Add security checks

Aaron Suarez · apex-omontgomery · commit 86c394b40b1a · 2019-05-23T21:39:18.000-06:00
diff --git a/.bandit b/.bandit
@@ -0,0 +1,2 @@
+[bandit]
+exclude: /tests
diff --git a/.travis.yml b/.travis.yml
@@ -29,6 +29,7 @@ script:
 - make build
 - make test
 - make lint
+- make bandit
 after_success:
 - bash bin/run.sh
 after_script:
diff --git a/Makefile b/Makefile
@@ -55,6 +55,10 @@ test-coverage:
 lint:
 	${DOCKER_COMPOSE} run ${RESOURCES_CONTAINER} flake8 app --statistics --count
 
+.PHONY: bandit
+bandit:
+	${DOCKER_COMPOSE} run ${RESOURCES_CONTAINER} bandit -r .
+
 .PHONY: help
 help: build
 	${DOCKER_COMPOSE} run ${RESOURCES_CONTAINER} ${FLASK} --help
diff --git a/requirements.txt b/requirements.txt
@@ -7,3 +7,4 @@ pytest-mock==1.10.1
 pyyaml==5.1
 requests==2.21.0
 SQLAlchemy-Utils==0.33.11
+bandit==1.5.1
