..e02b398 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -73,6 +73,7 @@ extend-select = [
   "B",  # see flake8-bugbear
   "C4",  # see flake8-comprehension
   "I",  # sort imports
+  "S",  # see flake8-bandit
   "SIM",  # see flake8-simplify
   "TC",  # see flake8-type-checking
   "UP",  # see pyupgrade
@@ -82,6 +83,10 @@ extend-select = [
 force-single-line = true
 required-imports = ["from __future__ import annotations"]
 
+[tool.ruff.lint.per-file-ignores]
+# asserts are fine in tests
+"tests/**" = ["S101"]
+
 [tool.setuptools.package-data]
 sqlite_export_for_ynab = ["py.typed"]
 "sqlite_export_for_ynab.ddl" = ["*.sql"]