add bandit to pep8 job

Add the bandit security scanner to the pep8 job.
* convert assert statement to raise AssertionError
* skip B311,B105

Change-Id: I23b2732791f42adfa04bd64f02b25cbdb98aaf93

1 files changed, 4 insertions, 1 deletions

diff --git a/tox.ini b/tox.ini
index 6aad1b7..3afe728 100644
--- a/tox.ini
+++ b/tox.ini
@@ -34,7 +34,10 @@ commands =
     env TEST_EVENTLET=1 bash tools/pretty_tox.sh '{posargs}'
 
 [testenv:pep8]
-commands = flake8
+commands =
+  flake8
+  # Run security linter
+  bandit -r oslo_db -x tests -n5 --skip B105,B311
 
 [testenv:venv]
 commands = {posargs}