Add bandit to CI

Author: Gallaecio

.bandit.yml

@@ -0,0 +1,2 @@
+skips:
+- B101

.travis.yml

@@ -1,10 +1,13 @@
 language: python
-python:
-- '2.7'
-- '3.4'
-- '3.5'
-- '3.6'
-- '3.7'
+matrix:
+  include:
+    - env: TOXENV=security
+      python: 3.8
+    - python: 2.7
+    - python: 3.4
+    - python: 3.5
+    - python: 3.6
+    - python: 3.7
 install:
 - pip install -r tests/requirements.txt -e .
 script:

tox.ini

@@ -7,3 +7,9 @@ deps=
 
 commands =
     py.test --cov-report term --cov=cssselect
+
+[testenv:security]
+deps =
+    bandit
+commands =
+    bandit -r -c .bandit.yml {posargs:cssselect}