diff --git a/tox.ini b/tox.ini
index fab03be76b2b08be925923dc1d62707c544d9edc..fa8e3771f4f1e0a73cd4261246475b07c9661efe 100644
--- a/tox.ini
+++ b/tox.ini
@@ -25,7 +25,9 @@ commands =
     poetry run flake8 {posargs} biscuit/ apps/official/
 
 [testenv:security]
-commands = poetry run safety check --full-report
+commands =
+    poetry show --no-dev
+    poetry run safety check --full-report
 
 [testenv:build]
 commands_pre =