[VVP] Adding bandit security scans and fixes

[vvp/validation-scripts.git] / tox.ini

diff --git a/tox.ini b/tox.ini
index a4217bb..84e1b14 100644 (file)
--- a/tox.ini
+++ b/tox.ini
@@ -50,10 +50,12 @@ commands =
     coverage xml
     flake8 --version
     flake8 ice_validator
+    bandit -c bandit.yaml -r . -x ./.tox/**,./venv-tox/**
 deps = --no-use-pep517 
     -rrequirements.txt
-    flake8==3.6.0
-    coverage==4.5.1
+    flake8
+    coverage
+    bandit
 
 
 [flake8]