Merge "Tox and Zuul job for the python code scan in starlingx/fault"

.zuul.yaml

@@ -6,6 +6,7 @@
       - stx-api-ref-jobs
       - stx-release-notes-jobs
       - stx-lint-specfile-jobs
+      - stx-bandit-jobs
     check:
       jobs:
         - openstack-tox-linters

test-requirements.txt

@@ -4,3 +4,4 @@ mock
 PyYAML >= 3.1.0
 yamllint >= 0.5.2
 #spec_cleaner>=1.0.9
+bandit!=1.6.0,>=1.1.0,<2.0.0

tox.ini

@@ -146,3 +146,8 @@ basepython = python3
 whitelist_externals = cat
 commands = cat /etc/fm/fm.conf
 
+[testenv:bandit]
+basepython = python3
+description = Bandit code scan for *.py files under config folder
+deps = -r{toxinidir}/test-requirements.txt
+commands = bandit -r {toxinidir}/ -x '**/.tox/**',**/.eggs/** -lll