Adding Bandit project to StackForge

This adds Bandit, a Python AST-based static analyzer from OpenStack Security
Group (https://github.com/chair6/bandit), to StackForge.

Change-Id: I0e1892c1a80aefcc18fc677d758ec3afec571073

modules/gerritbot/files/gerritbot_channel_config.yaml

@@ -856,6 +856,7 @@ openstack-security:
       - x-vrif-minus-2
     projects:
       - openstack/security-doc
+      - stackforge/bandit
     branches:
       - master
 

modules/openstack_project/files/gerrit/acls/stackforge/bandit.config

@@ -0,0 +1,14 @@
+[access "refs/heads/*"]
+abandon = group bandit-core
+label-Code-Review = -2..+2 group bandit-core
+label-Workflow = -1..+1 group bandit-core
+
+[access "refs/tags/*"]
+pushSignedTag = group bandit-release
+
+[receive]
+requireChangeId = true
+requireContributorAgreement = true
+
+[submit]
+mergeContent = true

modules/openstack_project/files/review.projects.yaml

@@ -540,6 +540,9 @@
 - project: stackforge/aviator
   description: An OpenStack client library for Ruby
   upstream: git://github.com/aviator/aviator
+- project: stackforge/bandit
+  description: Python AST-based static analyzer from OpenStack Security Group
+  upstream: git://github.com/chair6/bandit.git
 - project: stackforge/billingstack
   upstream: git://github.com/billingstack/billingstack
   description: Billing software

modules/openstack_project/files/zuul/layout.yaml

@@ -3483,6 +3483,11 @@ projects:
     gate:
       - gate-aviator-tests
 
+  - name: stackforge/bandit
+    template:
+      - name: merge-check
+      - name: noop-jobs
+
   - name: stackforge/billingstack
     template:
       - name: merge-check