Adding bandit to tox build (#1036)

Author: lzchen

tox.ini

@@ -1,6 +1,7 @@
 [tox]
 envlist = 
   py{27,35,36,37}-unit
+  py{35,36,37}-bandit
   py37-lint
   py37-setup
   py37-docs
@@ -14,32 +15,33 @@ deps =
   unit,lint: pytest-cov
   unit,lint: retrying
   unit,lint: unittest2
-  unit,lint,py37-setup,docs: -e context/opencensus-context
-  unit,lint,docs: -e contrib/opencensus-correlation
-  unit,lint,docs: -e .
-  unit,lint: -e contrib/opencensus-ext-azure
+  bandit: bandit
+  unit,lint,py37-setup,docs,bandit: -e context/opencensus-context
+  unit,lint,docs,bandit: -e contrib/opencensus-correlation
+  unit,lint,docs,bandit: -e .
+  unit,lint,bandit: -e contrib/opencensus-ext-azure
   ; unit,lint: -e contrib/opencensus-ext-datadog
-  unit,lint: -e contrib/opencensus-ext-dbapi
-  unit,lint: -e contrib/opencensus-ext-django
-  unit,lint: -e contrib/opencensus-ext-flask
-  unit,lint: -e contrib/opencensus-ext-gevent
-  unit,lint: -e contrib/opencensus-ext-grpc
-  unit,lint: -e contrib/opencensus-ext-httplib
-  unit,lint: -e contrib/opencensus-ext-jaeger
-  unit,lint: -e contrib/opencensus-ext-logging
-  unit,lint: -e contrib/opencensus-ext-mysql
-  unit,lint: -e contrib/opencensus-ext-ocagent
-  unit,lint: -e contrib/opencensus-ext-postgresql
-  unit,lint: -e contrib/opencensus-ext-prometheus
-  unit,lint: -e contrib/opencensus-ext-pymongo
-  unit,lint: -e contrib/opencensus-ext-pymysql
-  unit,lint: -e contrib/opencensus-ext-pyramid
-  unit,lint: -e contrib/opencensus-ext-requests
-  unit,lint: -e contrib/opencensus-ext-sqlalchemy
-  unit,lint: -e contrib/opencensus-ext-stackdriver
-  unit,lint: -e contrib/opencensus-ext-threading
-  unit,lint: -e contrib/opencensus-ext-zipkin
-  unit,lint: -e contrib/opencensus-ext-google-cloud-clientlibs
+  unit,lint,bandit: -e contrib/opencensus-ext-dbapi
+  unit,lint,bandit: -e contrib/opencensus-ext-django
+  unit,lint,bandit: -e contrib/opencensus-ext-flask
+  unit,lint,bandit: -e contrib/opencensus-ext-gevent
+  unit,lint,bandit: -e contrib/opencensus-ext-grpc
+  unit,lint,bandit: -e contrib/opencensus-ext-httplib
+  unit,lint,bandit: -e contrib/opencensus-ext-jaeger
+  unit,lint,bandit: -e contrib/opencensus-ext-logging
+  unit,lint,bandit: -e contrib/opencensus-ext-mysql
+  unit,lint,bandit: -e contrib/opencensus-ext-ocagent
+  unit,lint,bandit: -e contrib/opencensus-ext-postgresql
+  unit,lint,bandit: -e contrib/opencensus-ext-prometheus
+  unit,lint,bandit: -e contrib/opencensus-ext-pymongo
+  unit,lint,bandit: -e contrib/opencensus-ext-pymysql
+  unit,lint,bandit: -e contrib/opencensus-ext-pyramid
+  unit,lint,bandit: -e contrib/opencensus-ext-requests
+  unit,lint,bandit: -e contrib/opencensus-ext-sqlalchemy
+  unit,lint,bandit: -e contrib/opencensus-ext-stackdriver
+  unit,lint,bandit: -e contrib/opencensus-ext-threading
+  unit,lint,bandit: -e contrib/opencensus-ext-zipkin
+  unit,lint,bandit: -e contrib/opencensus-ext-google-cloud-clientlibs
   lint: flake8
   lint: isort ~= 4.3.21
   setup: docutils
@@ -53,6 +55,7 @@ commands =
   lint: isort --check-only --diff --recursive .
   lint: flake8 context/ contrib/ opencensus/ tests/ examples/
   ; lint: - bash ./scripts/pylint.sh
+  bandit: bandit -r context/ contrib/ opencensus/ -lll -q
   py37-setup: python setup.py check --restructuredtext --strict
   py37-docs: bash ./scripts/update_docs.sh
   ; TODO deployment