Merge "Add bandit baseline to tox"

test-requirements.txt

@@ -14,3 +14,4 @@ testresources>=0.2.4 # Apache-2.0/BSD
 WebTest>=2.0 # MIT
 doc8 # Apache-2.0
 reno>=0.1.1 # Apache2
+bandit>=0.17.3 # Apache-2.0

tox.ini

@@ -54,6 +54,10 @@ commands =
     find . -type f -name "*.pyc" -delete
     python -m unittest specs-tests.test_titles
 
+
+[testenv:bandit]
+commands = bandit-baseline -r octavia -ll -ii
+
 [flake8]
 # Ignoring O321 because it's unnecessarily restricting use of json package.
 # jsonutils version doesn't add additional value