[CI] Run bandit

Change-Id: Ifde285f3c59910325e12ee1d7e33b69270ba6309

.zuul.yaml

@@ -7,3 +7,9 @@
       - release-notes-jobs-python3
       - periodic-stable-jobs
       - periodic-jobs-with-oslo-master
+    check:
+      jobs:
+        - openstack-tox-linters
+    gate:
+      jobs:
+        - openstack-tox-linters

tox.ini

@@ -15,8 +15,30 @@ commands =
   stestr run {posargs}
 passenv = http_proxy HTTP_PROXY https_proxy HTTPS_PROXY no_proxy NO_PROXY OS_DEBUG GENERATE_HASHES
 
+[testenv:linters]
+skip_install = True
+deps =
+  {[testenv:pep8]deps}
+  {[testenv:bandit]deps}
+commands =
+  {[testenv:pep8]commands}
+  {[testenv:bandit]commands}
+
 [testenv:pep8]
-commands = flake8 {posargs}
+skip_install = True
+deps =
+  -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
+  hacking
+commands =
+  flake8 {posargs}
+
+[testenv:bandit]
+skip_install = True
+deps =
+   -c{env:TOX_CONSTRAINTS_FILE:https://releases.openstack.org/constraints/upper/master}
+   bandit
+commands =
+  bandit -r masakariclient
 
 [testenv:venv]
 commands = {posargs}