Add bandit to CI

.bandit.yml

@@ -0,0 +1,16 @@
+skips:
+- B101
+- B105
+- B303
+- B306
+- B307
+- B311
+- B320
+- B321
+- B402
+- B404
+- B406
+- B410
+- B503
+- B603
+- B605

.travis.yml

@@ -7,6 +7,8 @@ branches:
     - /^\d\.\d+\.\d+(rc\d+|\.dev\d+)?$/
 matrix:
   include:
+    - env: TOXENV=security
+      python: 3.8
     - env: TOXENV=flake8
       python: 3.8
     - env: TOXENV=pypy3

tox.ini

@@ -62,6 +62,13 @@ basepython = pypy3
 commands =
     py.test {posargs:docs scrapy tests}
 
+[testenv:security]
+basepython = python3.8
+deps =
+    bandit
+commands =
+    bandit -r -c .bandit.yml {posargs:scrapy}
+
 [testenv:flake8]
 basepython = python3.8
 deps =