bandit scan is broken

[Pavlo Shchelokovskyy]

although bandit is integration-tested against oslo.service, the bandit scan is not voting on oslo.service itself.

What's more, currently bandit scan on oslo.service is broken due to legacy bandit.yaml configuration file oslo.service is using [0]

We should fix the bandit.yaml (maybe also moving it to a non-legacy .bandit file) and enable bandit scan as part of pep8 job.

[0] http://logs.openstack.org/18/459618/3/check/legacy-bandit-integration-oslo.service/ec906ab/job-output.txt.gz#_2017-10-26_17_12_58_689610

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/516987

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/516987
Committed: https://git.openstack.org/cgit/openstack/oslo.service/commit/?id=de7615e768120956f17c727dc7fe19be2fb01745
Submitter: Zuul
Branch: master

commit de7615e768120956f17c727dc7fe19be2fb01745
Author: Pavlo Shchelokovskyy <email address hidden>
Date: Wed Nov 1 14:58:04 2017 +0200

    Fix bandit scan and make it voting

    This patch removes legacy bandit.yaml configuration file
    and makes the full bandit scan voting as part of pep8 job.

    A single low severity bandit scan violation was found in the
    process and corresponding line is now skipped as false positive.

    Change-Id: I0d432e4621bd89b1e6e74fc2005971d9dea794f9
    Closes-Bug: #1729308

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/oslo.service 1.27.0 release.