Merge pull request #191 from gdubicki/tweak_gha

Update tests badge to GHA & make it work + start running bandit too

.github/workflows/security.yml

@@ -0,0 +1,21 @@
+name: Security tests
+
+on: [push, pull_request]
+
+jobs:
+  security:
+
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v2
+      - name: Set up Python 3.8
+        uses: actions/setup-python@v2
+        with:
+          python-version: 3.8
+      - name: Install dependencies
+        run: |
+          pip install bandit
+      - name: Run bandit
+        run: |
+          bandit -r pypuppetdb

.github/workflows/tests.yml

@@ -1,6 +1,6 @@
 name: tests (unit)
 
-on: [pull_request]
+on: [push, pull_request]
 
 jobs:
   test:

CONTRIBUTING.md

@@ -40,10 +40,13 @@ Commits are expected to contain tests or updates to the tests if they add to
 or modify the current behavior.
 
 Assuming you have prepared the development environment as explained above,
-do this to run the unit tests:
+do this to run the tests:
 
 ```bash
+# Unit tests
 py.test
+# Security linter
+bandit -r pypuppetdb
 ```
 
 If the tests pass, you're golden. If not we'll have to figure out why

README.md

@@ -2,7 +2,7 @@
 
 [![PyPi Version](https://img.shields.io/pypi/v/pypuppetdb)](https://pypi.org/project/pypuppetdb/)
 [![PyPi Downloads](https://img.shields.io/pypi/dm/pypuppetdb)](https://pypi.org/project/pypuppetdb/)
-[![image](https://api.travis-ci.org/voxpupuli/pypuppetdb.png)](https://travis-ci.org/voxpupuli/pypuppetdb)
+![Tests Status](https://github.com/voxpupuli/pypuppetdb/workflows/tests%20(unit)/badge.svg)
 [![Coverage Status](https://img.shields.io/coveralls/voxpupuli/pypuppetdb.svg)](https://coveralls.io/r/voxpupuli/pypuppetdb)
 [![By Voxpupuli](https://img.shields.io/badge/by-Vox%20Pupuli%20%F0%9F%A6%8A-ef902f.svg)](http://voxpupuli.org)