test: bandit CI

.github/workflows/main.yml

@@ -154,3 +154,21 @@ jobs:
           autorest --python --help
           $HOME/.autorest/\@autorest_python\@*/node_modules/\@autorest/python/venv/bin/python -m pip install --upgrade setuptools
           pytest --no-cov --regenerate-client diracx-client/tests/test_regenerate.py
+
+
+  bandit:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - uses: mamba-org/setup-micromamba@v1
+        with:
+          environment-file: environment.yml
+          init-shell: bash
+          post-cleanup: 'all'
+      - name: Set up environment
+        run: |
+          pip install bandit
+      - name: Run bandit
+        run: |
+          bandit --skip B101 -r diracx-{core,api,cli,routers,db}/src/ || true