diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index bca127d..3142342 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -48,6 +48,8 @@ repos:
   hooks:
   - id: bandit
     files: ^(src|python)/
+    additional_dependencies:
+      - "importlib-metadata<5"  # https://github.com/PyCQA/bandit/issues/956
 - repo: https://github.com/pre-commit/mirrors-mypy
   rev: v0.790
   hooks: