Set up security scanning with bandit

There are warnings about urllib that can only be ignored (or calls removed).
release-engineering · Dec 1, 2023 · 98fc1f6 · 98fc1f6
1 parent b751169
commit 98fc1f6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/tox.ini b/tox.ini
@@ -13,3 +13,8 @@ deps =
     pytest
     six
 commands = pytest {posargs}
+
+[testenv:bandit]
+skipsdist = True
+deps = bandit
+commands = bandit -r productmd -s B310,B323