Ignore typing on the single import

We cannot cherry-pick the
https://review.opendev.org/c/openstack/keystone/+/950184 to the stable
branches since it does not work in py39. Since there is also no easy way
how to fix the typing error just add ignore comment to that - it makes
no difference anyway. Add also skip for the bandit finding that is not
present in other branches.

Change-Id: I54a74cdc653b05ea681cbccbc1229109df378d6c
Signed-off-by: Artem Goncharov <artem.goncharov@gmail.com>
(cherry picked from commit 5a60aad8ab)

keystone/oauth1/backends/sql.py

@@ -188,8 +188,9 @@ class OAuth1(base.Oauth1DriverBase):
             token_ref = self._get_request_token(session, request_token_id)
             token_dict = token_ref.to_dict()
             token_dict['authorizing_user_id'] = user_id
-            token_dict['verifier'] = ''.join(random.sample(base.VERIFIER_CHARS,
-                                                           8))
+            token_dict['verifier'] = ''.join(
+                random.sample(base.VERIFIER_CHARS, 8)
+            )
             token_dict['role_ids'] = jsonutils.dumps(role_ids)
 
             new_token = RequestToken.from_dict(token_dict)

keystone/tests/unit/test_backend_ldap.py

@@ -22,7 +22,7 @@ import fixtures
 import http.client
 import ldap
 from oslo_log import versionutils
-import pkg_resources
+import pkg_resources  # type: ignore
 from testtools import matchers
 
 from keystone.common import cache

tox.ini

@@ -29,7 +29,7 @@ commands =
   # the check and gate queues
   bashate devstack/plugin.sh
   # Run security linter
-  bandit -r keystone -x 'keystone/tests/*'
+  bandit -r keystone -x 'keystone/tests/*' -s B311
 
 [testenv:fast8]
 envdir = {toxworkdir}/pep8