Configure bandit security linter

Change-Id: I4c3b4fec50e7b2aedd8cb3b7dfa5dacd0d44c329

test-requirements.txt

@@ -13,3 +13,7 @@ coverage!=4.4,>=4.0 # Apache-2.0
 nodeenv>=0.9.4 # BSD
 pytest>=5.3.5 # MIT
 testtools>=2.2.0 # MIT
+
+# bandit is not included in upper-constraints, so we need to pin it here to a
+# known working version
+bandit==1.6.2 # Apache-2.0

tox.ini

@@ -73,3 +73,7 @@ deps =
   -c{toxinidir}/lower-constraints.txt
   -r{toxinidir}/test-requirements.txt
   -r{toxinidir}/requirements.txt
+
+[testenv:bandit]
+deps = -r{toxinidir}/test-requirements.txt
+commands = bandit -r blazar_dashboard -l -n 5 -x blazar_dashboard/test