Add bandit to CircleCI (#164)

* Add bandit to CircleCI

* Fix security hole

Co-authored-by: fr.branchaud-charron <fr.branchaud-charron@servicenow.com>

.circleci/config.yml

@@ -37,7 +37,7 @@ jobs:
       - run:
           name: run tests
           command: |
-            make test
+            make test bandit
   test-import:
     docker:
       # specify the version you desire here

Makefile

@@ -27,4 +27,15 @@ check-mypy-error-count:
 	@if [ ${MYPY_INFO} -gt ${MYPY_ERROR_COUNT} ]; then \
 		echo mypy error count $(MYPY_INFO) is more than $(MYPY_ERROR_COUNT); \
 		false; \
-	fi
+	fi
+
+SRC_FOLDER    ?= ./baal
+REPORT_FOLDER ?= ./reports
+
+./reports/security/bandit/:
+		@mkdir -p ./reports/security/bandit/
+
+bandit: ./reports/security/bandit/ ## SECURITY - Run bandit
+		poetry run bandit ${SRC_FOLDER}/* -r -x "*.pyi,*/_generated/*,*__pycache__*" -v -ll -f json > ${REPORT_FOLDER}/security/bandit/index.json
+
+.PHONY: bandit