[WIP] feat: Add bandit option and configuration

cookiecutter.json

@@ -14,6 +14,7 @@
     "version": "0.0.1-dev",
 
     "use_black_formatter": "n",
+    "use_bandit_sec_scan": "n",
     "use_spellcheck": "n",
 
     "ci": "{% if cookiecutter.vs|lower == 'github' %}azure{% else %}jenkins{% endif %}",

{{cookiecutter.project_name}}/requirements_dev.txt

@@ -24,6 +24,9 @@ tox==3.12.1
 {% if cookiecutter.use_black_formatter|lower == "y" -%}
 pytest-black==0.3.7
 {% endif %}
+{% if cookiecutter.use_bandit_sec_scan|lower == "y" -%}
+pytest-bandit==0.5.1
+{% endif %}
 {% if cookiecutter.use_spellcheck|lower == "y" -%}
 pyenchant==2.0.0
 {% endif %}

{{cookiecutter.project_name}}/setup.cfg

@@ -26,6 +26,10 @@ test = pytest
 addopts = -s -vv --cov-report xml:build/coverage.xml --cov-report term --cov-branch --cov {{ cookiecutter.project_slug }} --junitxml=build/test_results.xml{% if cookiecutter.use_black_formatter|lower == "y" %} --black{% endif %}
 testpaths = tests{% if cookiecutter.use_black_formatter|lower == "y" %} {{ cookiecutter.project_slug }} {% endif %}
 collect_ignore = ['setup.py']
+{% if cookiecutter.use_bandit_sec_scan|lower == "y" -%}
+bandit_targets = {{ cookiecutter.project_slug }}
+bandit_recurse = true
+{% endif %}
 
 [coverage:report]
 show_missing = true