Merge pull request #149 from Gallaecio/bandit

Add bandit to CI

Author: kmike

.bandit.yml

@@ -0,0 +1,3 @@
+skips:
+- B101
+- B107

.travis.yml

@@ -2,6 +2,8 @@ language: python
 sudo: false
 matrix:
   include:
+    - python: 3.8
+      env: TOXENV=security
     - python: 2.7
       env: TOXENV=py27
     - python: pypy

tox.ini

@@ -16,6 +16,12 @@ commands =
         --cov=w3lib --cov-report=term \
         {posargs:w3lib tests}
 
+[testenv:security]
+deps =
+    bandit
+commands =
+    bandit -r -c .bandit.yml {posargs:w3lib}
+
 [docs]
 changedir = docs
 deps = -rdocs/requirements.txt