Merge pull request #173 from Gallaecio/bandit

Add bandit to CI

Author: kmike

.bandit.yml

@@ -0,0 +1,3 @@
+skips:
+- B320
+- B410

.travis.yml

@@ -6,6 +6,8 @@ branches:
     - /^v\d\.\d+\.\d+(rc\d+|\.dev\d+)?$/
 matrix:
   include:
+    - python: 3.8
+      env: TOXENV=security
     - python: 3.8
       env: TOXENV=flake8
     - python: 2.7

tox.ini

@@ -7,6 +7,13 @@ deps =
 
 commands = py.test --cov=parsel --cov-report= {posargs:parsel tests}
 
+[testenv:security]
+basepython = python3.8
+deps =
+    bandit
+commands =
+    bandit -r -c .bandit.yml {posargs:parsel}
+
 [testenv:flake8]
 basepython = python3.8
 deps =