Added bandit to lint for security issues.

tox.ini

@@ -9,6 +9,7 @@ envlist =
     configcheck
     pydocstyle
     isort-check
+    bandit
 
 [testenv]
 deps=
@@ -25,6 +26,7 @@ deps=
     flake8,flakeplus,pydocstyle: -r{toxinidir}/requirements/pkgutils.txt
     isort-check: -r{toxinidir}/requirements/test-ci-default.txt
     isort-check: git+https://github.com/timothycrosley/isort.git
+    bandit: bandit
 sitepackages = False
 recreate = False
 commands =
@@ -51,7 +53,7 @@ basepython =
     3.5: python3.5
     3.6: python3.6
     pypy: pypy
-    flake8,flakeplus,apicheck,linkcheck,configcheck,pydocstyle,isort-check: python2.7
+    flake8,flakeplus,apicheck,linkcheck,configcheck,pydocstyle,isort-check,bandit: python2.7
 
 [testenv:apicheck]
 setenv =
@@ -67,6 +69,10 @@ commands =
 commands =
     sphinx-build -j2 -b linkcheck -d {envtmpdir}/doctrees docs docs/_build/linkcheck
 
+[testenv:bandit]
+commands =
+    bandit -b bandit.json -r celery/
+
 [testenv:flake8]
 commands =
     flake8 -j 2 {toxinidir}/celery {toxinidir}/t